
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft
File: Nps-m3tm6PW7l5puLy56rPUA0_E.mft (raw, json)
Hash identifier: 9A7LOPJoruAUnY6BrEHZvvxzhnocKDwhi5QoiqSc5mw=
Subject key identifier: 1B:CF:CB:66:D5:62:09:92:EC:5D:D8:DA:71:E0:87:AB:4F:27:5F:FC
Authority key identifier: 36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1
Certificate issuer: /CN=A91FB8C8/serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1
Certificate serial: 021F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft
Manifest number: 0219
Signing time: Sat 03 Oct 2026 03:34:15 +0000
Manifest this update: Sat 03 Oct 2026 03:34:14 +0000
Manifest next update: Sat 10 Oct 2026 03:34:14 +0000
Files and hashes: 1: Nps-m3tm6PW7l5puLy56rPUA0_E.crl (hash: H3zB+4zR/7JDI3W9Trx7ibQqTEJpv7EWIiMqts9uVNg=)
2: CA5B7DA48ECA11EEA3901581C4F9AE02.roa (hash: yviocZTIT/QN9ZH5Z7jImoFYZZ1ZtuGiFiBRlnTY9io=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl
rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:34:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 543 (0x21f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB8C8, serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1
Validity
Not Before: Oct 3 03:34:14 2026 GMT
Not After : Oct 10 03:34:14 2026 GMT
Subject: CN=6ac077b7-40d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9c:e0:ce:5d:21:35:5e:9c:12:e4:59:a7:5a:
c5:3c:87:4e:90:9e:d0:03:1a:9c:2d:62:b1:01:78:
e3:05:e8:09:1c:c8:a4:e2:d4:a2:16:47:97:49:7c:
b1:8b:d1:e2:e9:bf:60:98:86:58:65:99:f0:7b:9f:
6d:94:f1:ef:30:c0:fe:97:7f:5b:e4:91:b9:fd:e9:
39:c5:65:46:23:af:cc:86:23:a9:de:00:fc:31:05:
00:d4:01:ef:66:89:a4:69:4f:58:ce:3a:a4:e1:b1:
c7:44:42:49:8e:78:77:d2:8e:81:fb:90:1e:ae:58:
a1:e3:ed:6c:dd:2b:cd:8a:f0:8e:96:51:8f:fe:f5:
a8:8a:c4:b0:44:5d:19:ee:62:f0:93:bc:66:44:a6:
bc:25:d8:04:ce:7e:5a:87:7c:c8:d9:18:22:31:e1:
0b:0e:1a:d2:ef:e2:fc:34:44:6a:20:8d:61:14:79:
2a:6d:73:35:d5:01:26:3f:e6:cf:6b:82:b1:d3:7e:
aa:22:73:f7:bb:74:e0:00:00:6d:f4:c6:27:96:6c:
9b:08:0d:27:85:0b:13:33:dd:60:6a:5c:cc:5a:1f:
27:fe:0a:ba:96:b2:a1:17:ce:ec:6f:84:68:c3:8a:
a2:13:c3:37:a1:54:4e:9c:f5:23:15:56:69:f9:d7:
15:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CF:CB:66:D5:62:09:92:EC:5D:D8:DA:71:E0:87:AB:4F:27:5F:FC
X509v3 Authority Key Identifier:
keyid:36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:da:cf:d9:dc:bd:bc:da:e5:73:71:e3:f2:db:0f:9c:92:02:
67:3f:d5:16:d3:26:06:5f:c7:01:fc:86:03:40:99:c5:2f:7e:
ce:02:1f:8f:fd:11:34:02:e7:27:e3:cb:f8:ac:5e:dc:d5:63:
9e:53:79:4a:b7:a1:f7:3a:3f:9d:3c:5c:c9:0b:7d:81:19:0e:
77:fd:8f:35:3e:f1:48:ce:56:ad:f5:19:4c:aa:d3:08:69:32:
0a:15:aa:0b:bd:fb:42:50:a2:6a:53:c2:a2:32:17:d6:17:c9:
02:4f:74:e1:83:da:3f:3f:00:20:22:8a:f3:a6:0c:35:a0:0d:
b9:84:1c:64:39:83:7a:01:01:13:17:54:3c:e4:57:22:d8:19:
b7:d4:c1:f6:1f:ed:ee:00:2e:51:54:de:2c:b0:4c:c5:0c:b6:
4c:85:cf:3c:36:f2:33:db:d0:12:e2:ea:5d:23:d8:c2:7d:16:
c3:b5:50:b9:aa:81:ea:9f:f1:b7:6e:b5:84:dd:7c:b0:08:08:
f5:43:bd:d1:69:f8:54:5e:e3:39:f3:bc:85:e0:9c:7f:44:d9:
4a:d0:ac:c6:22:21:26:0a:cf:29:e1:d4:d1:34:21:31:a6:e1:
ff:7b:d5:00:c5:c7:d0:95:ed:3e:1b:cb:9f:88:9e:2f:3a:ca:
a8:63:f3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:50:31 2026 by rpki-client