
$ rpki-client -vvf rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft
File: _NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft (raw, json)
Hash identifier: n2lZT3FtoQexYRGqI9dAhH6BWygn8/HKJBLng54+dlw=
Subject key identifier: 57:07:58:23:4B:B4:CE:9E:CE:E0:DA:CF:ED:54:1C:6C:BC:12:98:53
Authority key identifier: FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55
Certificate issuer: /CN=A918233C/serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55
Certificate serial: B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft
Manifest number: 056C
Signing time: Sun 01 Mar 2026 00:34:42 +0000
Manifest this update: Sun 01 Mar 2026 00:34:42 +0000
Manifest next update: Sun 08 Mar 2026 00:34:42 +0000
Files and hashes: 1: _NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl (hash: 5P8u4pk5QlHmmgPPpDUAD8Bzofi6Uj13DfzZYVKiZuA=)
2: 34E594A215C511F09562D30FC4F9AE02.roa (hash: hfeZZi+U6iW2VnJ8B/u+N/1inJ9mUYvruTj0NILu9qs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl
rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176 (0xb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918233C, serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55
Validity
Not Before: Mar 1 00:34:42 2026 GMT
Not After : Mar 8 00:34:42 2026 GMT
Subject: CN=69a389a2-0aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a1:e0:35:81:14:3b:e7:12:e5:ec:1e:3a:0d:
4f:0b:04:fa:94:33:5c:34:2c:eb:b8:91:b4:b3:bb:
4b:dc:8b:27:6b:a8:15:92:68:5d:a0:44:eb:1f:88:
35:dc:74:80:b7:b5:d0:58:02:0e:e4:11:b1:f9:b6:
a3:bf:81:00:2f:2e:e6:b8:33:98:a3:f6:b2:43:bf:
3e:72:48:8f:af:2f:c1:9a:7b:e7:36:c6:4d:12:16:
33:34:82:57:fa:58:b2:19:9e:63:a8:2b:c4:9d:80:
a2:52:db:59:71:6d:e6:d6:e3:59:04:e4:9d:3f:af:
da:30:ad:81:c3:8c:b5:ef:32:e6:f5:a4:cd:74:20:
9c:b5:30:bf:ac:32:53:7b:24:f9:bd:9f:b0:e7:b9:
eb:2c:81:8c:96:d7:fe:fa:b7:51:90:e6:80:2f:12:
5d:ec:32:8c:2f:7c:3a:93:b6:a9:b6:1a:49:be:25:
0e:5c:a8:8c:fb:92:9f:f8:0c:12:7e:08:a4:ec:e1:
1c:9f:4e:5b:f0:e7:ec:1a:2d:fd:22:ae:76:ee:f1:
78:f9:04:aa:4f:69:d9:b2:b0:6a:65:d9:21:87:52:
3c:b5:02:df:87:50:15:f2:15:e0:69:cd:a2:0e:35:
8b:b1:8d:25:19:d2:19:8f:a8:94:19:5f:29:04:0d:
16:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:07:58:23:4B:B4:CE:9E:CE:E0:DA:CF:ED:54:1C:6C:BC:12:98:53
X509v3 Authority Key Identifier:
keyid:FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:92:a0:e8:90:17:e6:4d:31:f3:63:94:b1:2b:85:71:8b:ff:
5c:7b:a6:3c:65:4a:4b:47:5f:1c:50:58:45:94:28:a3:aa:1e:
1e:f1:d7:55:ef:da:25:5a:e2:cf:e6:f3:c5:1c:93:cd:fb:6a:
5e:8a:ce:d0:95:30:c1:e2:d9:2f:55:04:30:bf:90:f8:17:56:
d4:8c:69:96:74:e2:8d:42:ab:20:5e:e3:6b:64:6b:72:9d:49:
96:4f:df:ab:20:51:6d:73:6d:2a:f3:76:09:6c:9f:01:01:ee:
aa:c0:f9:03:8e:1d:93:46:d3:34:32:62:9b:89:fa:0e:51:7f:
44:2c:ed:19:86:e4:c6:ec:00:a0:57:7c:4d:5b:d6:66:1c:14:
ef:62:b3:d1:ae:6a:02:51:8f:89:e8:7b:b7:fc:1d:43:93:46:
2c:93:21:48:39:0c:46:3c:5c:cb:2a:54:b3:28:97:ff:4a:6c:
c9:44:02:5d:d7:d9:2b:f8:f9:1a:bd:c5:9f:b4:c8:32:3f:67:
2d:93:3e:c1:62:30:4e:1c:07:78:8b:f3:13:92:ac:24:5e:a6:
7d:3f:e9:1c:4d:6e:fc:81:56:40:25:7c:49:6b:67:5c:ac:7d:
f4:e5:58:47:b9:8c:c9:2a:5e:92:17:94:a9:79:fd:78:2d:a6:
3a:25:1c:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODIzM0MxMTAvBgNVBAUTKEZDRDRERjhFQjRBQTY0QUY1NkI3RDBDNzMyNkUyOTEw
NDU0M0NDNTUwHhcNMjYwMzAxMDAzNDQyWhcNMjYwMzA4MDAzNDQyWjAYMRYwFAYD
VQQDDA02OWEzODlhMi0wYWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArKHgNYEUO+cS5eweOg1PCwT6lDNcNCzruJG0s7tL3Isna6gVkmhdoETrH4g1
3HSAt7XQWAIO5BGx+bajv4EALy7muDOYo/ayQ78+ckiPry/BmnvnNsZNEhYzNIJX
+liyGZ5jqCvEnYCiUttZcW3m1uNZBOSdP6/aMK2Bw4y17zLm9aTNdCCctTC/rDJT
eyT5vZ+w57nrLIGMltf++rdRkOaALxJd7DKML3w6k7apthpJviUOXKiM+5Kf+AwS
fgik7OEcn05b8OfsGi39Iq527vF4+QSqT2nZsrBqZdkhh1I8tQLfh1AV8hXgac2i
DjWLsY0lGdIZj6iUGV8pBA0WmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFcHWCNL
tM6ezuDaz+1UHGy8EphTMB8GA1UdIwQYMBaAFPzU3460qmSvVrfQxzJuKRBFQ8xV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjMzQy9FNjQ5MUZFMjYy
MTQxMUVDQjAwNjcxMkNDNEY5QUUwMi9fTlRmanJTcVpLOVd0OURITW00cEVFVkR6
RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19OVGZqclNxWks5V3Q5REhNbTRwRUVWRHpGVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjMzQy9FNjQ5MUZFMjYyMTQxMUVDQjAwNjcxMkNDNEY5QUUwMi9fTlRmanJTcVpL
OVd0OURITW00cEVFVkR6RlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAopKg6JAX5k0x82OUsSuFcYv/XHumPGVKS0dfHFBYRZQoo6oeHvHXVe/aJVri
z+bzxRyTzftqXorO0JUwweLZL1UEML+Q+BdW1IxplnTijUKrIF7ja2Rrcp1Jlk/f
qyBRbXNtKvN2CWyfAQHuqsD5A44dk0bTNDJim4n6DlF/RCztGYbkxuwAoFd8TVvW
ZhwU72Kz0a5qAlGPieh7t/wdQ5NGLJMhSDkMRjxcyypUsyiX/0psyUQCXdfZK/j5
Gr3Fn7TIMj9nLZM+wWIwThwHeIvzE5KsJF6mfT/pHE1u/IFWQCV8SWtnXKx99OVY
R7mMySpekheUqXn9eC2mOiUcgw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:38:50 2026 by rpki-client