
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft
File: NCaEGmQGa3hlW77KDAH9CfZXBTY.mft (raw, json)
Hash identifier: SyF1Gmdrz74IHjoVzjMuiej8na5lEDTTf7I2B0hm40k=
Subject key identifier: E1:CC:5F:7F:F0:A9:68:5D:4F:E1:E8:CC:0F:8D:39:30:B8:E6:CD:AE
Authority key identifier: 34:26:84:1A:64:06:6B:78:65:5B:BE:CA:0C:01:FD:09:F6:57:05:36
Certificate issuer: /CN=A9157DAE/serialNumber=3426841A64066B78655BBECA0C01FD09F6570536
Certificate serial: 0271
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft
Manifest number: 0271
Signing time: Tue 28 Jul 2026 17:05:50 +0000
Manifest this update: Tue 28 Jul 2026 17:05:50 +0000
Manifest next update: Tue 04 Aug 2026 17:05:50 +0000
Files and hashes: 1: NCaEGmQGa3hlW77KDAH9CfZXBTY.crl (hash: a2uDuh0HEhcbIwdR0Nl9wlfmxS9YANekK/MIo0k5qnw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.crl
rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 625 (0x271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157DAE, serialNumber=3426841A64066B78655BBECA0C01FD09F6570536
Validity
Not Before: Jul 28 17:05:50 2026 GMT
Not After : Aug 4 17:05:50 2026 GMT
Subject: CN=6a68e16e-3ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e5:bf:0c:59:85:a4:fe:5a:87:92:02:a2:a4:
31:f3:71:78:1b:af:4c:2c:51:8b:6a:9b:27:1f:30:
f8:f3:13:4d:43:73:10:33:a1:62:f5:e4:25:63:bf:
a7:53:e0:7c:63:5c:a8:71:68:a2:7f:30:6f:6e:91:
74:41:b0:1a:7a:06:eb:54:d9:07:0e:47:47:16:ed:
13:c1:cd:61:80:02:2f:96:ce:73:2b:21:86:c4:15:
1e:e2:1d:36:4e:76:75:51:49:ce:3e:69:db:47:2d:
eb:a5:db:87:5b:b8:62:c1:eb:d1:81:77:92:61:40:
99:1f:21:37:db:48:06:51:7d:d3:8a:20:42:b6:8a:
6c:84:1f:21:02:37:5c:4f:d1:f0:9b:c2:e8:0f:6c:
e7:88:67:eb:38:38:70:2f:d0:f3:cf:25:2e:c4:63:
27:fd:94:ac:e3:5a:b1:fd:92:4c:e6:df:77:ce:7a:
b0:d5:34:b3:5e:a2:8e:81:89:14:45:a6:2e:e4:2c:
bd:8f:6f:28:4c:53:f3:13:1b:3c:5f:ad:57:85:ff:
b7:bd:4c:be:7f:fe:2f:31:5f:89:1b:42:65:e2:fd:
c7:86:9b:1e:9c:3f:94:3c:06:c6:ba:8e:54:89:02:
39:21:c6:1e:0b:6c:d7:4d:7f:eb:38:f9:73:1e:5b:
c5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CC:5F:7F:F0:A9:68:5D:4F:E1:E8:CC:0F:8D:39:30:B8:E6:CD:AE
X509v3 Authority Key Identifier:
keyid:34:26:84:1A:64:06:6B:78:65:5B:BE:CA:0C:01:FD:09:F6:57:05:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:4a:b7:b2:09:64:e9:af:8d:52:1f:32:37:fc:71:f4:f4:25:
66:7e:79:18:56:7b:7e:f0:50:8a:32:ef:67:0f:5f:68:8d:ef:
17:38:9e:d8:c8:80:49:2e:02:17:ac:b9:1b:84:bd:c8:55:9d:
1e:ee:47:41:43:96:31:35:04:ba:ea:fb:d9:65:08:e0:1a:51:
e3:83:87:80:c5:6e:7f:f2:f7:78:20:7a:77:cc:f0:cc:dd:32:
f1:bf:a2:9b:10:1b:d2:01:5b:88:2a:a4:e2:f6:52:3a:21:ae:
b8:52:21:50:ab:de:1a:e6:c4:1f:c9:aa:2a:d7:72:46:0e:a0:
25:9a:ea:02:e8:9d:b8:76:c5:93:e0:c3:56:12:c5:6f:a0:6d:
81:64:61:db:4b:67:7c:6a:f0:bf:db:87:d4:8f:bd:a4:e4:46:
95:d2:af:1f:1b:df:d2:f0:8f:25:0f:6c:c2:ac:7e:91:d8:7c:
56:27:42:ef:a5:4e:76:2f:a3:0a:0e:a1:c3:55:3f:e7:e4:31:
80:ef:7e:80:0b:c6:6e:48:59:ec:a8:70:0f:93:0a:e0:f9:f4:
f3:6d:1e:67:38:11:ff:08:60:a3:9a:b6:d9:b9:56:c7:47:99:
b2:b5:c3:84:5f:07:aa:31:cd:ab:58:8f:7e:ae:7e:c4:19:43:
cf:1d:d2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:43:08 2026 by rpki-client