
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
File: NttE1MFZiGc4IVpWELEQwkSGylY.mft (raw, json)
Hash identifier: K5EbCa3M6HgnVkn/WYhipIGS7b97YP2ypNWUtJ2v0qE=
Subject key identifier: 64:40:AD:6E:3F:4E:0F:34:D9:46:3C:A1:3C:D6:18:A6:E4:8B:FF:14
Authority key identifier: 36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56
Certificate issuer: /CN=A91C6515/serialNumber=36DB44D4C159886738215A5610B110C24486CA56
Certificate serial: ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
Manifest number: E4
Signing time: Fri 25 Sep 2026 06:36:59 +0000
Manifest this update: Fri 25 Sep 2026 06:36:58 +0000
Manifest next update: Fri 02 Oct 2026 06:36:58 +0000
Files and hashes: 1: NttE1MFZiGc4IVpWELEQwkSGylY.crl (hash: 4jbiQkBoHMEAaJfA4EJ4MTW4+xoAPv/OKiqNrDzCWsU=)
2: E5723CA260C111F0A9EB0333C4F9AE02.roa (hash: vxcGwI8Luk+cexqrtDI44NCym1uBtp6Sxq28P5I1c3Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl
rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:36:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6515, serialNumber=36DB44D4C159886738215A5610B110C24486CA56
Validity
Not Before: Sep 25 06:36:58 2026 GMT
Not After : Oct 2 06:36:58 2026 GMT
Subject: CN=6ab6168b-f1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:65:71:ae:b2:ee:af:9b:75:b9:ca:ef:92:7d:
76:17:e4:db:a3:c3:f0:da:7f:25:53:0c:4e:4e:69:
5e:4f:e6:44:3a:d2:90:a4:81:61:8f:fe:e5:22:51:
9e:d2:66:c2:d1:72:0d:7e:dd:e0:81:48:95:48:69:
07:bb:ea:7d:da:ce:c6:c7:b9:0c:98:90:39:55:4b:
c0:27:1e:33:12:b2:50:58:60:cc:fc:02:13:c1:57:
d7:cb:f3:12:f7:57:63:62:38:7d:ac:97:13:62:d3:
43:c0:f2:e8:2a:2e:5b:ca:8c:14:a1:87:9e:f7:55:
84:03:fc:00:20:c8:ab:20:7d:3a:84:2b:da:5e:3d:
02:7b:2c:5c:de:82:00:7a:d2:92:9b:07:51:46:69:
0f:9b:56:71:bc:d0:41:2b:a6:9f:90:35:8e:58:47:
35:e3:65:b6:a8:ee:b2:d2:7d:40:57:6b:63:49:fe:
4a:c5:a6:f1:47:6d:12:f1:db:91:08:9c:1a:a7:5f:
76:c6:45:5c:bc:37:47:05:4d:0d:68:9c:db:cf:f4:
1e:df:45:bd:1a:42:51:8a:08:d0:2c:ad:51:a7:cb:
2d:78:0a:cb:ee:d5:97:05:4a:91:a4:28:1d:b6:4b:
a2:8a:37:ec:ae:02:ab:ae:b3:69:5c:3c:a0:69:b7:
c3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:40:AD:6E:3F:4E:0F:34:D9:46:3C:A1:3C:D6:18:A6:E4:8B:FF:14
X509v3 Authority Key Identifier:
keyid:36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:6d:e2:e2:8a:85:b5:16:2c:cb:e3:70:eb:23:c9:71:45:d4:
9e:a3:3e:97:37:a1:28:f6:1a:a8:ac:bc:00:c8:00:83:ec:78:
b8:9a:84:34:a3:34:e7:d0:03:dd:1c:ce:c3:7b:24:03:a9:82:
32:b3:54:5d:62:3a:f6:13:33:2f:a0:76:a4:35:22:e0:f7:8e:
a5:ee:0e:67:12:6f:36:63:b7:71:0e:f8:a1:95:1a:3f:e7:3f:
a1:78:7f:ea:ed:5c:9a:b5:e4:ab:70:c9:c2:dd:2a:2e:40:c2:
25:ee:74:46:2a:c7:43:e3:6b:24:90:97:1c:a2:f0:2e:83:df:
5a:68:da:23:e1:b0:e5:6f:91:36:fd:27:24:fe:3a:d6:09:aa:
00:ca:82:b2:a2:f1:69:99:83:53:bf:5a:64:48:c6:c6:b6:11:
09:e2:10:94:c2:e1:ba:62:20:de:3d:95:51:ec:72:f7:e8:74:
ea:30:39:1d:36:37:36:83:49:80:cd:84:1b:9f:87:9e:0f:7d:
ff:5e:d2:ba:76:59:d2:41:f3:fb:84:45:ba:e3:a6:db:d3:1e:
ac:ae:55:e6:75:ab:c5:4d:9b:f6:a9:1b:59:d4:83:9c:8c:b9:
ca:de:91:b8:c3:c5:01:1c:bf:77:43:c5:a4:44:c4:d3:a2:b0:
bf:d8:02:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:18:12 2026 by rpki-client