
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft
File: NHTCU5hhEAr9ljoWPIAtAmT47H0.mft (raw, json)
Hash identifier: ntMy/3w7oWQ72yQhBjeBIri44MIgMskz6vm7G/RP9yc=
Subject key identifier: D1:4F:F4:1F:10:19:3F:02:53:9C:69:BD:CF:FB:52:C7:9A:B0:9D:3D
Authority key identifier: 34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D
Certificate issuer: /CN=A91D63AF/serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D
Certificate serial: 0211
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft
Manifest number: 0203
Signing time: Mon 21 Sep 2026 03:17:57 +0000
Manifest this update: Mon 21 Sep 2026 03:17:56 +0000
Manifest next update: Mon 28 Sep 2026 03:17:56 +0000
Files and hashes: 1: NHTCU5hhEAr9ljoWPIAtAmT47H0.crl (hash: YRfCz9keR8IzpfwL1RkzWhWvJ1uU8uUuWSNALZLdZsA=)
2: 8C508DC055F711EFA5200828C4F9AE02.roa (hash: +vcgHqQaVF6a8tBeWlRZvq+SFdKItNicDBwJjhcEwPQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl
rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:17:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 529 (0x211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D63AF, serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D
Validity
Not Before: Sep 21 03:17:56 2026 GMT
Not After : Sep 28 03:17:56 2026 GMT
Subject: CN=6ab0a1e5-d5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:93:ab:19:d6:d6:68:e4:03:02:3d:df:1f:34:
19:51:37:6e:e3:49:00:3e:6f:65:fd:b0:e1:f6:f1:
c6:32:2c:95:ea:b3:39:f8:86:ff:2b:f3:fe:19:e8:
a1:25:f8:f3:54:99:c5:b8:0b:31:48:e7:21:7e:5f:
86:b9:e2:ae:fa:5e:1d:87:29:e6:43:d2:7e:82:33:
c3:93:f2:0f:bd:96:81:0c:57:00:76:85:f1:a9:74:
38:77:25:0e:bf:24:ab:d2:91:56:29:36:6a:08:fe:
ea:c4:64:f8:80:3f:cd:ee:56:82:5c:38:e9:bf:15:
24:d6:57:b9:95:7e:4a:70:c0:34:e6:d0:e2:5a:22:
c1:57:02:d6:fc:c2:e1:72:4d:28:a6:35:5c:72:87:
5f:fa:61:c3:06:20:c4:13:1f:5b:ab:b3:d1:98:00:
54:a6:00:79:34:80:7f:d0:a2:21:a1:c6:49:db:c8:
79:9e:80:da:1d:b5:a3:53:f7:ec:b2:d8:fa:8c:d3:
a0:e1:90:22:44:3f:75:a3:77:b7:fe:22:5d:34:db:
4d:d0:c2:2f:69:29:11:3c:80:d3:9f:07:59:d3:9d:
69:b9:49:bd:65:9f:7f:9c:2a:bc:5c:f4:2c:f8:3e:
82:66:0e:b0:63:fb:64:b9:a6:c3:f0:8b:0f:e0:cc:
ab:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4F:F4:1F:10:19:3F:02:53:9C:69:BD:CF:FB:52:C7:9A:B0:9D:3D
X509v3 Authority Key Identifier:
keyid:34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:87:1a:42:a0:4a:b0:27:3a:6f:20:5a:1e:85:83:57:c0:fc:
b7:d7:09:de:6c:a0:16:75:f5:20:10:2e:d2:fa:44:c8:37:5a:
50:0f:04:17:01:a2:07:4b:b8:16:47:86:1e:63:95:1b:0c:26:
b5:6a:61:21:7e:20:ca:01:3a:65:27:72:d6:f6:6d:cc:5b:3a:
b9:b8:61:34:7e:23:0b:c0:37:10:cd:54:07:11:fa:27:6c:45:
e3:b6:2d:be:46:82:d3:3c:0a:8b:8f:05:1e:47:dd:6e:65:43:
77:b1:ef:c3:49:5c:df:6d:f1:0d:b2:dd:a6:6d:a5:79:1b:21:
b6:23:3a:c6:1b:27:34:4e:8c:40:32:1c:df:70:2d:2a:db:bd:
0e:26:3a:58:39:cd:a3:66:c7:4f:f1:0f:e7:65:6d:68:87:41:
c1:22:e6:c7:27:50:07:1b:41:2f:80:a7:6b:fb:38:83:42:de:
a5:2b:65:93:5a:66:04:1e:18:a0:6f:d4:dd:58:e8:88:c0:11:
3c:0d:99:71:67:04:8c:70:61:57:a8:ed:bb:72:52:e2:85:ff:
0a:68:d7:9c:96:f4:a1:79:26:87:ea:64:0f:a3:b6:88:4d:05:
80:df:da:c1:db:34:83:ee:df:50:2b:f9:4d:fa:56:57:03:c7:
3f:1b:43:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:18:06 2026 by rpki-client