
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft
File: NtWtbhJs1bGOwUW8dy9JAPlMprw.mft (raw, json)
Hash identifier: IUVPCk3gYKfdZz7OtUCbgKyjNWIT8jOAIq4eJTQjmUo=
Subject key identifier: 2C:C7:7B:C6:C3:BE:88:5A:CC:29:C4:FA:6C:49:3A:8C:75:B1:13:32
Authority key identifier: 36:D5:AD:6E:12:6C:D5:B1:8E:C1:45:BC:77:2F:49:00:F9:4C:A6:BC
Certificate issuer: /CN=A91FD4E2/serialNumber=36D5AD6E126CD5B18EC145BC772F4900F94CA6BC
Certificate serial: 57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft
Manifest number: 57
Signing time: Sun 05 Apr 2026 07:28:12 +0000
Manifest this update: Sun 05 Apr 2026 07:28:12 +0000
Manifest next update: Sun 12 Apr 2026 07:28:12 +0000
Files and hashes: 1: NtWtbhJs1bGOwUW8dy9JAPlMprw.crl (hash: ioO4H87uHEdsB7hoWqUrUHyYe0LpY3ODsVZ4mSqtDvI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.crl
rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:28:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD4E2, serialNumber=36D5AD6E126CD5B18EC145BC772F4900F94CA6BC
Validity
Not Before: Apr 5 07:28:12 2026 GMT
Not After : Apr 12 07:28:12 2026 GMT
Subject: CN=69d20f0c-ba53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:9d:f2:d9:d6:83:b9:85:dc:b8:60:d5:d2:
65:1f:97:ff:b2:4c:24:bb:d3:17:3f:97:cb:65:10:
91:5a:49:9c:3d:e9:51:a3:a0:a3:8b:11:a4:ec:23:
ad:18:a1:52:f8:46:5f:a0:2c:c2:5c:48:62:fe:00:
23:70:49:63:98:76:49:e8:f8:da:bf:9e:53:fe:40:
93:43:df:c2:6c:cb:ce:69:9d:04:aa:3d:7b:64:31:
a6:97:2e:5c:a0:d1:b4:f5:15:1d:fb:9e:dc:0a:f9:
d2:5e:bb:48:a8:da:49:8e:3c:8d:aa:fc:ff:5f:df:
27:ce:4d:4b:b3:b4:f6:4a:93:9f:2d:8b:c5:a7:89:
fb:26:05:60:01:64:90:c3:f1:ba:c8:dd:5b:39:f8:
6c:bd:53:88:3d:74:c5:07:a9:e8:1e:6a:7a:57:ef:
d7:82:c4:9f:d3:21:96:31:e6:69:8e:5b:32:27:97:
59:16:f1:59:c0:5a:d4:9f:a8:c8:29:eb:fe:13:18:
da:bb:56:8d:80:2f:0a:b4:b9:51:40:c4:17:f8:47:
3a:da:35:33:74:19:ab:77:4d:d3:33:55:b4:fa:1f:
14:b5:3b:a4:49:d5:03:b0:f6:e5:65:49:6b:03:25:
cb:f2:99:71:ec:0a:fb:b8:d9:ff:08:5b:5b:06:af:
5e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C7:7B:C6:C3:BE:88:5A:CC:29:C4:FA:6C:49:3A:8C:75:B1:13:32
X509v3 Authority Key Identifier:
keyid:36:D5:AD:6E:12:6C:D5:B1:8E:C1:45:BC:77:2F:49:00:F9:4C:A6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f3:0a:4e:9b:d4:34:a8:cd:c7:84:f5:d3:43:f2:c9:cd:36:
7b:57:ab:66:64:fc:95:69:f7:81:04:dc:62:f4:eb:5d:59:b2:
6c:8f:18:d1:9e:da:aa:91:f7:ec:69:2a:d2:91:6a:db:84:c9:
f9:a9:3d:0f:aa:70:d5:d4:aa:a5:68:9e:f4:b0:0a:1f:fa:e3:
f7:ee:b2:6c:0c:fa:63:ae:d4:c1:19:c1:82:75:b6:43:d9:82:
d5:be:f5:3f:f7:86:18:7f:b6:ac:0c:d6:4e:26:ae:93:14:16:
88:3e:83:d1:49:14:72:b7:a3:b9:1a:b9:c7:3b:e8:d8:29:5b:
51:84:13:df:e1:30:e5:79:ad:4d:eb:8c:de:7a:c4:d2:7a:9b:
a2:ef:71:06:29:e8:a0:50:93:4d:cb:8f:d9:2b:6d:54:e5:27:
52:e7:74:d7:53:50:5c:36:81:e6:4b:2c:76:23:96:c5:fa:65:
9d:d0:48:e3:cc:ad:09:5b:a9:a5:cb:4b:b8:97:d5:45:98:6f:
77:2f:bf:39:38:fc:6d:13:b2:09:13:b6:70:d7:66:57:5c:7c:
81:f3:b2:13:8b:b0:41:9e:df:e5:70:c2:ae:8e:a3:17:d5:17:
7c:d4:c6:ac:ca:20:a6:b0:e9:13:03:5c:dd:04:f0:0c:6e:41:
70:1e:29:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:46:37 2026 by rpki-client