
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
File: NcbYSDFsIdmTz25MBtYB3AXvxOE.mft (raw, json)
Hash identifier: GCTGXVpDJBETkKMrDhzKWCq630fV4CbCojJzcG4KCGY=
Subject key identifier: 3D:7D:CC:3A:72:99:85:B8:83:E4:06:8B:87:BF:81:B7:5D:E2:A2:08
Authority key identifier: 35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1
Certificate issuer: /CN=A91F473F/serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1
Certificate serial: 01F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
Manifest number: 01ED
Signing time: Mon 02 Mar 2026 00:30:13 +0000
Manifest this update: Mon 02 Mar 2026 00:30:12 +0000
Manifest next update: Mon 09 Mar 2026 00:30:12 +0000
Files and hashes: 1: NcbYSDFsIdmTz25MBtYB3AXvxOE.crl (hash: G3z0S3f7wWBV5mfNQOzyrFzjMOsFsVcSKcvgXJL7kPM=)
2: C416FBB02D6F11EEAC755B42C4F9AE02.roa (hash: 7y4oXNer6WsBPlefm0aDOGxXKn0I4ZDBbQhKmEfxFC8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl
rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499 (0x1f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F473F, serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1
Validity
Not Before: Mar 2 00:30:12 2026 GMT
Not After : Mar 9 00:30:12 2026 GMT
Subject: CN=69a4da15-cbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c3:89:69:e8:f5:ed:c1:0b:e9:dc:05:4b:4b:
04:43:61:77:24:99:e2:80:ef:25:a5:45:fe:f6:14:
3d:f3:66:54:c8:47:1b:79:ad:18:85:d8:d4:22:e6:
f9:3e:76:30:11:fa:18:2e:7d:02:e7:d3:1c:47:df:
5b:8b:ea:1f:4b:df:29:2e:0e:71:b3:a8:35:62:6c:
63:1b:fa:84:8e:5f:f4:60:80:03:16:10:2f:47:20:
6f:73:d3:bd:46:46:a9:9b:67:28:dd:16:8c:e8:c2:
40:5a:f1:30:ac:80:44:f5:94:9b:eb:da:6b:d3:06:
7b:b4:84:a6:d7:68:17:00:7c:6b:c1:a8:7c:b7:4b:
dd:54:d2:a7:39:7d:cf:66:cb:c1:bb:ec:35:ae:9d:
b0:f6:b9:c3:39:64:ed:44:e7:09:ba:64:dd:06:d7:
11:2f:3e:a5:91:95:ec:a7:5d:75:3e:23:c6:f1:04:
c5:56:e5:ad:e9:6b:9c:1f:4a:a1:57:53:e2:36:86:
59:ad:a1:48:06:08:cd:4f:8c:ee:45:4c:6a:2f:42:
57:e6:76:b6:7e:a2:14:2d:58:d3:0c:cc:7d:53:8a:
76:76:a4:d5:1d:fe:7c:c8:14:54:72:04:88:22:f2:
08:e4:f7:47:b0:a5:6c:77:61:51:8d:12:71:b4:54:
10:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7D:CC:3A:72:99:85:B8:83:E4:06:8B:87:BF:81:B7:5D:E2:A2:08
X509v3 Authority Key Identifier:
keyid:35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:dd:e2:84:5e:8f:c7:08:60:5a:4f:01:f7:7e:26:43:48:a8:
b9:37:1d:f7:39:fa:67:9c:63:cd:b9:96:13:9a:26:59:26:6a:
e0:6f:87:82:7a:a5:8f:cd:b9:e5:79:93:f7:32:6b:a8:51:e6:
11:60:f9:65:d1:6e:10:b8:d6:23:32:d1:4a:c0:23:2b:ef:46:
81:b4:12:5b:8d:f2:5a:ff:77:76:6e:d4:15:d7:e3:80:05:16:
f4:b5:a2:93:88:fa:fe:d6:c9:1e:e2:3b:9e:45:03:70:40:cd:
7c:e4:54:06:fa:1d:fa:78:af:74:79:90:f3:6d:ac:dc:23:1d:
9f:9f:6f:51:6f:10:00:ad:f5:a7:99:fd:75:69:b4:52:30:8b:
d1:e8:e1:e5:73:0b:a3:51:87:1b:19:1b:b0:1c:a5:bf:c5:e7:
66:35:67:41:de:77:45:ec:bb:9c:b9:b5:da:fe:9f:c5:49:a1:
83:15:7a:f9:e0:5b:5a:97:7f:8a:34:5b:91:14:36:34:e2:7f:
4c:b9:68:92:bc:f5:f6:fa:47:b5:d8:3d:67:2a:bc:ba:3d:5e:
41:2a:63:18:ff:40:06:8f:f1:ce:98:66:3b:86:37:5b:20:7a:
3d:18:86:70:06:13:90:89:aa:f2:6c:51:8a:17:11:8a:a1:e2:
e4:ce:1e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:00 2026 by rpki-client