
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
File: nhW8ueM67e2saArIyYFuEVkFyiw.mft (raw, json)
Hash identifier: qKC7S5emYCsIqdn0orXVfjrac1NbYGFnLIXF+4EN1cw=
Subject key identifier: 08:1F:6E:DD:8E:56:9F:ED:6B:D4:B8:15:0A:F3:10:6A:91:1E:4B:05
Authority key identifier: 9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C
Certificate issuer: /CN=A91F9B3A/serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C
Certificate serial: 1789
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
Manifest number: 1779
Signing time: Sat 04 Apr 2026 16:29:52 +0000
Manifest this update: Sat 04 Apr 2026 16:29:51 +0000
Manifest next update: Sat 11 Apr 2026 16:29:51 +0000
Files and hashes: 1: nhW8ueM67e2saArIyYFuEVkFyiw.crl (hash: HDIs6XzkKABBvLma3/WXuR0v2BC0UlU29rMX2K2fFWs=)
2: 7A7A6AC6234311EA90D15227C4F9AE02.roa (hash: pOUuDNhh+S+06YvmHHO2sLszLURz3ht9lYFbPAGfK8E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl
rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6025 (0x1789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9B3A, serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C
Validity
Not Before: Apr 4 16:29:51 2026 GMT
Not After : Apr 11 16:29:51 2026 GMT
Subject: CN=69d13c80-ca25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0b:fb:1f:84:1e:a4:6f:bb:ad:2a:7e:87:18:
ab:77:d4:0e:b4:e3:43:7c:61:e5:2a:bb:8d:14:02:
c4:29:04:55:ca:a9:66:e2:08:fb:3e:df:bc:10:da:
30:5f:95:37:0a:84:5a:f3:bf:7c:6d:08:04:ee:88:
89:90:35:0c:9d:cf:89:e4:b9:ad:7d:1e:4e:cf:67:
82:f0:01:ed:03:61:fb:f3:be:0f:42:8a:5a:c4:99:
92:9e:2e:9d:dc:43:85:7b:d6:3c:1d:a2:eb:71:26:
94:c1:fd:40:af:db:15:ed:ec:d7:f6:da:1d:e2:57:
a1:bc:23:9a:58:00:98:ce:21:c2:0e:5e:04:7c:a8:
db:1b:2e:4c:18:76:84:4f:21:15:13:f1:4d:f8:05:
07:c8:29:7d:2a:69:89:1e:14:e8:ea:cb:5c:1f:3b:
3f:53:23:38:77:63:19:9b:10:ea:06:e9:d2:99:88:
b5:2b:d6:1f:12:d9:08:ca:12:3e:ec:4e:f5:e0:17:
86:f7:f4:ad:26:c9:f6:ce:7c:69:86:d2:c6:f8:d5:
cd:18:ff:f0:84:9d:82:af:6b:7c:2c:12:21:ac:13:
49:35:bd:43:3f:ab:81:81:b3:72:4d:fe:b4:54:c7:
df:f3:e6:72:9d:4e:43:5f:eb:bc:66:63:91:65:f0:
c7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1F:6E:DD:8E:56:9F:ED:6B:D4:B8:15:0A:F3:10:6A:91:1E:4B:05
X509v3 Authority Key Identifier:
keyid:9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:fe:10:39:77:3d:44:bf:1c:fc:76:d3:f4:c9:cc:ff:00:99:
eb:2f:78:e9:39:92:57:9c:cb:30:05:7f:f2:95:72:fd:88:2b:
b6:fb:e3:35:4c:c5:b1:5f:3c:19:75:bb:4a:c8:9b:07:83:76:
08:b1:64:32:b1:0b:7e:c8:f4:41:4c:14:fd:97:72:7e:c3:51:
42:7b:35:c9:0b:5c:ab:5c:c7:2c:3b:a3:06:39:61:05:9c:ea:
12:d0:8a:c0:91:a4:a7:3a:dd:66:e0:e2:94:7b:b5:cb:9e:ae:
00:ec:7b:5e:ba:1a:21:f4:8b:f1:c0:18:78:01:ff:29:4a:c1:
bc:b8:c0:db:a4:96:83:42:ad:ca:a1:31:79:c1:06:da:dc:40:
e8:a9:ff:42:6b:b1:2f:b8:a5:92:47:a4:6f:2e:e1:bf:26:f5:
5c:bc:17:2b:44:da:79:77:dc:cc:b9:ca:ec:96:3f:24:a9:fc:
70:3d:fc:01:22:38:39:b1:25:a3:7d:76:59:13:b6:ef:59:9f:
e4:13:e9:13:40:b9:c8:a7:3e:6d:5e:7d:a0:37:9f:ff:05:8c:
fd:03:a5:02:d6:de:4b:e9:89:d8:03:aa:32:5d:1a:b3:66:50:
ca:fc:0b:3f:e0:fa:8c:7f:04:96:19:15:bc:6c:d4:cf:b7:17:
28:3e:76:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:00 2026 by rpki-client