
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft
File: NctCHFV3F3WBziSzai9syTGEYFI.mft (raw, json)
Hash identifier: zYA3EFl30POSN84kNtBE0ygXrn+1/wyHjazqzsgPQ/U=
Subject key identifier: CC:50:85:A8:C3:E9:BF:50:1D:A8:6E:FC:6D:6A:E3:F5:4A:35:C0:17
Authority key identifier: 35:CB:42:1C:55:77:17:75:81:CE:24:B3:6A:2F:6C:C9:31:84:60:52
Certificate issuer: /CN=A91CA3CD/serialNumber=35CB421C5577177581CE24B36A2F6CC931846052
Certificate serial: 01FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft
Manifest number: 01F6
Signing time: Wed 29 Jul 2026 04:26:53 +0000
Manifest this update: Wed 29 Jul 2026 04:26:53 +0000
Manifest next update: Wed 05 Aug 2026 04:26:53 +0000
Files and hashes: 1: NctCHFV3F3WBziSzai9syTGEYFI.crl (hash: KVbWYW/wGT+D/4EBgn7mZJ+cqq1j1KCV736Lq3ptNoA=)
2: F5121FB090CF11EE8036815AC4F9AE02.roa (hash: fAaur7LW2+pEge7BQCktlo8tOQuU2cmVWJ8Ioa474Lw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.crl
rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 04:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA3CD, serialNumber=35CB421C5577177581CE24B36A2F6CC931846052
Validity
Not Before: Jul 29 04:26:53 2026 GMT
Not After : Aug 5 04:26:53 2026 GMT
Subject: CN=6a69810d-8d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5f:33:2c:ca:7e:de:95:72:d5:59:f0:a5:4c:
2f:5d:e4:98:86:cb:b8:aa:96:f3:b2:6a:7a:3f:1e:
16:06:a5:36:a2:5a:98:41:71:3a:ef:31:e1:02:21:
b9:63:a7:fe:dd:77:34:1c:b8:fa:20:be:9d:cd:22:
d4:66:5f:47:a3:98:6f:a0:12:a9:e6:a1:2f:68:61:
35:6e:0d:29:7e:35:0c:1d:6a:3a:67:14:7a:3f:cb:
0e:6f:f6:d9:67:81:ce:be:e8:79:07:ae:49:62:1a:
da:4c:af:ee:38:90:2c:b1:cf:5e:a4:3d:3f:88:c9:
03:21:1a:4e:75:39:ee:b7:06:74:29:69:26:74:ef:
3b:4b:44:e7:b9:76:d5:7c:c3:b6:ed:03:6b:9f:c1:
c3:2a:c2:a1:bb:b6:cc:36:7c:70:8b:ae:e0:3b:65:
ed:07:d2:c3:4d:88:47:fd:b8:22:b0:6a:d3:3f:3c:
f5:7d:1d:8d:91:4f:cf:d1:7a:b5:e1:8a:57:3c:dc:
ba:68:df:48:ca:d3:7a:9b:cc:1b:0e:46:af:ac:cd:
6f:a6:9b:76:28:28:ee:21:1f:c0:8f:bf:f2:37:d2:
43:3f:6e:e8:89:a4:c2:11:0d:ec:c2:59:75:be:c2:
eb:e5:5a:8c:b3:b8:5a:35:ba:d2:34:76:dd:01:db:
92:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:50:85:A8:C3:E9:BF:50:1D:A8:6E:FC:6D:6A:E3:F5:4A:35:C0:17
X509v3 Authority Key Identifier:
keyid:35:CB:42:1C:55:77:17:75:81:CE:24:B3:6A:2F:6C:C9:31:84:60:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:78:df:ac:b4:50:69:2e:f2:85:b7:6b:cb:a9:cd:8e:04:ae:
ed:1f:2f:47:39:9b:38:85:74:3a:35:3e:f3:4b:bc:36:f0:41:
b1:f3:c1:54:85:84:b1:55:45:42:49:6c:d1:e5:29:70:1c:0a:
0a:be:2d:cc:84:98:77:1b:b1:d2:34:fd:34:d6:8e:60:4c:b0:
db:a4:a6:db:ff:88:0f:61:cb:99:1a:d8:f0:55:3a:a8:7f:f7:
9a:df:9c:e7:a2:62:67:4e:35:7a:ff:9a:60:16:f5:4a:e6:bc:
59:0b:a6:6f:a5:7f:1b:24:15:e0:2e:c9:14:28:fb:c8:89:00:
89:9e:ec:14:e1:7e:7a:f2:b2:82:6c:09:8b:44:52:8c:86:8b:
82:97:a1:a7:a6:ae:85:d8:e6:b5:af:d9:84:df:d8:e8:04:50:
7a:9a:3d:2b:2e:2c:1a:f7:ae:51:29:a8:59:c1:8f:c3:a1:0c:
9e:ad:ff:5b:06:e1:42:10:b3:07:25:07:1a:76:82:75:1a:bf:
96:fc:3b:87:07:5e:69:75:40:76:cd:13:db:bc:b3:cf:f5:03:
79:c5:88:c4:82:ac:df:56:8a:f8:c6:3e:ee:0a:d7:a7:70:34:
8d:41:54:55:ea:08:d6:16:37:42:7f:63:3e:32:0f:1b:c1:2c:
c8:60:f3:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0EzQ0QxMTAvBgNVBAUTKDM1Q0I0MjFDNTU3NzE3NzU4MUNFMjRCMzZBMkY2Q0M5
MzE4NDYwNTIwHhcNMjYwNzI5MDQyNjUzWhcNMjYwODA1MDQyNjUzWjAYMRYwFAYD
VQQDEw02YTY5ODEwZC04ZDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo18zLMp+3pVy1VnwpUwvXeSYhsu4qpbzsmp6Px4WBqU2olqYQXE67zHhAiG5
Y6f+3Xc0HLj6IL6dzSLUZl9Ho5hvoBKp5qEvaGE1bg0pfjUMHWo6ZxR6P8sOb/bZ
Z4HOvuh5B65JYhraTK/uOJAssc9epD0/iMkDIRpOdTnutwZ0KWkmdO87S0TnuXbV
fMO27QNrn8HDKsKhu7bMNnxwi67gO2XtB9LDTYhH/bgisGrTPzz1fR2NkU/P0Xq1
4YpXPNy6aN9IytN6m8wbDkavrM1vppt2KCjuIR/Aj7/yN9JDP27oiaTCEQ3swll1
vsLr5VqMs7haNbrSNHbdAduSsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMxQhajD
6b9QHahu/G1q4/VKNcAXMB8GA1UdIwQYMBaAFDXLQhxVdxd1gc4ks2ovbMkxhGBS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTNDRC8yNjQ1M0ZBMDkw
NTcxMUVFODY0OTM2MTNDNEY5QUUwMi9OY3RDSEZWM0YzV0J6aVN6YWk5c3lUR0VZ
RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05jdENIRlYzRjNXQnppU3phaTlzeVRHRVlGSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QTNDRC8yNjQ1M0ZBMDkwNTcxMUVFODY0OTM2MTNDNEY5QUUwMi9OY3RDSEZWM0Yz
V0J6aVN6YWk5c3lUR0VZRkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACHjfrLRQaS7yhbdry6nNjgSu7R8vRzmbOIV0OjU+80u8NvBBsfPBVIWEsVVF
Qkls0eUpcBwKCr4tzISYdxux0jT9NNaOYEyw26Sm2/+ID2HLmRrY8FU6qH/3mt+c
56JiZ041ev+aYBb1Sua8WQumb6V/GyQV4C7JFCj7yIkAiZ7sFOF+evKygmwJi0RS
jIaLgpehp6auhdjmta/ZhN/Y6ARQepo9Ky4sGveuUSmoWcGPw6EMnq3/WwbhQhCz
ByUHGnaCdRq/lvw7hwdeaXVAds0T27yzz/UDecWIxIKs31aK+MY+7grXp3A0jUFU
VeoI1hY3Qn9jPjIPG8EsyGDzNw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:01:11 2026 by rpki-client