
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft
File: ntVkKdGun2AE-2-2eI6T-vYiV1k.mft (raw, json)
Hash identifier: Z973pCZ3z0Fpw3xJjubPi0FuriU8MlTsrssim7lJU2Y=
Subject key identifier: 25:5A:7D:DF:A2:17:DC:2F:50:A4:A1:57:37:C7:01:DF:F8:85:9A:97
Authority key identifier: 9E:D5:64:29:D1:AE:9F:60:04:FB:6F:B6:78:8E:93:FA:F6:22:57:59
Certificate issuer: /CN=A9142769/serialNumber=9ED56429D1AE9F6004FB6FB6788E93FAF6225759
Certificate serial: F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft
Manifest number: EE
Signing time: Mon 21 Sep 2026 06:23:17 +0000
Manifest this update: Mon 21 Sep 2026 06:23:16 +0000
Manifest next update: Mon 28 Sep 2026 06:23:16 +0000
Files and hashes: 1: ntVkKdGun2AE-2-2eI6T-vYiV1k.crl (hash: k2Y0Z+7gQK9qTjczdmSiIMJCOLKv9WTfQdG3ncMk308=)
2: C8B7607C4B8D11F0B198C040C4F9AE02.roa (hash: /3jM5BkK6pvPgFqYvCzaq1dAThzpXod/u92p3Udy9No=)
3: C96601404B8D11F0B198C040C4F9AE02.roa (hash: TH3SDW9AHmv0LGt2HufenTbLpH3GqdPQgH6iOmrGdVs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.crl
rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:23:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142769, serialNumber=9ED56429D1AE9F6004FB6FB6788E93FAF6225759
Validity
Not Before: Sep 21 06:23:16 2026 GMT
Not After : Sep 28 06:23:16 2026 GMT
Subject: CN=6ab0cd54-d6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8d:2c:d7:9d:ed:2b:95:2f:2f:d3:e6:ff:81:
a7:f7:2b:8e:9f:b0:9c:07:9d:24:de:1e:5c:f2:6f:
fe:6e:a6:58:70:b9:7b:e6:d8:b3:f7:69:bd:b2:7b:
ea:ee:aa:16:18:53:26:ad:85:ca:23:ca:17:af:18:
83:60:e5:d9:88:79:da:0b:df:a3:17:ed:5a:85:5a:
1d:7a:46:f1:99:d4:19:a6:61:46:6a:4e:78:1f:7d:
0f:b3:bb:21:45:93:b9:96:5b:b8:67:e9:2e:b5:a8:
63:dd:d6:7e:89:9a:9a:d1:cb:43:3e:8c:8d:89:fb:
21:fc:69:ab:68:85:2a:4d:7a:50:fa:9a:ff:6f:9b:
79:1b:87:52:71:2d:23:18:57:e6:41:1b:63:79:0d:
af:71:82:c9:1d:ae:32:5a:bd:0b:bd:9d:4b:f9:63:
02:5a:c5:a1:be:eb:4c:88:ab:77:3d:53:b3:59:8a:
b4:ee:0a:2a:2a:34:f8:67:fa:91:b1:a1:a3:55:f6:
bd:6f:73:4d:ce:d6:28:b3:6b:cd:a4:65:3b:a0:02:
31:c3:8e:8c:73:ff:b7:dd:9f:0d:a0:d3:04:43:03:
f3:c8:6e:f1:fb:c4:ad:d5:e2:0b:e8:be:f4:38:72:
d6:b1:53:63:21:71:91:e9:cb:ba:0e:be:53:2d:d2:
bb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5A:7D:DF:A2:17:DC:2F:50:A4:A1:57:37:C7:01:DF:F8:85:9A:97
X509v3 Authority Key Identifier:
keyid:9E:D5:64:29:D1:AE:9F:60:04:FB:6F:B6:78:8E:93:FA:F6:22:57:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:88:c5:6e:11:7b:5d:82:b7:e6:95:97:46:1b:b4:18:13:1e:
b1:e0:b8:54:bb:a4:ea:d6:53:22:d5:9a:48:63:10:e9:2d:a3:
89:45:1f:3a:90:ad:c3:0d:e0:e9:d1:42:21:06:db:68:28:3d:
58:25:44:4f:4e:92:d1:e2:9a:ff:d4:0d:5f:03:19:53:8b:8c:
d4:c3:8d:b0:c5:77:9f:b2:6b:82:ae:6a:42:15:27:73:1d:4f:
b9:76:97:88:24:d3:93:cd:b1:da:ba:6e:d0:0d:eb:b0:99:c3:
c7:ee:cd:81:ef:08:91:62:ed:f7:4b:46:63:97:69:e7:f4:f9:
62:35:7e:4b:5e:a0:fc:ac:1f:46:b4:1c:8e:88:85:b2:d2:6b:
60:09:a1:c1:31:5b:33:db:01:2d:6d:d2:27:fd:bf:69:7c:62:
a4:ba:cb:99:d3:ce:d7:3d:81:dc:14:50:31:48:0d:67:04:ee:
8d:a8:d6:dc:fb:a8:a0:8f:69:9a:31:92:5d:ad:a6:17:1b:55:
37:a3:03:78:ca:45:6b:53:db:c4:eb:92:b1:58:4a:4d:f8:23:
a7:3d:f2:2c:93:fc:d2:be:7d:2a:4e:93:ef:4d:ed:2a:7a:81:
22:a4:f0:20:41:24:b5:21:a3:6d:1c:27:1a:55:67:92:2a:d1:
8b:01:4d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:08:38 2026 by rpki-client