
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft
File: njgJAcx6AZSIf9LW9saTbbKzeWY.mft (raw, json)
Hash identifier: fU9qHUbTmulyX/gzu/lUzvsG18js367nwV4957nRyM8=
Subject key identifier: A5:B8:FE:33:A8:5B:18:10:61:8A:2D:C0:A0:7C:46:BA:B5:88:5B:EF
Authority key identifier: 9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66
Certificate issuer: /CN=A91FCD2A/serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966
Certificate serial: 3523
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft
Manifest number: 3523
Signing time: Sat 04 Apr 2026 14:58:34 +0000
Manifest this update: Sat 04 Apr 2026 14:58:34 +0000
Manifest next update: Sat 11 Apr 2026 14:58:34 +0000
Files and hashes: 1: njgJAcx6AZSIf9LW9saTbbKzeWY.crl (hash: dJ5ckjEBYkIJXnrYsv6wUsRAGuTSqN4BNfFw6mNFMgM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl
rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 14:58:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13603 (0x3523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCD2A, serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966
Validity
Not Before: Apr 4 14:58:34 2026 GMT
Not After : Apr 11 14:58:34 2026 GMT
Subject: CN=69d1271a-a6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f8:e8:14:f8:e9:b4:74:57:95:de:92:4f:8b:
7a:e1:a0:be:dd:6f:0c:97:cf:69:83:cf:c9:51:50:
5a:4f:54:0d:93:70:d4:74:42:69:73:fa:49:e2:4a:
03:96:8c:d6:78:6e:fa:2f:fa:97:1b:b1:c7:9b:48:
9a:ce:00:11:22:f3:be:e8:a0:0c:17:37:bd:a0:39:
0f:bc:12:61:db:d1:72:36:ca:3c:1b:d7:f0:6d:70:
30:65:ea:4b:89:d4:a7:ea:b3:0b:83:ff:27:4a:54:
fd:91:cc:08:39:2a:72:04:21:0b:4a:92:c4:56:d2:
93:33:5a:6c:3f:c3:6a:3c:e0:96:a0:b9:26:6b:27:
fe:11:46:73:a3:25:ec:41:01:5a:49:35:79:1c:f2:
aa:3a:a5:ca:c4:15:c3:dd:60:dc:ea:19:8e:b1:f2:
8b:d7:ff:ed:72:fc:8e:6f:4f:57:8f:58:50:a0:65:
f5:e4:23:bf:84:71:07:9b:63:4a:14:8a:50:ba:56:
3f:c4:0e:90:f0:c4:b0:77:58:3a:38:da:91:9f:c3:
05:05:38:bf:5a:3c:d3:28:d7:b5:75:4a:f9:cd:5b:
a1:f0:f8:03:85:d5:1f:6e:b0:dc:0b:e7:bd:3f:10:
23:9b:79:d3:c3:ed:79:b0:0d:f2:6d:e8:49:47:a7:
a0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B8:FE:33:A8:5B:18:10:61:8A:2D:C0:A0:7C:46:BA:B5:88:5B:EF
X509v3 Authority Key Identifier:
keyid:9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:f8:d6:aa:19:e0:90:c5:02:d5:47:18:fd:7e:1f:3e:4f:33:
a6:01:5a:7f:b2:c5:e0:d1:7a:c3:26:31:c5:4d:87:53:2b:5d:
2e:c1:f4:e0:a6:3b:2e:05:75:31:73:e2:c5:1f:9e:48:31:31:
4a:53:62:e6:d1:84:21:6c:13:a9:f6:7a:44:0d:f9:43:55:1a:
5c:13:64:61:90:d2:78:a2:ac:53:df:2b:09:b5:5e:5d:04:56:
2c:f5:0a:0b:92:65:40:11:b2:29:3c:df:a2:a6:17:18:fb:5d:
9f:5b:4a:4f:65:0c:c7:7b:11:2d:29:06:b6:a8:cc:b9:64:38:
d2:0a:9d:62:67:e6:9d:dd:f6:25:56:1c:d7:7b:b8:cf:24:67:
b6:1b:fd:00:2a:ba:c2:e5:62:37:6f:a7:2f:ff:3b:b2:4f:cc:
ab:2d:fb:81:51:c5:42:03:f6:86:18:fd:1b:ae:07:f1:c4:d1:
4d:bc:b4:9a:68:dd:5b:1f:cf:65:eb:a9:24:5c:6f:75:3b:3c:
30:b7:8f:49:6a:af:f7:e1:e2:3e:63:b3:d8:9e:c6:b1:2e:4f:
3c:83:aa:1a:19:e2:6d:a8:82:69:02:95:80:de:e0:15:12:89:
1c:69:a4:d8:cd:41:83:6a:59:68:e9:71:ca:33:4f:a1:e3:10:
26:b9:ba:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:04 2026 by rpki-client