
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
File: ntkFUQfHD4W7kajaAnC1ynYK61Q.mft (raw, json)
Hash identifier: PvUxovYweZ0O71WMHkyUhki4vzj7ZRrKu0UMFHTQJ+w=
Subject key identifier: 28:EF:1E:08:84:02:F6:B7:78:B1:57:72:AF:1E:09:61:1E:DE:58:69
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Certificate issuer: /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial: 383F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
Manifest number: 3680
Signing time: Sun 20 Sep 2026 14:46:22 +0000
Manifest this update: Sun 20 Sep 2026 14:46:22 +0000
Manifest next update: Sun 27 Sep 2026 14:46:22 +0000
Files and hashes: 1: ntkFUQfHD4W7kajaAnC1ynYK61Q.crl (hash: lfvmy0BBjX6C10jwBTdLJFaEuPQ17c+9v/hN06yd77o=)
2: 691D0462E6FD11F09102F531686F56BC.roa (hash: 0XyfDO8it6I75D9n0w3xE9lzsxnoVx1g4ZUiUe/hMW0=)
3: DED04A561D4111EB89535E1EC4F9AE02.roa (hash: gjmCrERX6bDJqRAovORADO2jmeMnvAozOWLBNvCikGQ=)
4: 167FCE12844B11EA91F6956BC4F9AE02.roa (hash: PzpE7MwYfVRawzIKsbVX370mNdsLgW2Qm+aakZFWhao=)
5: 0F3F5C24FF0E11EFB7B9A13CC4F9AE02.roa (hash: hiI9+9J/yDrdCo+Dium7Ql5PFxHRer5mP0Zz0ZVaF88=)
6: EF5779B09DD611F0BB1A500DC4F9AE02.roa (hash: xtJKVVrh02G9dTMpH4EO7nBEDufcmTJ1uO4G5ShnUy4=)
7: FBCDF210490B11EC8E4D1136C4F9AE02.roa (hash: 47wblHNUHR8QOKJUoT7iYPHs3BqPfi5JcNUXRdRFnRQ=)
8: 9E1F70A4844911EAA528AD63C4F9AE02.roa (hash: Gw6eqkoI9GjMAfax+Sy6LiS1Q6bEsJsUys7tDAvsHp8=)
9: DF6E9324D08D11EA9010E72EC4F9AE02.roa (hash: GDlrFsOMkk+fcO+QcoEg0Xz8k+lsBwDQwOJ1oO6ZWm8=)
10: 7D745B8C800411EB9398C63EC4F9AE02.roa (hash: E1QXwlpofWnOF885wZs0H95ShVhWhWqMPlBNA/xt/8E=)
11: 9F2B1EB0892C11EBB29AFF50C4F9AE02.roa (hash: TsQLO8q3V0PEg/QW2TxOwdlP9q86F7sKiMzK79eK+rc=)
12: 9D67280A844911EAA528AD63C4F9AE02.roa (hash: 1Gd0ADieLGVXYOgTjle7Xb85lx7mYyYRHSn9/35nibo=)
13: B89BA72097D711EBA8B8BA2AC4F9AE02.roa (hash: 48+6uM5fDnTMnACjVi51hR8ImGiaIPMtb2QsEfmcA9U=)
14: 7418230A6D4B11EBB1805C0DC4F9AE02.roa (hash: DvMc+C7ydaggndrUk3IDkyvlx9FwffySugOxDXp6bws=)
15: B1A0E8244BA311F19791B23AC5833773.roa (hash: hHBYBN5yWoN6LtekKpNRZMeXhczEHm/cKfEFTCq+ZHM=)
16: 13C828C62D8911EBA7D22C3EC4F9AE02.roa (hash: LWvz30J7nqbhh5taPr7hBquNOGwN6yl//Q6amBLA2ko=)
17: D6672BEE0BD111ECB2E9C868C4F9AE02.roa (hash: VroGJygKLBjQNkDiUE3DzWiyxIeS84Ur+QvbCD7WMn0=)
18: D9E23E4A6D4C11EB938EC44DC4F9AE02.roa (hash: zMHfwZgdZ0ZZwpzwsqGwEeST/OYG6+IfNinxg8TADiQ=)
19: 32CF326ECA2E11EA80305F0DC4F9AE02.roa (hash: 72prmaxV5I+nRCKgiCmBCuBxHjAnd2zDB9Kx7IAuER8=)
20: FAF25932427711EEBEA02D22C4F9AE02.roa (hash: 8hMby2QMc40C7Gl3ib11u7r8k7MSe+ayZqt3WE3eTlM=)
21: BB7CEA8CEF3B11ECABCC5E3EC4F9AE02.roa (hash: 4+fNNlvJO8/zUbQ29LqDl04P63xI45pAflNJ0VsGVsA=)
22: 7A58C8D6BBEA11EA8DF46778C4F9AE02.roa (hash: BCO4TPbsUTXKr6VORkWLBBWoboETmiJ75sR3vzGBSvE=)
23: 9B4B6C82904911EABE5F0C63C4F9AE02.roa (hash: MLGHYtNGkC756TmJuWFDWX+q6uSK7D/1Efdl7Recbww=)
24: 443470FC7C1511EBB779C03EC4F9AE02.roa (hash: 59AdWYDXv0qwi7Gjxa16HkdQksWMmrXabTThvXIKiK4=)
25: B34368F8BA9311EEB0A64B2AC4F9AE02.roa (hash: An3BggKdBYLbEgb3Hrkj33h4yocMp14OUbjX/d9n+NU=)
26: D10DBCB2475C11EEBF5FB180C4F9AE02.roa (hash: BRxvYL/f6CA3SKIVGbpzXkGKWWs47DxZMHo2MAWlkko=)
27: 9604F4A6899911EBA32C6224C4F9AE02.roa (hash: V/SzYzu69tmbsxP6bWvkiUxUMh2sV1e0ifoqU8Ehrhk=)
28: D9D185C6D27A11F092DEA24AC4F9AE02.roa (hash: hAsd4MgKrzzFojSm6DEKyVq+itBFW1idmKj+K2KrQmQ=)
29: 35E95924844811EAB301615FC4F9AE02.roa (hash: +xVk+rs8Sk3ot4BG/sDDsstuP19HaQF04qYw2FT/AjU=)
30: 35575C68844811EAB301615FC4F9AE02.roa (hash: p84kXPlD9gr0uNcPrMPIN+YNKnf8ICmyXIZyV2BXrVg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14399 (0x383f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Validity
Not Before: Sep 20 14:46:22 2026 GMT
Not After : Sep 27 14:46:22 2026 GMT
Subject: CN=6aaff1be-32cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:61:cc:fe:ce:47:b1:19:76:8e:57:74:33:
e8:05:fc:20:bc:be:9f:1f:f3:9e:e1:fb:48:61:cf:
d8:59:f9:62:d3:cc:c3:7a:8e:f8:9a:f7:76:38:c3:
0e:e2:0e:ed:95:51:21:b8:9e:00:0b:16:51:79:d7:
76:58:be:c7:fb:19:0f:c4:2d:8b:00:9b:42:34:91:
2a:cf:79:5a:6e:36:ea:20:14:28:fa:bd:e2:18:16:
9d:cb:fd:35:d8:40:40:ad:a4:47:54:a8:d2:3b:44:
f9:e8:77:f2:cc:73:61:60:2a:b7:9e:91:0c:10:e8:
8f:ee:9b:49:e5:6e:df:71:85:1e:1c:f2:2d:61:4c:
2b:98:21:28:06:66:34:a4:3b:3a:53:9b:2a:90:05:
ba:4c:48:99:d8:28:10:41:8d:2f:88:55:4e:23:d0:
c8:f3:0f:2c:73:df:27:00:31:d1:b2:b8:14:8c:e4:
58:fc:51:8a:8c:6d:c1:a0:2f:17:a2:27:65:33:cf:
f8:b2:15:cc:07:b5:2a:52:71:5c:47:f0:83:f3:da:
da:10:6e:07:ca:3f:35:44:ca:b4:2c:cc:00:87:91:
45:e6:07:bc:c5:16:f3:5a:ee:04:07:dd:0c:e5:62:
ea:24:ef:e3:39:0b:b7:45:0d:57:ef:4c:64:c9:71:
f6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EF:1E:08:84:02:F6:B7:78:B1:57:72:AF:1E:09:61:1E:DE:58:69
X509v3 Authority Key Identifier:
keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:b5:83:f0:d8:7c:71:f7:ba:bf:53:17:5b:e2:16:b1:69:6d:
a4:e4:12:5f:cd:aa:3a:ed:c5:62:f1:98:b1:f0:54:a2:f5:c6:
b7:73:ce:7c:fd:fd:8b:d8:ef:17:f4:77:75:fc:8a:31:5e:0f:
3d:dc:2f:6e:99:e9:fc:48:ba:d0:82:eb:64:0b:6d:f9:70:88:
93:01:15:f1:71:35:d9:14:44:87:b1:42:cc:b8:3a:09:8d:1f:
bc:96:fc:48:47:c6:cc:99:15:e9:65:55:4a:56:dd:0d:81:3a:
2e:d9:b6:e0:de:2e:a8:0a:67:8a:a1:09:5e:94:87:10:45:b3:
6d:d1:7c:ad:14:d1:02:36:e4:24:f6:ff:ba:9b:ae:d6:35:d3:
90:63:73:b8:da:fe:4a:ce:6a:9f:a0:66:d9:0f:c6:56:e3:5f:
5c:84:0a:a0:ef:74:ac:83:26:a2:96:bc:ec:74:3d:f9:fa:28:
00:2f:5f:5d:9f:da:32:ec:c8:08:13:51:05:9d:8a:55:cb:87:
83:4c:8b:29:04:b5:4d:ab:61:22:e5:0a:fc:5b:a4:fa:f6:73:
53:e9:e3:97:0c:ee:a2:02:fe:3d:eb:14:06:92:ae:5d:af:d9:
e0:a3:43:e5:e3:87:bd:49:22:dd:fb:1c:47:1e:20:3f:ba:38:
9e:37:ea:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:05:53 2026 by rpki-client