
$ rpki-client -vvf rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
File: NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft (raw, json)
Hash identifier: NKgqvNW0Gcx5tym9LOXqnFdj/TBFncn3K5IAWpRNahE=
Subject key identifier: F7:C8:B1:C3:52:A3:92:E8:00:88:7A:03:7E:C9:27:FA:34:B9:9E:37
Authority key identifier: 35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77
Certificate issuer: /CN=A916714C/serialNumber=353E48875376C6DB97E3426365CC7F18C9456877
Certificate serial: 0607
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
Manifest number: 0601
Signing time: Sat 28 Feb 2026 23:27:18 +0000
Manifest this update: Sat 28 Feb 2026 23:27:17 +0000
Manifest next update: Sat 07 Mar 2026 23:27:17 +0000
Files and hashes: 1: NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl (hash: tfqJmJ3Zn9jBXCx/tSfNLTRJ7VS3wgHnwjpSFc5127w=)
2: E50353FEDFED11EBA155C712C4F9AE02.roa (hash: IIVlt7G/+5szlJKKwOxccwy55c5N2K1rqxgqpnj4uFE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl
rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1543 (0x607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916714C, serialNumber=353E48875376C6DB97E3426365CC7F18C9456877
Validity
Not Before: Feb 28 23:27:17 2026 GMT
Not After : Mar 7 23:27:17 2026 GMT
Subject: CN=69a379d6-e4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:64:c0:8f:53:29:6f:58:66:c7:9f:8f:41:05:
27:a7:fe:d9:b8:d5:8c:09:d5:9b:a1:b7:41:d5:63:
69:0f:de:2d:11:e2:1f:91:1b:b4:97:b6:70:e7:95:
10:24:83:a5:f5:26:d3:7b:64:4e:36:76:4c:65:58:
95:a6:ef:4d:df:fa:62:f2:90:a8:15:ba:91:ef:9b:
8e:47:c8:70:e4:50:6a:51:4c:96:55:14:77:ea:6e:
03:22:f8:97:21:24:71:a7:1e:67:de:89:d2:af:f2:
97:9d:f3:42:a5:4c:f6:00:f3:07:17:97:10:87:7b:
fe:e7:9b:05:3f:75:ed:41:85:36:5d:c0:6c:df:59:
93:37:9e:cb:16:e1:49:0a:45:42:f3:ff:e3:18:9e:
18:b8:97:04:fd:82:d4:4d:f6:8e:5c:c1:7f:1b:31:
c8:1b:76:2c:db:96:d4:21:54:26:45:9e:82:8f:2a:
5e:bb:1e:e0:da:db:76:0f:73:f7:55:85:9d:2c:d8:
f0:0c:32:5b:0a:13:59:ef:73:fb:cb:5d:e7:14:59:
82:49:c1:a0:41:d2:d5:ff:22:0f:f7:33:99:e9:ba:
f8:04:f0:55:cb:ec:44:81:cb:5a:a1:4a:2f:fd:78:
b7:40:03:1a:e1:2d:f3:84:37:b7:45:38:2b:47:ca:
f1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C8:B1:C3:52:A3:92:E8:00:88:7A:03:7E:C9:27:FA:34:B9:9E:37
X509v3 Authority Key Identifier:
keyid:35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:e4:f5:99:66:e7:76:32:2d:8e:c4:0f:91:aa:cf:72:5f:f9:
07:56:1f:9a:e4:84:c5:b7:a7:a8:c6:88:6a:6b:41:05:56:27:
f0:14:2c:1f:0a:0a:c1:0e:41:bf:81:6f:84:4a:39:b5:18:39:
76:3a:b7:73:39:40:65:73:32:79:c0:4c:97:86:ae:9e:f6:3c:
23:c9:27:48:b3:4a:d0:ce:40:df:51:13:9e:9a:64:96:68:36:
d7:b6:9f:07:b9:d9:17:95:76:ce:e8:27:65:6a:5c:e5:19:b9:
90:d0:57:0e:c7:c5:0e:06:4b:4b:e1:e8:da:ea:db:16:14:23:
39:e1:01:ed:bb:71:22:a5:c1:82:91:0e:aa:eb:0d:5c:f3:03:
44:c7:2b:59:5a:23:62:5c:c9:16:0b:76:06:33:56:21:cc:a5:
65:e2:90:c3:7c:2c:bd:0a:0b:ac:90:ba:98:ee:b7:95:a0:b8:
88:5a:62:4e:7b:8e:ad:58:d4:44:92:0b:f4:64:76:20:fe:b0:
f0:34:b2:8b:c8:f9:ad:c6:ec:20:f1:09:9c:39:34:e2:f6:bd:
e7:05:5c:dd:af:6c:86:b1:a4:ed:6d:71:8c:0e:db:c4:30:64:
b4:80:86:72:55:64:46:e3:67:61:f3:a8:d6:6c:78:b2:9f:4a:
66:54:a5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:22:42 2026 by rpki-client