
$ rpki-client -vvf rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft
File: NtqOcqrHflUzc5DvTGHJVAtFldc.mft (raw, json)
Hash identifier: EdlIgGq5+sQZdkWeZcvU7Kh7kh1gQIT8+yk5rsb/Tt4=
Subject key identifier: E4:88:00:80:8E:9D:1E:9E:0B:CE:4B:4B:40:0C:63:28:98:2C:C2:44
Authority key identifier: 36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7
Certificate issuer: /CN=A91577A2/serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7
Certificate serial: 0AF6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft
Manifest number: 0ADC
Signing time: Tue 28 Jul 2026 19:45:01 +0000
Manifest this update: Tue 28 Jul 2026 19:45:00 +0000
Manifest next update: Tue 04 Aug 2026 19:45:00 +0000
Files and hashes: 1: NtqOcqrHflUzc5DvTGHJVAtFldc.crl (hash: r2anxT81ZXkNSq95YelOcsj6x6NGfHAA6bkSgQ6eHr8=)
2: 6B5765BC499211ED879F2D11C4F9AE02.roa (hash: /vzrtqQCcQVSvHagWxuB+gMULE9rVx3mbboeBNca//A=)
3: 6A23E166499211ED879F2D11C4F9AE02.roa (hash: Qr7OnU5cwXgYQ6DyrDnDHL3zNQ6VCMQTENBCUIMJfFg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl
rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:45:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2806 (0xaf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91577A2, serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7
Validity
Not Before: Jul 28 19:45:00 2026 GMT
Not After : Aug 4 19:45:00 2026 GMT
Subject: CN=6a6906bd-c34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:01:1f:f0:f5:bd:1d:bf:47:e6:c5:1a:15:
0f:57:f9:4c:2a:2a:9f:fe:15:dc:c1:d9:2d:11:c1:
cf:a3:5b:ce:df:df:53:82:17:fb:14:d8:c1:13:8e:
5f:35:d5:39:55:73:63:f5:e3:24:69:c5:ce:e5:d4:
13:80:af:31:0f:6b:38:c4:ca:07:c4:35:6b:0f:a6:
a0:f2:d3:54:65:8b:1d:f7:3a:ef:b9:6f:9e:a6:11:
27:cf:cc:b9:3a:bf:15:b3:76:53:98:a0:ff:6d:ec:
cf:d1:75:5a:46:b2:be:94:81:f1:df:32:cc:1b:6d:
c5:c0:52:78:d6:20:63:57:6d:f0:6b:8e:28:83:b5:
17:d6:c3:e6:7f:05:35:30:d2:df:37:d9:d9:e4:b7:
70:ab:dd:3c:7c:15:1e:57:87:d5:64:f0:ba:59:7b:
02:ec:dc:66:79:a0:df:55:55:b3:56:db:c0:23:90:
3b:8b:8e:ac:64:68:e1:d5:3c:e2:2d:ea:19:38:13:
a3:2b:b2:85:8c:31:7d:6b:b4:0b:1b:6e:8f:ad:e9:
30:13:a8:a2:a4:69:cc:a5:f4:75:b0:bb:10:fb:d4:
80:dd:4b:d0:4c:72:a8:0f:f1:01:2d:f6:da:7e:c2:
f6:68:4c:42:1d:1a:51:f4:ea:1e:6a:35:f7:87:b4:
2a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:88:00:80:8E:9D:1E:9E:0B:CE:4B:4B:40:0C:63:28:98:2C:C2:44
X509v3 Authority Key Identifier:
keyid:36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:c5:67:ac:16:f4:38:31:c6:b5:68:76:ff:7f:d9:ee:f3:e6:
39:4d:73:a1:59:8a:59:29:d1:92:a6:fe:19:58:e9:a4:10:77:
2c:b1:f6:2f:9e:e3:d6:02:a6:6c:0e:7f:72:c6:97:34:f7:5e:
dc:dc:ae:1a:c7:bd:61:2b:f3:5b:b0:33:05:e9:52:dc:20:59:
f5:c5:7d:77:11:17:ff:70:2d:c5:d6:17:c2:69:10:54:d5:bf:
9a:d6:4e:8e:ae:04:b8:5c:b7:e9:7d:69:79:58:45:00:cc:39:
b2:6a:f2:6e:6a:eb:6e:19:1b:c8:11:4a:b5:b5:96:10:09:5a:
5b:ef:4d:f5:0a:b0:05:e4:35:f1:02:20:48:35:6d:3d:a9:ca:
4d:50:ab:6c:08:2e:6a:6b:55:d4:61:fb:9b:68:8a:ab:9d:5c:
53:d0:eb:b6:48:07:00:b9:5e:00:4a:d9:47:16:79:7f:af:90:
64:a0:63:75:9e:2a:2e:ec:75:44:b7:6a:43:1a:e6:03:e0:2c:
5d:d5:0a:13:dd:34:fe:0c:0f:8b:7b:58:58:33:a5:0e:90:7e:
16:5e:39:25:a0:55:24:2f:7e:68:b4:a4:59:4e:eb:2e:f2:a2:
0a:aa:ea:16:45:78:21:4b:b2:44:5a:45:d6:8f:5a:b1:4a:5a:
05:5a:40:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:15:55 2026 by rpki-client