
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
File: nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json)
Hash identifier: nyg7yP/TwztdhjkAkFb6FSRqbFzO1fF6bsl13i+Q5ng=
Subject key identifier: D4:2D:4D:C6:DF:93:80:D7:90:39:D1:77:1A:F3:D2:A6:F4:0D:EA:D4
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Certificate issuer: /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial: 063C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
Manifest number: 061C
Signing time: Sat 28 Feb 2026 23:26:19 +0000
Manifest this update: Sat 28 Feb 2026 23:26:18 +0000
Manifest next update: Sat 07 Mar 2026 23:26:18 +0000
Files and hashes: 1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: AgbkuR1KtEU6aZ8ZqGNAAWfJH0KDQH5OyvPydyyZEF4=)
2: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: 414/5RyiyMUZFN0SEFameoFpU4rRSpvpvgBCGAe+h0s=)
3: 729F253CAB7611F0BCB28743C4F9AE02.roa (hash: /i4Id8Q+jnrw5e+R6tIy1tKz8MPyg9GBRlUx3W4xwjI=)
4: A7EBD74EAB7611F0A4F18663C4F9AE02.roa (hash: 1ILmh7AVLQm5eSNZItp8QnZ0ivg8piYKVtyisI3TQ00=)
5: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: 5J+X0LjgteZA7gTRmfGapcuapYL3WvWAdk4QrzcZNQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:26:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1596 (0x63c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Validity
Not Before: Feb 28 23:26:18 2026 GMT
Not After : Mar 7 23:26:18 2026 GMT
Subject: CN=69a3799b-4e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:23:94:f6:d7:27:a8:ef:e8:53:97:38:6d:89:
15:8e:db:42:d5:b9:14:a5:85:9d:13:06:c3:54:10:
21:10:3f:0f:41:c7:79:62:9d:9f:a2:7b:72:7a:10:
7a:1b:7a:b3:fd:28:7a:ff:86:aa:9f:28:0a:9a:38:
cb:89:b1:d6:92:1e:e2:fd:93:69:d9:05:6f:7c:28:
d7:83:39:bb:e2:e4:97:13:93:e8:e2:f8:ab:62:55:
cf:8e:ea:7e:2c:96:11:83:7c:7e:36:47:ec:97:85:
85:26:90:18:a9:67:eb:af:7b:2e:49:50:fd:88:5b:
39:1e:ea:9c:41:b3:62:36:4d:c8:5d:cd:2d:32:a0:
09:be:13:7f:80:3b:b3:60:3f:fb:a8:ca:81:97:e5:
9c:af:64:40:8a:46:4a:c9:2c:94:a0:e1:39:ff:ba:
41:53:9d:2d:80:f8:d1:d6:35:95:b8:99:86:6d:cc:
9d:c1:63:70:f8:78:4f:ec:39:b6:1b:9e:e1:56:0b:
0c:91:47:4a:e1:da:84:a8:36:dd:1c:cf:77:db:8f:
7b:06:da:92:f8:14:ea:d5:4f:a8:0f:3f:d4:d6:8f:
1a:ae:2a:b2:5c:1d:23:eb:af:e8:79:db:c5:73:ff:
f2:4d:ef:69:e2:55:db:e3:10:6b:d5:d5:60:ca:99:
d3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2D:4D:C6:DF:93:80:D7:90:39:D1:77:1A:F3:D2:A6:F4:0D:EA:D4
X509v3 Authority Key Identifier:
keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:2d:0f:00:6e:6f:12:0b:69:e3:00:5f:ff:75:11:0d:5d:fe:
a1:d4:58:9c:d5:c3:2c:0f:65:00:65:2d:3b:ad:ec:a6:4a:7d:
1e:85:fa:59:6b:70:4a:ef:bb:87:ad:1d:dd:5e:dd:67:e9:49:
05:40:9b:8e:ca:ba:74:fa:8c:33:b5:7d:90:3e:dd:b3:55:35:
8c:29:4d:cc:04:06:6b:95:f0:9c:ea:ab:13:83:ce:80:13:72:
7b:f7:c8:d3:64:e0:07:02:11:28:df:fa:d2:2e:69:0e:0e:18:
c8:11:ff:5b:e1:b1:4e:d1:56:2b:e2:d0:5c:e8:a0:5a:12:61:
a2:1a:c2:16:4e:22:b3:12:da:4b:b4:1c:79:75:fd:3e:c7:42:
a0:bc:ef:51:06:aa:c5:70:7b:87:78:f1:cc:39:e0:1e:f2:1a:
59:28:2e:42:6d:f1:03:a2:ad:10:25:07:03:22:6b:87:59:80:
ec:1b:0c:e6:e2:f4:c6:37:b1:0d:42:30:04:49:15:ff:a2:11:
fa:63:09:20:05:d8:35:68:fe:21:7d:20:35:d6:c6:c7:f5:d6:
50:0d:18:15:83:01:dd:85:d2:f4:c5:83:49:00:60:cc:95:af:
f5:65:8f:86:7c:d9:87:a0:8e:97:11:0f:01:9e:24:d7:ed:4c:
9c:c4:75:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:17 2026 by rpki-client