
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft
File: NCaEGmQGa3hlW77KDAH9CfZXBTY.mft (raw, json)
Hash identifier: ZWpkTTJrK6EwbJmxqoe0BkKB2NTxm4un95z/AlQgtEE=
Subject key identifier: 03:A1:70:E4:AB:13:B2:C5:7D:E8:36:29:0D:26:9B:04:31:02:B6:6F
Authority key identifier: 34:26:84:1A:64:06:6B:78:65:5B:BE:CA:0C:01:FD:09:F6:57:05:36
Certificate issuer: /CN=A9157DAE/serialNumber=3426841A64066B78655BBECA0C01FD09F6570536
Certificate serial: 0259
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft
Manifest number: 0259
Signing time: Fri 12 Jun 2026 16:58:43 +0000
Manifest this update: Fri 12 Jun 2026 16:58:43 +0000
Manifest next update: Fri 19 Jun 2026 16:58:43 +0000
Files and hashes: 1: NCaEGmQGa3hlW77KDAH9CfZXBTY.crl (hash: gV3m4tzUPHoM3DtB3gg7ZpPkE4LkahrYilpyMBtFLI0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.crl
rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:58:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 601 (0x259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157DAE, serialNumber=3426841A64066B78655BBECA0C01FD09F6570536
Validity
Not Before: Jun 12 16:58:43 2026 GMT
Not After : Jun 19 16:58:43 2026 GMT
Subject: CN=6a2c3ac3-9117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:51:3c:09:50:16:0c:80:26:1a:18:60:a7:
8b:eb:14:a8:57:a9:47:07:4f:e7:88:6e:89:07:f9:
5b:66:87:a9:40:b6:59:f4:61:54:46:66:4c:f0:d6:
94:d1:fb:04:2a:0c:60:0a:77:de:c3:52:7b:40:11:
16:b8:c8:aa:cf:aa:55:a4:11:79:51:c4:9e:c5:90:
68:cc:f1:a1:57:83:ad:5d:39:9d:76:a6:2c:ab:56:
f4:47:da:34:09:67:28:16:ab:95:45:61:4d:90:1a:
18:59:02:3e:63:5b:7d:ca:3e:a6:f1:af:38:26:b2:
55:13:1b:c7:1f:0b:5a:d1:f1:e4:e9:28:4a:53:51:
62:4a:a0:3d:3f:9f:52:fd:0e:13:a6:d4:c0:33:26:
48:8e:d7:48:b8:91:db:a9:b9:5b:73:cd:53:ad:94:
ef:70:19:ca:bf:4f:62:c1:68:08:b2:71:54:2c:a9:
25:c6:9c:67:f9:29:1a:68:1f:3c:cb:e3:75:9d:5e:
18:7f:04:78:43:67:01:8f:92:96:d5:fd:d1:f9:cc:
1f:bf:36:3f:2e:ff:1b:4f:05:f3:61:6f:46:cf:bd:
97:17:89:e7:a1:ac:dc:c4:0c:db:d2:e0:f4:c7:91:
61:b6:b2:b2:3e:3f:c7:9b:84:23:fb:60:c4:74:74:
4e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A1:70:E4:AB:13:B2:C5:7D:E8:36:29:0D:26:9B:04:31:02:B6:6F
X509v3 Authority Key Identifier:
keyid:34:26:84:1A:64:06:6B:78:65:5B:BE:CA:0C:01:FD:09:F6:57:05:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:72:1e:0e:d1:0c:a4:ce:ea:3e:59:fe:9a:f8:ee:ed:1f:d4:
12:64:fa:16:f8:80:f8:92:e2:21:42:57:75:44:e8:1e:05:4f:
f8:46:36:98:95:13:17:03:dd:f5:41:44:86:02:86:1c:be:44:
80:f7:d5:ea:f2:91:d0:9e:de:cb:6c:d9:b6:fe:92:a0:d9:a8:
36:7e:05:b2:49:78:5b:58:fd:9a:99:08:af:ee:ee:bd:39:87:
1f:f4:45:7a:d1:bf:de:b3:56:37:52:4c:8e:27:4b:ef:a4:dc:
62:ae:c8:04:ad:c0:9d:9c:22:34:62:34:8c:f0:1f:86:4b:c2:
84:ee:4f:53:70:6b:6e:e1:2d:de:cc:6b:b8:af:bb:f0:bc:80:
a2:a3:99:40:11:37:9e:b6:7d:a8:0f:c8:61:29:84:04:62:e3:
a8:8b:34:7d:98:5c:65:cd:03:d3:04:5c:db:30:c7:1a:09:32:
f6:6d:a1:c6:c4:df:0f:e9:17:4c:98:58:f2:fd:23:3b:c4:82:
b9:85:ae:95:f4:45:5c:2e:b7:0f:64:94:50:43:a2:34:aa:50:
3c:08:a0:2c:43:a0:34:36:9e:78:3d:9c:6c:6b:eb:24:22:68:
56:72:34:7c:d2:97:90:50:48:6f:dc:4a:ae:ff:3d:bd:ba:0d:
d1:8d:41:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:27:33 2026 by rpki-client