
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
File: nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json)
Hash identifier: CmT9gCdlFE1sxxIv6srIOx5SwysAZRd+58IJVa5+zyU=
Subject key identifier: F2:1F:BE:75:D0:F8:08:B5:A0:17:00:E1:B9:6A:02:50:03:D1:67:6C
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Certificate issuer: /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial: 06B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
Manifest number: 0688
Signing time: Sun 20 Sep 2026 22:27:13 +0000
Manifest this update: Sun 20 Sep 2026 22:27:12 +0000
Manifest next update: Sun 27 Sep 2026 22:27:12 +0000
Files and hashes: 1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: Dcf9HQp55Az6P5D/LKmOLojPfKMMsYgS4F6HI/jgSJ8=)
2: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: x8sZ4QxQXhvPiVMJ2oKAKBGtbntHbWyBpumXqbB9h14=)
3: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: 6oy8vfXbR13Fccn1nC7FTUc7Ni330SgxcaSdkrjuIvk=)
4: A7EBD74EAB7611F0A4F18663C4F9AE02.roa (hash: fMUinF8FSeKtIYLfJ88CgvoxibOKGi4+/9nzdFUr5UY=)
5: 729F253CAB7611F0BCB28743C4F9AE02.roa (hash: RNZ4spqntA0JMCZsSqaH+sqpORW1IDmuJusYPmcPZSk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1712 (0x6b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Validity
Not Before: Sep 20 22:27:12 2026 GMT
Not After : Sep 27 22:27:12 2026 GMT
Subject: CN=6ab05dc1-58ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e6:dc:ea:f3:5d:61:3e:35:a4:2a:b5:3b:d5:
74:3b:46:9a:ae:b9:7d:14:cf:c7:ea:99:0c:e3:4d:
51:02:96:44:9c:dd:1c:7a:46:72:e2:c0:1d:25:c3:
24:58:ec:fa:7e:31:eb:d4:ba:4c:5a:d0:30:6b:22:
02:9e:71:f8:62:59:3f:e2:1a:8c:90:c4:f8:97:8c:
bf:77:48:5d:bf:20:0f:1c:e9:be:74:16:e7:43:93:
f8:d4:4a:f0:6c:fc:5a:e4:9f:45:1c:d6:e2:46:66:
6c:02:11:64:16:64:95:18:aa:b4:04:e7:29:7c:5a:
da:10:de:79:9e:2f:b5:13:75:ae:49:54:01:fa:03:
ed:f5:97:98:36:e9:0c:0d:0f:27:1d:b4:8e:ec:2c:
46:b2:36:79:8d:0b:ae:d6:58:31:8e:6b:e1:56:b2:
80:17:32:91:85:49:74:fd:8e:c8:40:1b:2a:e9:ed:
54:44:7e:ea:18:49:d9:e1:e3:3f:5e:f7:9d:50:c1:
15:c6:ec:c7:1f:e3:be:32:b6:cc:12:8c:0f:7b:0f:
df:35:07:50:9f:83:f5:51:63:25:87:16:cf:f6:3a:
b2:ca:e2:1f:97:c7:2d:f9:9a:7f:40:b8:2b:ec:3c:
6d:75:1b:1d:4d:2c:38:13:cb:69:16:c5:9b:1e:28:
cb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1F:BE:75:D0:F8:08:B5:A0:17:00:E1:B9:6A:02:50:03:D1:67:6C
X509v3 Authority Key Identifier:
keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:b6:6d:56:b9:8c:cc:5d:c9:c8:92:b0:5d:54:be:78:b5:c2:
33:f3:d0:03:98:d6:1b:4a:20:57:30:f1:76:15:2b:f6:d8:11:
ce:ba:b0:7d:0c:31:bc:86:0a:a6:7d:81:aa:0c:e2:d2:38:60:
21:b6:8c:70:c5:7a:64:a2:0d:00:e5:52:b9:43:25:f6:20:6b:
76:49:fd:71:bd:87:af:a0:9a:70:c5:be:25:0a:eb:40:54:1f:
39:fb:16:02:14:41:1d:aa:88:97:a0:65:f9:b8:85:f3:23:bf:
be:bc:25:2d:a7:a9:5e:a0:0f:17:6c:29:c5:5c:d0:e7:63:b4:
64:e9:71:60:f8:ea:f1:c9:ce:f3:eb:f6:87:db:49:eb:fe:09:
42:a5:a0:ce:3d:02:6f:22:58:10:1d:0b:5c:a4:2b:dc:32:16:
a1:0a:da:02:20:39:34:a4:40:25:6c:7b:49:76:51:bc:77:71:
c6:a3:d6:79:11:a7:24:26:24:82:db:e2:e2:a7:de:dc:82:34:
a7:c7:5a:ca:b1:9f:61:35:e3:08:75:34:5d:b7:1b:70:92:c2:
17:bd:99:c5:4d:5f:73:01:c2:6d:ce:33:a8:54:1c:0a:80:dd:
5a:e6:97:3d:9b:f8:05:a6:df:0d:7f:c8:0e:f6:4e:14:d7:2d:
1d:c2:73:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:09:21 2026 by rpki-client