
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
File: NcbYSDFsIdmTz25MBtYB3AXvxOE.mft (raw, json)
Hash identifier: +6wFkpZagx9yvTQjYYowO13FVoi4fS5wRDxmdxGb7jI=
Subject key identifier: F1:58:95:E1:8A:F0:23:0C:CA:CD:F2:E6:DF:0A:DF:7A:4E:CC:13:11
Authority key identifier: 35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1
Certificate issuer: /CN=A91F473F/serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1
Certificate serial: 0279
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
Manifest number: 0272
Signing time: Sun 15 Nov 2026 02:13:21 +0000
Manifest this update: Sun 15 Nov 2026 02:13:21 +0000
Manifest next update: Sun 22 Nov 2026 02:13:21 +0000
Files and hashes: 1: NcbYSDFsIdmTz25MBtYB3AXvxOE.crl (hash: 7fafUuib3nNoDBNq7HM8AZYh6NsA1rbsTRSlAukxseY=)
2: C416FBB02D6F11EEAC755B42C4F9AE02.roa (hash: 4Pkta0WyXHD4LOC4U6l2zLHJ1Su7VpptVTs81fGPna4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl
rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 02:13:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 633 (0x279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F473F, serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1
Validity
Not Before: Nov 15 02:13:21 2026 GMT
Not After : Nov 22 02:13:21 2026 GMT
Subject: CN=6af91541-8131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:6f:27:d5:59:21:2c:e4:27:0f:f4:09:57:
79:93:30:b1:f3:f5:04:6a:6c:d3:f8:77:0f:53:e8:
93:bf:a6:1e:d9:1c:fc:38:be:75:23:3d:e2:c3:b9:
7c:2a:55:8f:83:03:c2:39:e4:ba:16:0f:69:0f:54:
99:e4:f0:d9:95:7f:66:40:eb:7c:5e:f7:fa:69:a5:
58:84:30:81:de:f1:81:b1:67:a9:5e:a4:a9:c3:77:
c3:0b:68:6b:68:65:43:38:90:53:4b:ac:a9:bd:38:
10:5d:ef:f4:f0:ea:b3:e5:07:ac:0b:64:e2:b2:16:
49:d6:66:09:9d:5f:95:7f:15:c5:ee:76:15:44:87:
7c:d7:1b:c9:10:a2:8b:f5:0e:62:c7:7a:7a:71:b3:
c6:4f:8e:ca:72:1e:04:16:55:fd:91:cd:7b:88:1a:
b0:ea:9f:88:cb:4a:bd:13:86:67:e4:8a:7d:6c:bd:
74:2a:58:54:4f:dc:6b:a8:0a:55:7d:0c:24:40:66:
d4:5e:c6:8b:34:a8:05:a1:7b:3b:cc:4c:b8:de:54:
bf:a3:0d:ba:51:7b:26:7c:2b:d0:36:de:ff:44:a3:
46:59:2e:d7:2e:c3:10:14:4b:b3:d3:40:a0:08:e7:
21:6b:5d:5c:c9:9b:fc:c6:c4:70:42:03:c6:a1:5a:
b1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:58:95:E1:8A:F0:23:0C:CA:CD:F2:E6:DF:0A:DF:7A:4E:CC:13:11
X509v3 Authority Key Identifier:
keyid:35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:75:df:b9:6e:ac:9e:65:66:cc:94:01:00:77:3b:93:88:dc:
7b:b3:29:71:81:fd:6f:cf:5c:4f:09:b4:5e:16:d9:07:8f:78:
44:bf:3b:79:19:9c:18:0e:c2:71:7a:e5:d8:39:eb:11:9f:8c:
9d:16:4e:23:22:28:55:a8:2e:e4:74:30:5c:af:83:28:59:e3:
52:48:4f:cc:0c:e3:6e:1d:4d:41:c0:65:b7:99:72:77:a6:77:
94:c7:82:75:2d:0b:a0:62:6f:ef:42:8e:ff:6f:a9:38:ed:de:
da:28:a3:af:51:d6:a6:49:ec:0e:cc:21:28:3b:1e:72:2a:7e:
0c:24:db:6f:ff:50:87:49:e0:af:e3:e7:c9:80:77:a7:18:ab:
3f:ce:82:21:75:09:5a:68:90:e0:11:63:ed:7c:9f:b2:ae:69:
e1:e3:fa:ef:6e:cb:6b:39:1b:d6:a0:dd:5b:9e:0b:56:74:95:
f6:7c:1a:dd:1c:71:dd:d5:17:5d:83:90:c7:3f:eb:10:0a:99:
51:62:b4:f0:6a:f9:07:08:e7:ea:ff:b8:43:0d:f5:be:e1:05:
d8:5c:06:3c:11:14:e4:1e:6a:77:7e:4b:41:40:76:d0:17:0f:
34:92:33:a3:11:9f:d9:c4:f6:6a:bc:aa:66:83:20:25:65:10:
99:a7:b7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:31:57 2026 by rpki-client