
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.mft
File: nGKQqKEuiIZBN0PX8QV39DkWnH0.mft (raw, json)
Hash identifier: 9s40gb3vVE/XGvBDqiDv7fgZabRt+gTVxVNdt2DDg/I=
Subject key identifier: DA:CA:56:7A:06:46:60:14:F3:47:0A:40:E7:A9:F6:9C:2E:E6:22:E1
Authority key identifier: 9C:62:90:A8:A1:2E:88:86:41:37:43:D7:F1:05:77:F4:39:16:9C:7D
Certificate issuer: /CN=A91FCA47/serialNumber=9C6290A8A12E8886413743D7F10577F439169C7D
Certificate serial: 51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nGKQqKEuiIZBN0PX8QV39DkWnH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.mft
Manifest number: 50
Signing time: Sun 23 Aug 2026 07:56:04 +0000
Manifest this update: Sun 23 Aug 2026 07:56:03 +0000
Manifest next update: Sun 30 Aug 2026 07:56:03 +0000
Files and hashes: 1: nGKQqKEuiIZBN0PX8QV39DkWnH0.crl (hash: 87Xp2j7L5p+zG7zmFKc4PrJFK2F5m+iPOqfKdc/Rv0I=)
2: E3BDC64224D411F191B1E656AB833773.roa (hash: AIltHDKkxFZaiNdMv+LKbbe7L1vKTPjxvnacYsn/9PA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.crl
rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nGKQqKEuiIZBN0PX8QV39DkWnH0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCA47, serialNumber=9C6290A8A12E8886413743D7F10577F439169C7D
Validity
Not Before: Aug 23 07:56:03 2026 GMT
Not After : Aug 30 07:56:03 2026 GMT
Subject: CN=6a8aa793-5a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cd:ca:22:0b:19:70:3f:89:77:85:c7:15:63:
f2:e4:9a:82:44:10:56:17:fb:8b:9f:c6:7a:4f:af:
23:a9:44:bc:dc:52:05:24:69:38:05:ba:9c:c6:80:
d3:70:82:c7:68:33:ac:91:d0:ad:50:e6:8a:43:ec:
77:b2:59:e6:90:50:9f:6b:2e:cc:35:f3:80:c7:9c:
65:b7:2a:ca:fa:33:9f:c0:32:c2:1d:32:a0:46:98:
4a:ba:76:96:a0:66:5f:03:dc:91:e9:ce:3c:d9:79:
31:3c:c3:1a:2b:f9:c3:78:61:d2:0b:27:87:3b:bc:
ba:26:0b:e9:c1:28:15:dd:85:c4:1a:1c:11:30:7c:
ae:e4:73:c6:9a:64:d7:81:2d:fd:e4:ec:58:26:cd:
b7:9c:71:77:d3:82:ee:30:ba:87:07:73:40:22:e0:
b4:53:59:de:79:f2:8b:fd:38:d4:b6:9c:64:ef:d6:
cd:c2:d0:24:c4:b3:ef:1a:af:0b:c2:8a:9d:3c:69:
b1:71:46:f6:2a:06:61:c2:12:4e:41:56:33:a3:d5:
0a:09:55:e5:bd:99:ca:39:5c:5b:24:54:65:a7:ec:
60:80:19:04:0c:e4:0d:99:3f:cd:da:38:f9:77:c7:
b8:45:98:5f:0f:8b:1e:8d:cf:d4:50:9e:90:58:1c:
61:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CA:56:7A:06:46:60:14:F3:47:0A:40:E7:A9:F6:9C:2E:E6:22:E1
X509v3 Authority Key Identifier:
keyid:9C:62:90:A8:A1:2E:88:86:41:37:43:D7:F1:05:77:F4:39:16:9C:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nGKQqKEuiIZBN0PX8QV39DkWnH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:fd:2f:4c:5d:22:f9:d1:ff:00:82:66:d1:94:f0:ce:2b:ff:
ae:23:14:79:1f:ba:9a:7f:5a:3b:44:e3:b8:84:19:cd:9e:b3:
b0:b4:10:36:8f:67:d9:8a:1d:6c:02:ba:2b:2a:62:a2:7c:32:
24:31:27:f8:58:ac:f9:61:69:7f:2d:64:44:7f:38:ea:0e:c5:
30:fd:d0:35:20:59:a9:8d:c5:a8:57:1b:cf:2e:55:0d:d3:ac:
ed:5b:f6:77:c3:14:6b:a3:46:1b:0a:28:a2:b4:78:3b:89:6d:
b2:34:8d:c1:8a:02:7e:bc:92:52:78:d3:1c:3c:3c:ed:af:a6:
ee:0c:63:47:9f:36:57:33:6b:df:8e:9d:51:b5:2e:12:97:84:
ac:b8:2e:51:be:35:93:2b:81:1d:d0:cc:83:79:0f:4d:a4:fa:
01:72:b2:c4:2e:a0:7d:82:dc:26:a9:9d:c6:48:1a:5d:70:d0:
76:b9:71:0b:bc:4a:bd:c6:a0:54:6e:e9:06:eb:01:90:de:26:
df:3d:7f:38:fd:27:d5:58:07:af:7b:d0:fa:b6:83:5b:fd:b0:
ba:90:e1:cc:7e:1f:8d:8e:36:05:6e:59:74:5a:70:06:18:57:
3f:3c:ce:a6:57:fe:dd:98:78:e2:8f:03:f9:67:3a:4a:48:17:
2b:2e:a6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 06:45:46 2026 by rpki-client