
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
File: ntkFUQfHD4W7kajaAnC1ynYK61Q.mft (raw, json)
Hash identifier: TMbfbGh0Pg2on2Ae327VP3UFWLmyvwys9KhPDKHHb7s=
Subject key identifier: 0A:8F:25:62:DA:39:8F:93:B9:04:C5:52:46:70:E7:69:19:A1:DA:D9
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Certificate issuer: /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial: 3858
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
Manifest number: 3698
Signing time: Wed 04 Nov 2026 14:48:38 +0000
Manifest this update: Wed 04 Nov 2026 14:48:38 +0000
Manifest next update: Wed 11 Nov 2026 14:48:38 +0000
Files and hashes: 1: ntkFUQfHD4W7kajaAnC1ynYK61Q.crl (hash: 6Vc+3JV5wlek5eEp5DZf9DAkSRgm/Ewc9llUuNw+/1E=)
2: 167FCE12844B11EA91F6956BC4F9AE02.roa (hash: PzpE7MwYfVRawzIKsbVX370mNdsLgW2Qm+aakZFWhao=)
3: 9604F4A6899911EBA32C6224C4F9AE02.roa (hash: V/SzYzu69tmbsxP6bWvkiUxUMh2sV1e0ifoqU8Ehrhk=)
4: 13C828C62D8911EBA7D22C3EC4F9AE02.roa (hash: LWvz30J7nqbhh5taPr7hBquNOGwN6yl//Q6amBLA2ko=)
5: D10DBCB2475C11EEBF5FB180C4F9AE02.roa (hash: BRxvYL/f6CA3SKIVGbpzXkGKWWs47DxZMHo2MAWlkko=)
6: 7418230A6D4B11EBB1805C0DC4F9AE02.roa (hash: DvMc+C7ydaggndrUk3IDkyvlx9FwffySugOxDXp6bws=)
7: 35575C68844811EAB301615FC4F9AE02.roa (hash: p84kXPlD9gr0uNcPrMPIN+YNKnf8ICmyXIZyV2BXrVg=)
8: D9D185C6D27A11F092DEA24AC4F9AE02.roa (hash: hAsd4MgKrzzFojSm6DEKyVq+itBFW1idmKj+K2KrQmQ=)
9: B34368F8BA9311EEB0A64B2AC4F9AE02.roa (hash: An3BggKdBYLbEgb3Hrkj33h4yocMp14OUbjX/d9n+NU=)
10: B1A0E8244BA311F19791B23AC5833773.roa (hash: A99ABypzCZ+ewAkIIkapFs2BFjyVKadz1LMqLiEqBqc=)
11: EF5779B09DD611F0BB1A500DC4F9AE02.roa (hash: xtJKVVrh02G9dTMpH4EO7nBEDufcmTJ1uO4G5ShnUy4=)
12: DF6E9324D08D11EA9010E72EC4F9AE02.roa (hash: GDlrFsOMkk+fcO+QcoEg0Xz8k+lsBwDQwOJ1oO6ZWm8=)
13: D9E23E4A6D4C11EB938EC44DC4F9AE02.roa (hash: zMHfwZgdZ0ZZwpzwsqGwEeST/OYG6+IfNinxg8TADiQ=)
14: 32CF326ECA2E11EA80305F0DC4F9AE02.roa (hash: 72prmaxV5I+nRCKgiCmBCuBxHjAnd2zDB9Kx7IAuER8=)
15: BB7CEA8CEF3B11ECABCC5E3EC4F9AE02.roa (hash: 4+fNNlvJO8/zUbQ29LqDl04P63xI45pAflNJ0VsGVsA=)
16: 9D67280A844911EAA528AD63C4F9AE02.roa (hash: 1Gd0ADieLGVXYOgTjle7Xb85lx7mYyYRHSn9/35nibo=)
17: 35E95924844811EAB301615FC4F9AE02.roa (hash: +xVk+rs8Sk3ot4BG/sDDsstuP19HaQF04qYw2FT/AjU=)
18: 7D745B8C800411EB9398C63EC4F9AE02.roa (hash: E1QXwlpofWnOF885wZs0H95ShVhWhWqMPlBNA/xt/8E=)
19: D6672BEE0BD111ECB2E9C868C4F9AE02.roa (hash: VroGJygKLBjQNkDiUE3DzWiyxIeS84Ur+QvbCD7WMn0=)
20: 9F2B1EB0892C11EBB29AFF50C4F9AE02.roa (hash: TsQLO8q3V0PEg/QW2TxOwdlP9q86F7sKiMzK79eK+rc=)
21: B89BA72097D711EBA8B8BA2AC4F9AE02.roa (hash: 48+6uM5fDnTMnACjVi51hR8ImGiaIPMtb2QsEfmcA9U=)
22: 0F3F5C24FF0E11EFB7B9A13CC4F9AE02.roa (hash: hiI9+9J/yDrdCo+Dium7Ql5PFxHRer5mP0Zz0ZVaF88=)
23: DED04A561D4111EB89535E1EC4F9AE02.roa (hash: gjmCrERX6bDJqRAovORADO2jmeMnvAozOWLBNvCikGQ=)
24: FAF25932427711EEBEA02D22C4F9AE02.roa (hash: 8hMby2QMc40C7Gl3ib11u7r8k7MSe+ayZqt3WE3eTlM=)
25: 691D0462E6FD11F09102F531686F56BC.roa (hash: 0XyfDO8it6I75D9n0w3xE9lzsxnoVx1g4ZUiUe/hMW0=)
26: FBCDF210490B11EC8E4D1136C4F9AE02.roa (hash: 47wblHNUHR8QOKJUoT7iYPHs3BqPfi5JcNUXRdRFnRQ=)
27: 7A58C8D6BBEA11EA8DF46778C4F9AE02.roa (hash: BCO4TPbsUTXKr6VORkWLBBWoboETmiJ75sR3vzGBSvE=)
28: 9E1F70A4844911EAA528AD63C4F9AE02.roa (hash: Gw6eqkoI9GjMAfax+Sy6LiS1Q6bEsJsUys7tDAvsHp8=)
29: 9B4B6C82904911EABE5F0C63C4F9AE02.roa (hash: MLGHYtNGkC756TmJuWFDWX+q6uSK7D/1Efdl7Recbww=)
30: 443470FC7C1511EBB779C03EC4F9AE02.roa (hash: 59AdWYDXv0qwi7Gjxa16HkdQksWMmrXabTThvXIKiK4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 14:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14424 (0x3858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Validity
Not Before: Nov 4 14:48:38 2026 GMT
Not After : Nov 11 14:48:38 2026 GMT
Subject: CN=6aeb45c6-3c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ed:cf:c0:fc:7e:39:88:e7:e3:3d:50:8c:9c:
56:71:9b:4d:4c:fa:4a:2a:55:48:c7:07:21:fe:41:
43:29:1f:06:76:fd:ef:c6:50:89:57:9d:e5:25:81:
e4:1b:a3:51:89:7a:40:68:cc:82:7d:3e:47:a9:f7:
82:56:76:e3:4a:0a:0e:da:29:53:ed:3d:36:a6:28:
14:fc:20:c6:0f:a2:4f:15:4b:03:e0:da:83:60:b9:
17:20:3c:0b:26:3d:d1:ba:2d:f9:c4:84:ea:4e:c4:
57:15:06:8d:12:87:43:72:d9:03:ff:9d:4f:c3:97:
10:ab:a1:70:df:ca:e6:dc:91:c7:6e:a4:7d:46:a4:
0c:69:33:56:97:d1:8f:85:89:66:65:d7:a1:79:59:
d8:81:40:fa:1d:6c:47:9f:d2:1c:2f:c7:78:85:5c:
0b:c4:d9:cd:32:a7:e7:0d:20:64:66:28:27:41:06:
17:2b:3f:89:31:87:09:3f:f2:3d:aa:a8:de:db:d1:
59:79:9e:e6:e7:eb:13:31:bf:a6:5c:96:61:26:89:
c5:07:b7:15:61:e0:8b:81:0a:db:cd:a7:46:53:95:
7c:53:9b:33:0a:d5:ef:f9:86:cc:60:72:64:e5:fa:
8f:58:54:f4:91:40:1f:d1:d4:81:72:2d:d0:ff:5f:
d1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8F:25:62:DA:39:8F:93:B9:04:C5:52:46:70:E7:69:19:A1:DA:D9
X509v3 Authority Key Identifier:
keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:04:10:83:ac:10:b4:2a:b4:f6:52:c1:34:49:f0:20:46:79:
e0:c0:21:9b:50:c1:e2:2b:0f:4e:80:10:43:5a:07:f8:20:b3:
7a:ef:cf:ed:5a:fc:0a:e6:1e:eb:9c:d5:a6:2a:71:a1:67:be:
da:b7:30:8b:ff:cf:fe:21:e5:d8:ca:20:92:07:bf:75:92:28:
8f:36:7c:a1:e8:fa:17:d9:62:25:27:a1:8e:9a:63:cb:2d:73:
30:08:25:33:16:ca:6d:e6:9c:a7:54:51:ad:b4:6c:8c:da:48:
fa:c8:c6:35:fe:86:e4:7e:e3:04:84:04:2b:2c:2b:e6:55:16:
b1:92:f7:c0:1c:a3:f8:d0:a4:69:31:ef:2c:b8:5d:f5:0f:f2:
46:ca:42:a2:ed:71:ba:66:70:dd:45:49:bf:41:6e:41:84:25:
cb:7c:7c:75:7a:c5:cd:a3:76:85:a2:cc:fd:52:69:6a:62:6d:
7c:06:cf:f5:44:79:07:b9:ff:b4:2f:b7:ac:06:43:a8:6f:58:
30:86:85:d6:a7:4c:20:85:2b:50:10:81:05:fa:3e:2c:49:f9:
21:ad:00:76:3a:9c:12:a9:c6:0e:d1:06:07:3c:ad:97:8d:74:
cc:f0:53:6a:2d:c8:33:ea:d7:a3:10:9b:29:30:a7:9d:3b:12:
b1:49:e2:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICOFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTA4MzIxMTAvBgNVBAUTKDlFRDkwNTUxMDdDNzBGODVCQjkxQThEQTAyNzBCNUNB
NzYwQUVCNTQwHhcNMjYxMTA0MTQ0ODM4WhcNMjYxMTExMTQ0ODM4WjAYMRYwFAYD
VQQDEw02YWViNDVjNi0zYzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwO3PwPx+OYjn4z1QjJxWcZtNTPpKKlVIxwch/kFDKR8Gdv3vxlCJV53lJYHk
G6NRiXpAaMyCfT5HqfeCVnbjSgoO2ilT7T02pigU/CDGD6JPFUsD4NqDYLkXIDwL
Jj3Rui35xITqTsRXFQaNEodDctkD/51Pw5cQq6Fw38rm3JHHbqR9RqQMaTNWl9GP
hYlmZdeheVnYgUD6HWxHn9IcL8d4hVwLxNnNMqfnDSBkZignQQYXKz+JMYcJP/I9
qqje29FZeZ7m5+sTMb+mXJZhJonFB7cVYeCLgQrbzadGU5V8U5szCtXv+YbMYHJk
5fqPWFT0kUAf0dSBci3Q/1/RwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAqPJWLa
OY+TuQTFUkZw52kZodrZMB8GA1UdIwQYMBaAFJ7ZBVEHxw+Fu5Go2gJwtcp2CutU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDgzMi85REFGNzgwRTFE
OTQxMUUyOTkwMUYzRjgwOEIwMkNEMi9udGtGVVFmSEQ0VzdrYWphQW5DMXluWUs2
MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL250a0ZVUWZIRDRXN2thamFBbkMxeW5ZSzYxUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MDgzMi85REFGNzgwRTFEOTQxMUUyOTkwMUYzRjgwOEIwMkNEMi9udGtGVVFmSEQ0
VzdrYWphQW5DMXluWUs2MVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgwQQg6wQtCq09lLBNEnwIEZ54MAhm1DB4isPToAQQ1oH+CCzeu/P7Vr8CuYe
65zVpipxoWe+2rcwi//P/iHl2Mogkge/dZIojzZ8oej6F9liJSehjppjyy1zMAgl
MxbKbeacp1RRrbRsjNpI+sjGNf6G5H7jBIQEKywr5lUWsZL3wByj+NCkaTHvLLhd
9Q/yRspCou1xumZw3UVJv0FuQYQly3x8dXrFzaN2haLM/VJpamJtfAbP9UR5B7n/
tC+3rAZDqG9YMIaF1qdMIIUrUBCBBfo+LEn5Ia0AdjqcEqnGDtEGBzytl410zPBT
ai3IM+rXoxCbKTCnnTsSsUni5A==
-----END CERTIFICATE-----
Generated at Thu Nov 5 18:55:37 2026 by rpki-client