
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft
File: NCaEGmQGa3hlW77KDAH9CfZXBTY.mft (raw, json)
Hash identifier: SdqWo9Rtg1feVnIj1xvVZfTbRU19K5aRON1SwXVsd+k=
Subject key identifier: F8:C7:27:E7:19:1F:48:BE:53:F4:72:42:F1:A8:D1:3C:32:DE:21:BB
Authority key identifier: 34:26:84:1A:64:06:6B:78:65:5B:BE:CA:0C:01:FD:09:F6:57:05:36
Certificate issuer: /CN=A9157DAE/serialNumber=3426841A64066B78655BBECA0C01FD09F6570536
Certificate serial: 023C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft
Manifest number: 023C
Signing time: Thu 16 Apr 2026 16:57:52 +0000
Manifest this update: Thu 16 Apr 2026 16:57:51 +0000
Manifest next update: Thu 23 Apr 2026 16:57:51 +0000
Files and hashes: 1: NCaEGmQGa3hlW77KDAH9CfZXBTY.crl (hash: 59nmZIkLZX+EGieApbVRMl5Q1HKwug/PDdz8ja40+Tk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.crl
rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 572 (0x23c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157DAE, serialNumber=3426841A64066B78655BBECA0C01FD09F6570536
Validity
Not Before: Apr 16 16:57:51 2026 GMT
Not After : Apr 23 16:57:51 2026 GMT
Subject: CN=69e11510-16af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:9e:2e:58:af:43:76:6f:5b:cc:cd:05:8c:
85:b8:53:6c:a0:dd:be:64:02:ae:7e:da:4e:e3:be:
49:36:bd:aa:03:f9:cd:8a:82:75:7d:30:83:7a:b1:
06:2b:9b:64:1f:2c:65:7b:52:62:83:41:77:48:f0:
12:07:92:98:a5:59:b4:5d:1c:08:61:ad:f8:7a:d5:
e8:8f:55:0b:e0:7e:f7:82:01:bc:93:f1:ac:c3:8a:
22:d6:5a:88:90:0c:0a:be:2f:89:21:cb:fb:29:87:
f0:4f:df:5e:07:28:5b:0a:54:34:95:33:cb:fa:77:
70:76:29:62:5f:a5:8f:56:c9:5d:d9:ed:b9:d6:4a:
70:2a:fa:95:12:a0:77:ac:4a:d1:a3:de:8a:5e:e0:
01:7b:e2:bf:9f:85:84:e5:12:32:3c:f0:4f:24:e6:
39:cc:3c:ff:a6:88:fc:09:88:cf:e0:6b:27:90:8e:
1e:04:75:a4:cf:ba:b7:54:7a:c7:7b:f5:84:73:ee:
97:04:c7:18:5a:11:f5:bf:dd:49:c7:40:69:7a:78:
cc:e8:14:fa:4a:1d:af:2a:c1:a2:14:3e:d1:bc:27:
40:80:be:3e:e3:a1:6d:3e:13:c0:6c:5b:3c:40:42:
0b:82:e0:3e:42:65:39:58:17:0b:43:66:f2:72:e6:
f0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C7:27:E7:19:1F:48:BE:53:F4:72:42:F1:A8:D1:3C:32:DE:21:BB
X509v3 Authority Key Identifier:
keyid:34:26:84:1A:64:06:6B:78:65:5B:BE:CA:0C:01:FD:09:F6:57:05:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:d3:a6:0e:c9:30:76:b7:24:2d:cf:a4:0e:50:99:54:fd:34:
7a:ce:16:5a:7e:8c:f4:3f:2a:20:4a:d2:2f:d8:27:1d:b2:43:
7f:83:d1:d2:dd:39:3a:1d:38:bf:0b:73:36:8c:2c:40:c1:16:
fa:64:ab:de:7b:9b:07:12:0f:89:19:13:93:ad:f3:6d:eb:51:
23:d5:9e:56:07:70:81:55:5d:7d:3e:52:0a:6b:21:6b:c4:21:
9a:5a:27:5c:77:f3:ef:d0:4b:e0:36:14:83:da:c9:8a:55:0c:
51:8b:89:c5:54:75:c4:68:31:15:e5:12:04:74:27:a2:78:e6:
18:62:e9:08:76:7e:19:8e:90:84:86:93:60:54:1b:ca:c2:9c:
73:9f:04:12:ad:f3:51:5e:ca:8c:3d:b8:65:af:61:18:d9:22:
21:2e:65:9e:f9:2e:74:97:f6:80:84:dd:20:33:78:69:5e:47:
4d:82:2d:90:32:25:3a:81:e1:b6:17:de:94:20:63:4a:9a:b8:
de:98:95:03:69:98:84:8d:c6:69:00:a7:40:1f:9a:fc:7d:e5:
96:fe:e2:01:49:c1:2e:4f:71:86:ea:e1:b7:ac:f2:77:b5:69:
63:23:0d:66:dd:6b:4c:96:b6:d1:ef:6a:f7:09:f2:2d:d8:2b:
de:7b:b8:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdEQUUxMTAvBgNVBAUTKDM0MjY4NDFBNjQwNjZCNzg2NTVCQkVDQTBDMDFGRDA5
RjY1NzA1MzYwHhcNMjYwNDE2MTY1NzUxWhcNMjYwNDIzMTY1NzUxWjAYMRYwFAYD
VQQDEw02OWUxMTUxMC0xNmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtj+eLlivQ3ZvW8zNBYyFuFNsoN2+ZAKuftpO475JNr2qA/nNioJ1fTCDerEG
K5tkHyxle1Jig0F3SPASB5KYpVm0XRwIYa34etXoj1UL4H73ggG8k/Gsw4oi1lqI
kAwKvi+JIcv7KYfwT99eByhbClQ0lTPL+ndwdiliX6WPVsld2e251kpwKvqVEqB3
rErRo96KXuABe+K/n4WE5RIyPPBPJOY5zDz/poj8CYjP4GsnkI4eBHWkz7q3VHrH
e/WEc+6XBMcYWhH1v91Jx0BpenjM6BT6Sh2vKsGiFD7RvCdAgL4+46FtPhPAbFs8
QEILguA+QmU5WBcLQ2bycubwVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPjHJ+cZ
H0i+U/RyQvGo0Twy3iG7MB8GA1UdIwQYMBaAFDQmhBpkBmt4ZVu+ygwB/Qn2VwU2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS8xMDRBN0UxRURG
QUQxMUVEOTUxNTNEMzFDNEY5QUUwMi9OQ2FFR21RR2EzaGxXNzdLREFIOUNmWlhC
VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL05DYUVHbVFHYTNobFc3N0tEQUg5Q2ZaWEJUWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
N0RBRS8xMDRBN0UxRURGQUQxMUVEOTUxNTNEMzFDNEY5QUUwMi9OQ2FFR21RR2Ez
aGxXNzdLREFIOUNmWlhCVFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAedOmDskwdrckLc+kDlCZVP00es4WWn6M9D8qIErSL9gnHbJDf4PR0t05Oh04
vwtzNowsQMEW+mSr3nubBxIPiRkTk63zbetRI9WeVgdwgVVdfT5SCmsha8Qhmlon
XHfz79BL4DYUg9rJilUMUYuJxVR1xGgxFeUSBHQnonjmGGLpCHZ+GY6QhIaTYFQb
ysKcc58EEq3zUV7KjD24Za9hGNkiIS5lnvkudJf2gITdIDN4aV5HTYItkDIlOoHh
thfelCBjSpq43piVA2mYhI3GaQCnQB+a/H3llv7iAUnBLk9xhurht6zyd7VpYyMN
Zt1rTJa20e9q9wnyLdgr3nu4Pg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:44 2026 by rpki-client