
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.mft
File: nID3XsZz_EiUE3dEZP47gW1LrsU.mft (raw, json)
Hash identifier: 0lMx1zw8u4Q9Rhmo1bUyIq3UU2HWekQdAWq81YAj9H4=
Subject key identifier: CA:14:75:AB:40:46:56:B6:44:81:9D:C4:B9:9F:C1:78:5F:09:5B:88
Authority key identifier: 9C:80:F7:5E:C6:73:FC:48:94:13:77:44:64:FE:3B:81:6D:4B:AE:C5
Certificate issuer: /CN=A91FB5C6/serialNumber=9C80F75EC673FC489413774464FE3B816D4BAEC5
Certificate serial: 45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nID3XsZz_EiUE3dEZP47gW1LrsU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.mft
Manifest number: 45
Signing time: Wed 19 Aug 2026 09:09:18 +0000
Manifest this update: Wed 19 Aug 2026 09:09:17 +0000
Manifest next update: Wed 26 Aug 2026 09:09:17 +0000
Files and hashes: 1: nID3XsZz_EiUE3dEZP47gW1LrsU.crl (hash: dcWBohvfVlsrIAll6Kb82KKkeqHR2/05MrSorEEO7wM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.crl
rsync://rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nID3XsZz_EiUE3dEZP47gW1LrsU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:09:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB5C6, serialNumber=9C80F75EC673FC489413774464FE3B816D4BAEC5
Validity
Not Before: Aug 19 09:09:17 2026 GMT
Not After : Aug 26 09:09:17 2026 GMT
Subject: CN=6a8572be-cde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2d:49:99:63:e2:57:cd:db:5b:a8:1b:58:45:
30:94:61:61:ae:7d:87:d7:36:78:f7:ab:c9:3a:33:
87:7f:b6:e2:42:ba:8c:1e:07:cc:08:ea:45:16:26:
f2:3c:e4:3d:de:b3:44:ca:b1:bc:b3:f9:54:c2:85:
88:f4:03:22:70:b8:83:d4:0a:33:ed:55:50:94:65:
ca:56:46:d0:3a:19:46:28:45:f3:97:f2:ec:29:15:
5d:8d:53:f1:c6:0e:19:7e:4a:57:b1:e0:45:99:78:
9f:a0:12:fb:d1:6f:78:0a:e2:69:9e:1b:08:e6:3b:
4e:eb:86:1e:e2:3d:38:f0:2a:36:3d:bb:97:31:0b:
81:6e:df:1e:49:ef:2b:c0:da:65:fe:89:60:21:66:
dc:32:28:1d:d6:1f:ed:f3:5b:66:fb:d8:21:81:d7:
18:6b:15:bc:43:31:73:5b:dc:68:c1:cc:a0:4d:97:
e9:fb:43:59:64:35:a7:7e:c8:8b:31:b7:d8:d9:19:
46:bb:0f:ff:22:a2:cb:d8:e5:d9:ce:0d:80:02:5e:
bc:9e:08:cd:d9:82:c3:bf:46:ee:e1:27:a5:d4:46:
3a:63:eb:3a:e1:b4:3b:da:c9:5a:5b:34:b4:ba:8a:
7a:9c:30:2a:47:39:68:4a:e3:84:96:6b:21:ab:98:
8f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:14:75:AB:40:46:56:B6:44:81:9D:C4:B9:9F:C1:78:5F:09:5B:88
X509v3 Authority Key Identifier:
keyid:9C:80:F7:5E:C6:73:FC:48:94:13:77:44:64:FE:3B:81:6D:4B:AE:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nID3XsZz_EiUE3dEZP47gW1LrsU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9c:9a:ba:cf:2b:83:75:d5:be:50:ea:81:9d:de:a5:91:c0:
ac:e7:1f:4e:b3:db:02:f9:51:3f:df:f4:a2:c6:4d:c0:dc:c9:
60:3a:1c:49:e6:da:29:dc:f7:4d:1b:5f:02:32:b1:52:5d:87:
d4:cd:15:6c:e2:e7:60:32:3a:b7:4c:2a:71:54:e1:e5:ea:63:
49:bc:e9:d6:9b:96:8b:95:da:c2:27:42:3e:b8:6b:5e:cf:47:
63:05:9c:8d:1e:29:17:17:54:b0:f1:5e:45:f3:32:1d:a2:92:
67:2c:cf:be:1e:2f:7b:69:73:d2:23:77:85:a5:af:e7:ba:81:
30:e1:fa:eb:0b:53:a8:de:c0:58:29:8f:87:e0:1b:5d:cd:40:
e3:3c:ee:32:cb:2d:07:89:e0:dc:f9:ca:ec:4f:ee:4a:22:63:
74:38:f5:00:04:a0:5b:d6:40:ed:74:4e:c1:15:97:25:81:df:
62:88:4e:fb:c1:96:f4:64:bb:cc:9b:ef:51:fa:a7:86:62:a9:
18:37:33:c1:0d:b1:ab:8f:e6:2a:8e:28:2d:18:e5:62:82:d9:
c7:3e:0e:86:e0:da:be:a0:20:d9:d7:47:3e:b4:21:af:94:0d:
67:de:da:11:6e:ac:b8:9f:f3:c6:e5:21:92:0b:a5:94:b7:5a:
d8:92:5e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:50 2026 by rpki-client