
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F0E7/D1D3FC10A29911F1B611126B3211F970/nTE7xowXguZ3HyU_3G8INQJrVNo.mft
File: nTE7xowXguZ3HyU_3G8INQJrVNo.mft (raw, json)
Hash identifier: xRNm91AdXGyksGy1DWSh8IQj5OqLUqEdoBD6d/gS3oc=
Subject key identifier: FC:0B:8C:65:BA:95:30:82:2E:1D:03:77:BE:3B:BB:21:05:63:91:C3
Authority key identifier: 9D:31:3B:C6:8C:17:82:E6:77:1F:25:3F:DC:6F:08:35:02:6B:54:DA
Certificate issuer: /CN=A911F0E7/serialNumber=9D313BC68C1782E6771F253FDC6F0835026B54DA
Certificate serial: 1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTE7xowXguZ3HyU_3G8INQJrVNo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F0E7/D1D3FC10A29911F1B611126B3211F970/nTE7xowXguZ3HyU_3G8INQJrVNo.mft
Manifest number: 1A
Signing time: Sun 11 Oct 2026 09:40:46 +0000
Manifest this update: Sun 11 Oct 2026 09:40:46 +0000
Manifest next update: Sun 18 Oct 2026 09:40:46 +0000
Files and hashes: 1: nTE7xowXguZ3HyU_3G8INQJrVNo.crl (hash: y4KOYp4pC/6h/nk8Md9kOssnL4pDCXubHuUs+yz46f8=)
2: 94A712DAA68D11F1944EAD7A7011F970.roa (hash: ilL8lppGV0lYiCZoG6nM5DzOsD6ZYyAt4gSEkUpXMks=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F0E7/D1D3FC10A29911F1B611126B3211F970/nTE7xowXguZ3HyU_3G8INQJrVNo.crl
rsync://rpki.apnic.net/member_repository/A911F0E7/D1D3FC10A29911F1B611126B3211F970/nTE7xowXguZ3HyU_3G8INQJrVNo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTE7xowXguZ3HyU_3G8INQJrVNo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 09:40:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F0E7, serialNumber=9D313BC68C1782E6771F253FDC6F0835026B54DA
Validity
Not Before: Oct 11 09:40:46 2026 GMT
Not After : Oct 18 09:40:46 2026 GMT
Subject: CN=6acb599e-228d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:9a:4e:2d:1e:ad:93:8e:a0:d8:44:58:92:
33:26:58:fa:60:11:71:08:d0:11:15:91:4e:10:a1:
32:9b:a5:16:64:cc:f2:2f:9e:e4:69:8e:e9:ae:d2:
99:37:21:16:b7:2d:25:58:1d:8b:1b:36:b4:21:d9:
2a:2e:b5:fe:c5:d1:c4:2f:13:26:63:a3:d6:d5:81:
e6:56:38:3a:93:4c:f0:3a:fe:a4:36:f1:20:3f:13:
8a:0d:99:d4:8e:ab:91:20:2a:fe:ee:0f:35:ee:27:
c9:ae:f0:c8:9c:06:5e:e2:74:22:bf:f4:4e:86:31:
3a:b5:48:54:c5:39:a3:c8:43:25:08:d4:af:b3:9f:
cd:8b:76:04:d7:09:2e:57:5b:1b:14:f5:db:33:3f:
fc:2a:52:e4:00:d5:bc:4a:3a:6f:c2:b7:8f:06:21:
0d:b1:b7:5a:73:56:b7:de:e2:e1:23:1d:79:e2:47:
36:ca:b9:cf:cd:97:df:5d:5e:bf:20:f1:ad:e4:54:
1a:eb:50:8f:8e:a3:dd:ba:af:13:86:2e:d8:b2:bc:
41:7e:f4:c0:76:23:e1:fe:f4:fc:e3:51:8b:a2:5d:
17:e9:b5:54:24:f9:a4:0d:35:21:a1:e6:e9:b3:c1:
a9:4c:89:8c:c3:8d:3f:49:cb:43:df:86:25:32:9f:
f2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0B:8C:65:BA:95:30:82:2E:1D:03:77:BE:3B:BB:21:05:63:91:C3
X509v3 Authority Key Identifier:
keyid:9D:31:3B:C6:8C:17:82:E6:77:1F:25:3F:DC:6F:08:35:02:6B:54:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F0E7/D1D3FC10A29911F1B611126B3211F970/nTE7xowXguZ3HyU_3G8INQJrVNo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTE7xowXguZ3HyU_3G8INQJrVNo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F0E7/D1D3FC10A29911F1B611126B3211F970/nTE7xowXguZ3HyU_3G8INQJrVNo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:91:da:66:76:8b:fc:59:6e:28:5b:6f:63:1a:f5:79:02:a5:
60:e7:08:a3:11:93:ed:32:12:59:bb:f8:74:f5:7f:18:b9:b5:
9a:fd:48:e9:a0:53:72:b9:28:e8:80:25:ad:c1:15:12:8f:51:
b4:55:3f:55:94:b3:84:be:da:40:82:10:2e:d6:ae:f2:71:19:
9a:5b:86:93:02:07:b6:b0:3e:31:8e:61:e8:25:39:24:05:64:
76:9f:78:8d:e5:c9:3f:fb:85:e4:48:c2:53:88:f9:15:7e:82:
2e:39:0d:2e:dc:df:9b:75:ac:aa:5f:ef:c8:5f:62:ec:b5:00:
7b:68:15:47:5e:54:f1:58:9a:6e:1d:7d:07:30:c5:d7:5b:fa:
79:9a:24:fb:cd:ce:f1:d6:cb:32:9a:c1:bb:81:4f:8c:70:3f:
30:67:fd:8e:9b:43:6e:f0:fa:bc:9d:a8:22:35:3c:8c:b9:f5:
e7:e4:8b:96:84:d9:b3:61:7e:b4:72:aa:da:20:2e:56:c3:2e:
64:33:c9:62:db:1a:a6:9a:0c:56:f3:c8:86:aa:81:6e:ec:f7:
52:f1:49:56:7a:dd:ac:8c:07:41:f7:43:fb:13:ec:31:b3:19:
4a:32:b1:30:70:dd:27:ae:94:79:f2:b7:e7:c5:58:67:aa:6a:
c1:e8:cf:bb
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
RjBFNzExMC8GA1UEBRMoOUQzMTNCQzY4QzE3ODJFNjc3MUYyNTNGREM2RjA4MzUw
MjZCNTREQTAeFw0yNjEwMTEwOTQwNDZaFw0yNjEwMTgwOTQwNDZaMBgxFjAUBgNV
BAMTDTZhY2I1OTllLTIyOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCyZZpOLR6tk46g2ERYkjMmWPpgEXEI0BEVkU4QoTKbpRZkzPIvnuRpjumu0pk3
IRa3LSVYHYsbNrQh2Soutf7F0cQvEyZjo9bVgeZWODqTTPA6/qQ28SA/E4oNmdSO
q5EgKv7uDzXuJ8mu8MicBl7idCK/9E6GMTq1SFTFOaPIQyUI1K+zn82LdgTXCS5X
WxsU9dszP/wqUuQA1bxKOm/Ct48GIQ2xt1pzVrfe4uEjHXniRzbKuc/Nl99dXr8g
8a3kVBrrUI+Oo926rxOGLtiyvEF+9MB2I+H+9PzjUYuiXRfptVQk+aQNNSGh5umz
walMiYzDjT9Jy0PfhiUyn/LtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/AuMZbqV
MIIuHQN3vju7IQVjkcMwHwYDVR0jBBgwFoAUnTE7xowXguZ3HyU/3G8INQJrVNow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGMEU3L0QxRDNGQzEwQTI5
OTExRjFCNjExMTI2QjMyMTFGOTcwL25URTd4b3dYZ3VaM0h5VV8zRzhJTlFKclZO
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvblRFN3hvd1hndVozSHlVXzNHOElOUUpyVk5vLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG
MEU3L0QxRDNGQzEwQTI5OTExRjFCNjExMTI2QjMyMTFGOTcwL25URTd4b3dYZ3Va
M0h5VV8zRzhJTlFKclZOby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCPkdpmdov8WW4oW29jGvV5AqVg5wijEZPtMhJZu/h09X8YubWa/UjpoFNyuSjo
gCWtwRUSj1G0VT9VlLOEvtpAghAu1q7ycRmaW4aTAge2sD4xjmHoJTkkBWR2n3iN
5ck/+4XkSMJTiPkVfoIuOQ0u3N+bdayqX+/IX2LstQB7aBVHXlTxWJpuHX0HMMXX
W/p5miT7zc7x1ssymsG7gU+McD8wZ/2Om0Nu8Pq8nagiNTyMufXn5IuWhNmzYX60
cqraIC5Wwy5kM8li2xqmmgxW88iGqoFu7PdS8UlWet2sjAdB90P7E+wxsxlKMrEw
cN0nrpR58rfnxVhnqmrB6M+7
-----END CERTIFICATE-----
Generated at Tue Oct 13 04:35:16 2026 by rpki-client