
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
File: nTQUKDsie49RLzBfKs20PN6eTRI.mft (raw, json)
Hash identifier: gZ+k0MAAj6A/y1O0axJ0JolykLYrvlAUG0dHyYo39mo=
Subject key identifier: E3:8A:DD:DD:C9:2B:AA:DD:D6:FC:7E:C9:2F:D4:F4:DC:3D:A2:65:E2
Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12
Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
Certificate serial: 026F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
Manifest number: 0230
Signing time: Mon 21 Sep 2026 03:07:56 +0000
Manifest this update: Mon 21 Sep 2026 03:07:55 +0000
Manifest next update: Mon 28 Sep 2026 03:07:55 +0000
Files and hashes: 1: nTQUKDsie49RLzBfKs20PN6eTRI.crl (hash: E29LhuCoRfeBXVlsXzejIerDo16zZYzXYn/rRjk82LI=)
2: EC985F92AD6D11EE83DA6253C4F9AE02.roa (hash: BmXwbaUB2PnwCtWWwqTCrL/Z4ZUCXb6in34aW4SAhII=)
3: 551036FCF1CA11EFA1495230C4F9AE02.roa (hash: ph9mjxQXcLl4fEECl4pEGWMTp7mLbB/lR7kFkW96rzY=)
4: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (hash: RuIzPpPmU5SYBxbzVmTPm1exsa1irL+SD8QrPzFj6WU=)
5: 3C880EBABEEF11EF9178186BC4F9AE02.roa (hash: gDBNV8FCQoQRlF4+Z0of3x2gK+wLXaHl7XFSFbaKadM=)
6: 908E69B20D4311F0B83AB36BC4F9AE02.roa (hash: 0rCihLa1R/JwK4jlGINRooaKzW7UBmX+YQfpTQsJlgY=)
7: 31C9441E68ED11F0BA447B41C4F9AE02.roa (hash: Tw/mmccci9TsCg4wjjeIfCh0v/cTONBZG05kzKfAujc=)
8: C75B642268F211EFB7A6A06EC4F9AE02.roa (hash: cMO5zU9AD/RoFLcnPT+DXNczqdbBJpb9yT+lZHAEick=)
9: CA364B681A1711F0A1D93523C4F9AE02.roa (hash: VMXxFIYcOcmwdzE0TfKotJbGv4ASOkRQEsgw2BaIwTw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl
rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623 (0x26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
Validity
Not Before: Sep 21 03:07:55 2026 GMT
Not After : Sep 28 03:07:55 2026 GMT
Subject: CN=6ab09f8b-4cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:a0:4a:bb:d1:bd:38:15:1a:e3:c1:10:65:
e9:3e:a6:1a:1a:69:b4:d5:ea:58:b1:ba:2c:f7:98:
21:74:92:10:6a:20:7a:28:55:44:d0:6b:bb:17:64:
49:9c:5d:4f:4d:de:cf:d4:c5:cf:e7:f4:77:3a:83:
85:f2:7e:2d:50:1c:70:5e:64:b6:0a:c5:ac:4b:e0:
ff:9b:14:62:c0:62:a6:e9:f7:b8:1b:2d:ee:d7:40:
57:da:47:d3:8c:d9:af:8b:a1:9d:2c:f6:9e:d1:e2:
23:e7:57:84:75:e9:0f:3c:fd:a0:ae:24:d8:2b:21:
21:db:24:26:69:0f:da:e6:0b:7c:63:91:d0:d6:1b:
04:2f:57:0a:4c:fb:3f:2b:e1:e8:02:d5:de:e7:03:
f7:86:1b:65:65:f3:2d:6e:97:81:a0:f0:9b:f8:a5:
1a:45:dc:53:9c:9d:e6:82:5c:ab:70:f0:38:b4:97:
fc:c0:6f:d2:11:97:9a:09:43:d1:86:70:15:ce:98:
4c:d0:0e:ea:df:9a:91:49:59:3a:a5:c8:b7:f1:e7:
ff:63:96:61:a7:97:88:f7:64:a0:6f:dc:30:00:35:
46:a4:d7:fb:0d:90:57:17:9e:79:f3:3c:43:47:ec:
b5:a4:20:a5:26:e8:28:76:c0:18:1c:86:5e:6b:5e:
23:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8A:DD:DD:C9:2B:AA:DD:D6:FC:7E:C9:2F:D4:F4:DC:3D:A2:65:E2
X509v3 Authority Key Identifier:
keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:89:4b:34:55:a1:ac:06:d4:69:f6:da:7b:04:77:fd:27:39:
51:40:67:d7:7c:a5:78:39:a6:4d:d4:8f:d2:dd:17:b0:53:64:
95:ca:f6:28:43:dd:01:a8:08:0b:75:ba:0c:63:ab:8b:0c:fb:
f2:c5:af:2b:f0:6b:22:d9:8e:66:b5:cf:34:1a:27:8a:1c:15:
0a:99:c8:74:4c:bb:3d:ef:91:c0:23:bf:19:f4:60:73:69:d1:
b5:2f:b6:a6:33:15:cb:fe:8c:87:a9:db:b5:70:b8:d3:d0:cb:
ec:68:04:23:1c:c2:45:3f:69:35:28:af:d9:f4:3a:22:71:db:
d6:dc:c0:b9:8a:2c:94:16:38:69:dd:9b:9a:86:51:ee:e0:5a:
b1:e3:1a:d7:b8:b6:95:33:e4:69:60:d6:74:d2:25:97:64:69:
60:21:f1:2d:8d:30:9c:52:af:1a:29:ef:fb:17:cc:fb:3f:46:
3e:eb:e9:e2:f4:9c:52:d3:65:74:36:b1:61:fd:6b:b8:e1:f5:
ff:e4:c9:7a:ea:3f:fe:5a:b7:7b:37:9a:53:df:1d:64:5c:71:
f6:56:b1:4b:a6:0b:3a:e0:5a:e2:b8:8a:dd:e5:53:c9:ea:75:
09:64:dc:bb:26:21:e8:8c:e9:a1:12:76:ce:c1:f1:e4:21:da:
28:87:91:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:06:33 2026 by rpki-client