
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
File: Ntd-kkOrui_VSWopGDC304sLy8Q.mft (raw, json)
Hash identifier: HtJCGHSrHEUOXUab2SOp+82XqQ52dOqiP4ClwCbkKyI=
Subject key identifier: CC:03:1E:A9:77:38:16:62:D0:1C:5C:6D:AC:3C:70:1B:E0:70:B1:C0
Authority key identifier: 36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4
Certificate issuer: /CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
Certificate serial: 09D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
Manifest number: 09AD
Signing time: Sat 26 Sep 2026 20:04:26 +0000
Manifest this update: Sat 26 Sep 2026 20:04:25 +0000
Manifest next update: Sat 03 Oct 2026 20:04:25 +0000
Files and hashes: 1: Ntd-kkOrui_VSWopGDC304sLy8Q.crl (hash: VfTYGmrafXwSXn8PjCrTN9j5qPljVEZE+67gerD0c8Y=)
2: 0F91DE9EAD4C11EB903C150DC4F9AE02.roa (hash: 2MWq2gYgL8Z2r2vMKeBL4wxSZIjEodsX3g/1Rc+PbcA=)
3: A58B9338AD4A11EBA6B48687C4F9AE02.roa (hash: JFLo1Ja1paalAQ9cRjNBAw9+CXjqmX6hCmHw3VDuOWQ=)
4: B453EBC4BB4011EAAF70B028C4F9AE02.roa (hash: lT94xNEkm0/RuJcMLykdff4mRseMOoMW/OqsJc8kVvg=)
5: 72E60DEA3CC911EDA5EBD21DC4F9AE02.roa (hash: z5nXpQYggF7FtxvjRhPO50T8ACMAQ3fNgZEPR5O1d4k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl
rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 18:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2517 (0x9d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91452AC, serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
Validity
Not Before: Sep 26 20:04:25 2026 GMT
Not After : Oct 3 20:04:25 2026 GMT
Subject: CN=6ab8254a-b33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e8:53:b4:9e:5d:6c:78:25:d5:51:2f:5d:2e:
c3:56:62:34:4d:2e:9e:db:3e:5a:1f:95:ad:e6:fc:
7b:02:f2:02:31:90:40:f4:34:4a:94:08:87:cc:a2:
1e:cc:3d:f8:67:0d:82:ff:fa:cb:c2:39:1e:73:c4:
47:81:91:c1:37:05:d5:c7:84:dd:d1:8e:08:a7:54:
5f:96:a2:7c:50:37:77:d2:03:4f:0c:60:b3:43:60:
f9:03:1b:c6:5e:54:9d:11:52:5e:72:0e:9a:ee:7e:
12:8c:bd:8f:9d:dc:ea:44:a6:f2:d2:29:d1:7d:92:
cd:b8:97:67:52:b7:90:59:c7:65:0c:5f:d5:da:93:
a6:d7:c9:54:fa:ba:63:25:73:6b:2a:80:b8:1f:7e:
6d:7b:96:a7:8b:9b:06:47:f2:db:00:d4:54:4d:43:
f5:1b:9e:3b:3a:1e:18:9a:b0:bc:d2:31:0c:55:9b:
64:3f:75:de:90:51:30:2d:37:ac:80:e0:e7:7f:88:
88:50:84:e1:2d:72:2d:d0:76:f8:ac:c6:f3:ec:61:
d6:83:69:16:90:fc:a0:ab:37:7f:13:9e:1e:d8:bf:
c3:4f:c2:b6:74:b6:fc:f3:9e:bd:9e:de:5c:71:88:
78:71:24:53:5c:6a:0e:78:d5:74:42:62:9a:f5:39:
f4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:03:1E:A9:77:38:16:62:D0:1C:5C:6D:AC:3C:70:1B:E0:70:B1:C0
X509v3 Authority Key Identifier:
keyid:36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:54:64:e1:af:fe:65:2a:77:3a:be:a5:91:ef:e2:6e:3b:68:
f3:f5:e2:90:a8:8e:92:7a:94:80:38:ce:75:37:34:08:8e:8c:
6a:65:ff:45:61:24:59:c8:84:5d:9d:f8:10:f3:ab:4e:1a:d9:
86:9b:bd:20:17:ea:00:3d:5f:6b:b4:1c:bb:96:bd:3f:4b:f4:
35:ff:2a:9b:ac:90:4f:80:ff:a4:02:c2:f8:d8:0a:8f:b1:9b:
6c:11:d0:ec:8d:50:23:41:99:6d:c1:42:63:f8:a0:a2:8e:bc:
4e:ec:83:7c:88:bd:1e:cb:13:4a:82:92:b3:64:63:2d:48:92:
f7:aa:82:ce:7c:9d:2e:c3:67:64:4a:28:75:e3:4e:7d:59:19:
84:9c:f6:b0:fe:35:ca:33:d1:29:9f:b5:98:20:cc:2b:f9:86:
20:e5:82:bb:ee:16:65:46:ab:c5:6c:82:91:63:30:e4:d9:62:
b2:26:2a:93:54:66:c9:6f:36:a5:0e:2f:46:8f:9b:b9:cf:47:
d9:7c:e1:06:90:8f:d2:ca:d1:80:27:10:af:4e:93:d8:1c:b7:
5d:bc:3c:51:6d:85:5b:df:21:84:69:0b:34:04:3c:53:f7:f9:
19:5a:3c:a2:92:f8:a6:9b:bf:78:11:3e:f8:a4:4d:d6:30:1e:
32:84:00:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:44:14 2026 by rpki-client