
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
File: nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json)
Hash identifier: P91Qo/Gz2Bl0M3mz/+vgkwh6Yx0YRS4dQKqxetobOCQ=
Subject key identifier: 76:61:94:E7:7B:D2:83:88:99:92:34:61:ED:66:CE:B3:70:84:0F:5D
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Certificate issuer: /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial: 0694
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
Manifest number: 066C
Signing time: Tue 28 Jul 2026 23:16:09 +0000
Manifest this update: Tue 28 Jul 2026 23:16:09 +0000
Manifest next update: Tue 04 Aug 2026 23:16:09 +0000
Files and hashes: 1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: YxW93nyt/lPew0i0N2ldtfdZD/iK9vvLgs8AAkI65GY=)
2: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: 6oy8vfXbR13Fccn1nC7FTUc7Ni330SgxcaSdkrjuIvk=)
3: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: x8sZ4QxQXhvPiVMJ2oKAKBGtbntHbWyBpumXqbB9h14=)
4: 729F253CAB7611F0BCB28743C4F9AE02.roa (hash: RNZ4spqntA0JMCZsSqaH+sqpORW1IDmuJusYPmcPZSk=)
5: A7EBD74EAB7611F0A4F18663C4F9AE02.roa (hash: fMUinF8FSeKtIYLfJ88CgvoxibOKGi4+/9nzdFUr5UY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 23:16:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1684 (0x694)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Validity
Not Before: Jul 28 23:16:09 2026 GMT
Not After : Aug 4 23:16:09 2026 GMT
Subject: CN=6a693839-caf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:23:c8:2f:61:9f:f5:ae:c8:26:da:27:42:87:
22:04:08:4e:f2:a8:df:93:3e:1b:3b:66:8a:21:47:
b9:47:3b:64:1d:33:5d:da:d6:fd:8b:c7:79:33:d2:
b0:d1:0a:4e:7f:0d:5b:74:5a:df:04:73:41:0d:c5:
51:5c:d4:7e:94:05:be:54:4c:61:90:91:9c:07:0b:
f9:33:81:9d:b7:e2:07:24:af:9e:da:35:5c:79:d1:
9a:82:cd:69:43:17:41:99:1c:8f:30:ce:8a:7c:3d:
cd:02:57:50:f8:6f:4c:ba:d2:2d:c2:28:fa:bd:34:
60:bb:c1:df:46:af:e5:8f:65:2b:e4:db:33:ed:56:
f4:da:be:39:82:b3:8e:51:b5:f7:e5:28:e8:9f:be:
91:b5:75:b6:88:e0:c8:c9:f9:80:1d:13:b5:b2:98:
1b:aa:53:a9:ec:35:cc:06:eb:42:d0:84:fd:9a:9a:
26:27:12:d0:ab:89:62:d8:99:0a:4e:5f:d9:b4:5a:
db:da:35:af:dd:d7:f2:c0:82:b6:f9:3e:8a:ea:de:
0d:68:af:26:22:ea:f6:27:0a:e3:f0:a8:38:d7:2a:
5a:72:aa:cd:38:0c:0d:13:be:07:00:2b:0c:9c:d2:
63:0a:45:c6:d7:2b:71:e4:a6:4c:ba:85:bf:ad:79:
2b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:61:94:E7:7B:D2:83:88:99:92:34:61:ED:66:CE:B3:70:84:0F:5D
X509v3 Authority Key Identifier:
keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5f:52:bb:1c:44:b9:d0:0c:5c:f2:79:77:cf:d9:41:b9:b5:
a1:ae:49:c9:9b:43:ed:40:a0:f8:5e:ef:c9:33:d8:e9:61:e6:
a4:8b:a8:3a:5b:e9:0f:70:19:d6:ac:68:47:07:f6:ef:d2:5e:
70:6f:53:a1:61:3d:cb:42:74:94:3e:f5:2c:06:6c:0e:a6:ff:
d7:55:5f:9f:78:d9:15:76:25:91:86:c0:c4:0b:d0:2f:b0:f9:
c5:e2:81:3c:b8:98:d5:ea:2a:21:23:ad:4b:14:1c:37:47:41:
e5:2a:32:7a:e4:b3:6b:46:00:74:71:89:17:73:0c:60:74:2b:
ba:9a:58:eb:fb:6e:3f:31:f0:e7:00:27:50:fd:1f:8e:ce:29:
6a:c3:09:de:ae:cf:ad:18:c7:5a:92:49:52:cd:e9:70:be:79:
26:3d:86:98:bc:f8:99:64:0b:78:6c:7b:58:ae:c1:35:60:1d:
09:a4:fb:4b:2b:d4:af:51:f3:30:9f:59:d0:75:f9:c5:7e:27:
5f:04:55:0d:8c:c6:21:6c:36:b5:1a:6c:1e:95:7f:36:6a:b4:
a6:fb:e4:4b:ad:d2:27:f1:3d:a9:66:19:9b:7f:c4:b7:03:71:
d4:40:0b:3f:47:05:4c:ce:2a:5d:cc:43:bf:2e:28:d9:13:1b:
7e:c2:08:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:41:06 2026 by rpki-client