
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft
File: NtWtbhJs1bGOwUW8dy9JAPlMprw.mft (raw, json)
Hash identifier: /kLeckE7XBYf1jr3kGHIn7AMoJL0BlL17yulzzGd9WY=
Subject key identifier: 50:5A:98:8D:42:79:A7:25:DF:59:A2:BE:3F:BB:8A:3C:AF:F3:1A:61
Authority key identifier: 36:D5:AD:6E:12:6C:D5:B1:8E:C1:45:BC:77:2F:49:00:F9:4C:A6:BC
Certificate issuer: /CN=A91FD4E2/serialNumber=36D5AD6E126CD5B18EC145BC772F4900F94CA6BC
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft
Manifest number: 7E
Signing time: Tue 23 Jun 2026 07:53:33 +0000
Manifest this update: Tue 23 Jun 2026 07:53:33 +0000
Manifest next update: Tue 30 Jun 2026 07:53:33 +0000
Files and hashes: 1: NtWtbhJs1bGOwUW8dy9JAPlMprw.crl (hash: RBei3l9Y5c58EnFDqVFfyO3DjVLiZHXL+oNYOW2/Fv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.crl
rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 07:53:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD4E2, serialNumber=36D5AD6E126CD5B18EC145BC772F4900F94CA6BC
Validity
Not Before: Jun 23 07:53:33 2026 GMT
Not After : Jun 30 07:53:33 2026 GMT
Subject: CN=6a3a3b7d-da0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0d:7d:e2:bb:91:79:77:7e:9e:02:99:56:38:
80:12:8e:be:e7:f7:56:64:00:c5:ca:d1:b9:5b:41:
94:8f:ff:62:ca:54:bb:29:87:e3:e2:7c:30:0b:09:
e4:41:bd:52:ef:ef:a6:ad:49:03:4a:28:74:e7:0a:
ee:dc:af:31:ef:48:76:35:de:e6:da:c0:c3:b4:b0:
c0:ae:bd:ce:d7:96:40:0a:9a:5e:ba:22:b0:91:b3:
cf:91:7c:5b:99:9e:7f:cf:c4:78:a5:c2:3c:de:79:
12:58:62:de:4d:b7:d3:98:81:9d:a1:f2:94:a8:c7:
51:fc:d9:6c:22:55:d3:8a:0b:4f:21:63:da:b5:fe:
a1:24:cc:0a:db:8c:f2:2e:e3:b6:99:b8:0d:c7:38:
83:a0:25:e2:4c:74:af:b0:65:99:75:e4:df:83:6c:
29:d9:d7:b9:c8:75:61:80:32:4b:b0:a7:83:aa:c5:
88:f9:1a:99:5f:f6:44:c2:67:cb:eb:0b:59:97:9b:
d0:7a:83:37:d9:60:f8:5d:a4:22:80:89:93:30:87:
c9:a1:94:10:c3:47:d9:57:81:d3:90:44:7d:f6:1a:
64:a2:62:7a:fe:80:f6:b1:7d:5c:01:96:e2:f4:da:
52:49:52:fc:23:a0:ff:5a:08:91:3d:f4:ef:5a:66:
96:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5A:98:8D:42:79:A7:25:DF:59:A2:BE:3F:BB:8A:3C:AF:F3:1A:61
X509v3 Authority Key Identifier:
keyid:36:D5:AD:6E:12:6C:D5:B1:8E:C1:45:BC:77:2F:49:00:F9:4C:A6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:87:86:38:f7:44:0a:a1:7d:c6:ac:6c:34:86:6d:09:64:3f:
25:02:6a:60:e4:02:15:41:01:b8:0f:c7:21:c4:8b:36:9f:37:
c9:a6:d2:e8:c3:e8:ef:34:cc:51:b4:4a:0c:8c:a2:e5:c8:4c:
aa:c2:c3:c7:a4:03:53:34:0f:a4:e7:66:43:e0:b6:b9:71:dc:
68:1b:23:1b:de:47:d6:90:a0:5d:e0:19:2b:5d:58:f4:40:86:
f4:00:b8:1d:e9:c1:f7:38:cd:0c:a9:94:a7:7c:02:b9:72:2a:
c3:ab:d9:91:f1:51:82:73:67:fe:3e:fc:8e:f6:32:dc:ad:8f:
7b:f3:4c:00:4c:1f:8f:d1:23:0b:52:3e:d7:5a:42:d1:b5:85:
32:22:69:36:a7:92:01:09:56:a5:e7:9b:4e:1b:d2:58:19:78:
92:7d:7b:4b:45:05:8b:bb:3c:17:02:cf:a5:89:89:ff:1d:7f:
e9:9f:5d:12:be:ce:01:f8:c3:f0:4a:93:23:6c:dd:a7:ab:cc:
0f:78:f5:1b:9d:1a:d1:9d:bd:e7:05:3a:cf:8b:a9:08:f9:84:
92:66:d2:8d:3b:bd:01:b2:f2:ca:b8:29:9f:98:79:19:3d:6a:
3d:c5:90:a2:97:47:e9:d5:23:15:bf:66:8d:5d:96:6b:ba:7e:
05:84:05:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:13:15 2026 by rpki-client