
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
File: Nocz_cVgxeuJ5FJA331AOcsvYQg.mft (raw, json)
Hash identifier: c+x4YZZMu+a0319kUiR8mtSvvgGlixw2tw9x07taZIs=
Subject key identifier: B4:E1:19:A2:30:C2:E3:04:E1:C8:43:66:B3:EA:7D:C2:D5:11:4C:79
Authority key identifier: 36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08
Certificate issuer: /CN=A91C97F5/serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108
Certificate serial: 02D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
Manifest number: 02C8
Signing time: Mon 02 Mar 2026 02:07:24 +0000
Manifest this update: Mon 02 Mar 2026 02:07:22 +0000
Manifest next update: Mon 09 Mar 2026 02:07:22 +0000
Files and hashes: 1: Nocz_cVgxeuJ5FJA331AOcsvYQg.crl (hash: pCHlE5A2hzUmoIathalNWnvBSOTRWl3KLWsEbOcR/Wo=)
2: 48B639C8B85E11F0B0F0B01CC4F9AE02.roa (hash: pcUI164QP94dET6vxGqZiMWs2E97pOagQxpOZq2263A=)
3: 020D49E0283211ED9E29FA70C4F9AE02.roa (hash: bnjR0+NKXKAmWxRc9D3E4vCO8glI5TIRHVBCY29e/KE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl
rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:07:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 724 (0x2d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C97F5, serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108
Validity
Not Before: Mar 2 02:07:22 2026 GMT
Not After : Mar 9 02:07:22 2026 GMT
Subject: CN=69a4f0dc-8c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:fd:22:1c:35:79:df:9d:ff:2d:07:24:05:
20:24:b9:be:e0:9b:06:1d:c5:9b:f5:21:53:e4:08:
b6:93:b7:96:8c:91:fa:3a:70:70:82:41:5d:07:de:
c7:b1:78:07:da:aa:d5:8e:55:e0:53:6f:ea:32:fb:
99:6e:7c:61:2f:49:6c:a3:69:53:f0:e8:1b:cf:b4:
e3:45:86:11:3b:fd:93:da:25:d9:04:37:4e:22:fc:
2a:35:28:76:52:6d:2e:70:c5:f0:ea:df:5d:5b:9d:
3c:a6:1c:bd:3a:d3:26:4d:ac:42:bc:5b:6f:d2:27:
23:05:d1:16:e6:46:d6:fa:41:99:27:3e:e3:a4:43:
e5:cd:94:32:3d:4a:ca:56:a8:f8:1f:8c:75:ca:f1:
a4:d9:cf:fa:a4:bc:2c:97:09:2b:26:43:e8:b4:7b:
03:45:31:c7:bd:95:4e:0b:a3:b9:1e:4c:8f:69:68:
74:05:1c:6c:23:56:f4:bd:82:64:22:31:b6:f1:f3:
37:da:27:47:a8:c3:1b:cf:00:eb:a2:a7:bc:04:12:
56:62:75:ad:7a:e1:ab:da:9c:f5:39:24:13:28:7b:
09:c3:95:6e:4e:fd:11:ad:82:92:b6:65:3c:00:04:
b6:d4:69:e7:df:13:15:fa:28:f8:a4:e2:8b:fa:5a:
07:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E1:19:A2:30:C2:E3:04:E1:C8:43:66:B3:EA:7D:C2:D5:11:4C:79
X509v3 Authority Key Identifier:
keyid:36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:0d:cf:b3:7a:30:89:5c:44:f4:e9:b6:da:c2:87:96:3d:3b:
17:d1:7b:ca:2b:b2:83:f3:12:16:f0:58:ff:06:c6:51:d6:2b:
3c:04:86:3d:b4:1b:71:9b:c8:ac:02:59:dd:70:3e:d6:b6:c9:
16:31:96:6c:8a:4a:80:b4:cb:af:b9:43:55:1e:04:75:79:55:
d0:7f:a6:de:da:f7:ee:4a:25:8d:3c:66:cc:e8:c0:9a:ae:0d:
a3:f5:2d:50:ce:1e:ce:8a:8e:e4:80:8e:21:a6:f6:88:4d:de:
c8:9e:fc:8a:4e:c0:18:10:d0:f7:dd:56:7e:68:62:14:f1:30:
33:2c:1a:0d:10:56:73:5b:0f:15:93:8e:d0:42:bc:71:76:4a:
18:47:0b:a3:a8:db:5e:c8:32:b9:d7:81:97:f1:b6:18:f3:ed:
d5:5e:41:a2:89:40:73:46:08:1c:e3:38:ed:ed:a6:1c:6f:24:
85:dc:ae:17:90:35:5f:84:e0:08:18:15:88:b5:ba:a9:57:0b:
e6:c2:08:24:ab:50:60:76:57:b5:fc:20:af:79:cb:fe:f7:cc:
33:ca:b1:7f:ce:a6:ea:93:af:b5:5a:e4:cc:13:e7:36:b7:84:
f1:4b:79:53:3e:9c:0d:9e:e4:01:52:66:91:3f:7f:a8:15:d6:
e0:7c:03:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:51:51 2026 by rpki-client