
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
File: ntkFUQfHD4W7kajaAnC1ynYK61Q.mft (raw, json)
Hash identifier: E1HqXxF/JpFhSfRia/XJ1MLgvPz3x8VMa+hn9vYcgQ8=
Subject key identifier: AA:FA:68:91:24:FC:3E:2C:D8:3F:BA:14:BA:49:9C:93:72:4D:53:46
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Certificate issuer: /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial: 3746
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
Manifest number: 35CD
Signing time: Tue 04 Nov 2025 14:51:18 +0000
Manifest this update: Tue 04 Nov 2025 14:51:17 +0000
Manifest next update: Tue 11 Nov 2025 14:51:17 +0000
Files and hashes: 1: ntkFUQfHD4W7kajaAnC1ynYK61Q.crl (hash: ZlqgOaTT0VKy0HpyegULj7Sro2pkMt/K1oZ/4PJoajA=)
2: 9D67280A844911EAA528AD63C4F9AE02.roa (hash: VYBHve/PNmOFeIWgiVN/Red7+4ngw1/OUZ+8fRDI5rI=)
3: F0D8670E641711EEB4A16E1FC4F9AE02.roa (hash: VubRHHBc3Mp0miN/hmjpYpMhRr6R/fcT8ESI96i2bn0=)
4: 35575C68844811EAB301615FC4F9AE02.roa (hash: IpJzY/E3RfTD/Jty42OF5cBR7XD15VMXMCEpMRRL3LU=)
5: 9604F4A6899911EBA32C6224C4F9AE02.roa (hash: irNVJAgK3pBegIwIYQHvfU2ICa37uezrCrR7Sshxk/Y=)
6: 7418230A6D4B11EBB1805C0DC4F9AE02.roa (hash: JqpaA6uavzScEzQE05g7FN0bGDgZqNMIyby4mXtlKkU=)
7: B89BA72097D711EBA8B8BA2AC4F9AE02.roa (hash: RZHpITklMqhnuO90bEeP3i7RWRtO5TJRoQwAU5BGgUs=)
8: 7A58C8D6BBEA11EA8DF46778C4F9AE02.roa (hash: VrbZ7ZecbNcImk9iVkkzXLKwbDb+F2iSfzr14g+V7aQ=)
9: 9F2B1EB0892C11EBB29AFF50C4F9AE02.roa (hash: C9sOI6EfTgRnMQGNjlrtl3KFe7JPwkVRiva430VVNhg=)
10: 35E95924844811EAB301615FC4F9AE02.roa (hash: LgoFbTvnCYGxtb9l3zKpoNxXJ+KSjB/JRV9oy3sEYvk=)
11: 32CF326ECA2E11EA80305F0DC4F9AE02.roa (hash: Tvw2f69b+5p+ID20B8iBZZ0yBfURv9eNZRD114TIL4I=)
12: BB7CEA8CEF3B11ECABCC5E3EC4F9AE02.roa (hash: Pysow4ghhE6bNtWAkyi1inOqPNBVAlZxtG0k9FkRDpM=)
13: DED04A561D4111EB89535E1EC4F9AE02.roa (hash: YIkgFm4YlQ3B4lEIbOf0SksB4/x97E+3vlPXwWTeW9Y=)
14: 443470FC7C1511EBB779C03EC4F9AE02.roa (hash: GJ+Ts94sVlUdI4E9xrQTvfVMrj+KCnN2xtF35+3yCvE=)
15: 167FCE12844B11EA91F6956BC4F9AE02.roa (hash: 89eEUpRQHSJ8X1lImXGmURAImfIF1FtpfbrbpBLEmDo=)
16: 9E1F70A4844911EAA528AD63C4F9AE02.roa (hash: ukv1HUDNVDJbCJlkSDyGbdgGzyB74+5Ji2qFWgrv0gw=)
17: 150DA58AFF0D11EF8B23C73AC4F9AE02.roa (hash: idSl8lJvkqdSo60nq2wum68o9p4rKFmDbGlEVDUP4DE=)
18: D10DBCB2475C11EEBF5FB180C4F9AE02.roa (hash: UStQZ3E5ENhOJAnKZAoPf8pnLHZK3+vt2+bwJ7bo508=)
19: D9E23E4A6D4C11EB938EC44DC4F9AE02.roa (hash: jV1pO0tJQkm8tDF//+xAb/Vr8QQlVyReb+p4WbFsB4g=)
20: B34368F8BA9311EEB0A64B2AC4F9AE02.roa (hash: vzBcTdf96+UTQqQZlkeYwtQci7kemGbUS01k0jfvWtI=)
21: DF6E9324D08D11EA9010E72EC4F9AE02.roa (hash: hFXanv2FdjB0oerr/Ni9RmWLKXd7bj75bYHKTp5JZ4U=)
22: 160E2D60FF0D11EF8B23C73AC4F9AE02.roa (hash: DUYEU2WPRgGRjSa+GBl8Qamn18toiw7tspgbnam3lYo=)
23: FBCDF210490B11EC8E4D1136C4F9AE02.roa (hash: Qoz5g9368HMZWctAVVNXY9CZ9LyOlyI2/eGHTTT7kQw=)
24: FAF25932427711EEBEA02D22C4F9AE02.roa (hash: va72E7xgUhipybtVeUXFFu66WOtMudWBDnK3BZLcOzk=)
25: EF5779B09DD611F0BB1A500DC4F9AE02.roa (hash: 74RIIXCsVyk2LOqxXGG8myKMnT9xwaL2IEwmBulTtc4=)
26: 0F3F5C24FF0E11EFB7B9A13CC4F9AE02.roa (hash: /p/aYFDXmU+p5r2x/x59lnZ8e1gVGwdb3q9zI0rbkwk=)
27: 9B4B6C82904911EABE5F0C63C4F9AE02.roa (hash: EUm4AnmfuJxU75sTZEUXibkajEE5FVqoIFPKGh69ArU=)
28: D6672BEE0BD111ECB2E9C868C4F9AE02.roa (hash: jlbUlIXnT9veJGusBLS+x09R8IWreW5sDY2cRLkBosA=)
29: F33CEFA6FF0C11EFAFAF7D3AC4F9AE02.roa (hash: hCAJoif7R0PdtafhhCqVg3AWh/fUgT/PZ22s2qQ33mA=)
30: 13C828C62D8911EBA7D22C3EC4F9AE02.roa (hash: twGH4Ti0Hxo3XFvPXLG4LeJ5bIvmDJLFNJkw3EGUZio=)
31: 7D745B8C800411EB9398C63EC4F9AE02.roa (hash: JRI97yoxRtupHfmn7kbQDCY5sz6BBIJOh/q9HLp8tPI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:51:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14150 (0x3746)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Validity
Not Before: Nov 4 14:51:17 2025 GMT
Not After : Nov 11 14:51:17 2025 GMT
Subject: CN=690a12e5-6115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:74:6e:03:ef:cf:59:a6:8b:d4:d5:59:0f:81:
62:fb:ed:da:ac:a0:8a:fe:cf:5e:b2:33:54:bb:d7:
b3:2d:dd:4c:78:94:93:0c:a4:d7:50:92:38:03:13:
44:65:13:03:9a:b2:8c:e7:99:f9:36:16:0d:1c:2b:
fd:a4:05:38:0d:f5:6c:49:26:0b:17:c2:7a:24:21:
d5:b0:90:8b:27:8b:6a:12:da:8a:f0:ee:fd:41:0a:
5b:37:dd:0b:f3:78:11:ed:82:1f:24:76:5a:4a:84:
b5:84:24:75:48:1a:58:dc:04:f4:93:24:9d:fc:ab:
6c:9f:5e:12:3e:b6:14:c5:af:aa:90:17:4b:82:a7:
a2:da:63:e5:f6:f5:ec:df:40:9f:f3:ac:95:cb:2d:
db:1f:2a:f9:b6:68:9d:dd:d7:be:29:ce:fc:8b:db:
c5:18:0b:00:14:49:f2:b9:5f:2f:fd:ac:c6:df:33:
55:f9:e2:fb:1f:68:61:32:02:b3:bd:c8:87:2e:f5:
ef:0b:00:a1:af:a5:15:fc:f2:38:2c:96:19:69:ec:
17:e2:cb:ee:bc:9e:7c:16:fc:08:15:aa:ed:ce:d9:
31:da:20:37:b7:2b:ec:f5:e2:41:50:02:60:ec:c3:
13:c3:7b:51:c7:b0:89:24:16:de:d7:35:12:31:60:
88:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FA:68:91:24:FC:3E:2C:D8:3F:BA:14:BA:49:9C:93:72:4D:53:46
X509v3 Authority Key Identifier:
keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:e2:b5:7d:f2:5c:40:5c:05:62:6a:9a:28:ce:97:03:df:b9:
25:ab:04:fe:bd:49:73:b4:a4:87:ec:1d:e9:d1:5c:58:0b:4c:
3a:25:ec:18:ac:fe:59:48:4f:1a:1a:c8:d4:e4:5a:85:ab:92:
30:bd:0f:4a:e3:38:4a:ed:83:3e:40:c0:2b:33:8f:fb:37:8d:
e3:f6:ee:e2:29:92:3b:29:42:15:c8:8e:9d:19:f1:f6:05:94:
2f:eb:2a:17:64:e9:d3:ba:bf:24:3e:ec:8e:2c:ab:bc:f9:7f:
b4:cd:db:c6:5b:96:76:8a:f8:19:a0:10:c6:d5:6c:18:df:3c:
24:a8:33:a6:91:4a:d1:5e:a5:36:e8:87:e3:ba:bb:c4:d5:98:
17:5d:dd:03:dd:29:ac:a2:bb:94:4e:74:f9:13:87:90:54:85:
c8:c0:46:96:f7:0f:93:ee:87:02:d2:ed:67:20:f1:7f:35:b4:
40:e2:94:68:6a:d8:80:56:fe:51:e8:2f:04:a6:53:88:6b:e1:
f1:87:f9:ee:d6:46:3e:0f:51:fc:f3:ae:09:37:f7:5b:4b:59:
43:6a:f6:19:64:91:e0:31:be:08:95:ac:46:0d:8d:08:26:12:
fd:0e:ba:86:b6:d6:49:94:9e:93:3f:ac:73:68:e0:76:bf:24:
9b:2d:97:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:14:31 2025 by rpki-client