
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft
File: NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft (raw, json)
Hash identifier: eJgwM5G80w4V24tuRL3gM6LVUmZDsP4msy784F6Pr+U=
Subject key identifier: AA:C9:DD:CC:A8:8B:B1:1B:A0:D6:4C:2A:CA:B1:B2:20:46:92:CD:1F
Authority key identifier: 34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46
Certificate issuer: /CN=A911C90F/serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46
Certificate serial: EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft
Manifest number: EC
Signing time: Fri 25 Sep 2026 06:29:24 +0000
Manifest this update: Fri 25 Sep 2026 06:29:23 +0000
Manifest next update: Fri 02 Oct 2026 06:29:23 +0000
Files and hashes: 1: NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl (hash: yawhg3wjgulRNkP/ja+FPt61oD6kIPqDBb3vrsUaTf4=)
2: CB4ACDBC54AF11F0999FAA3EC4F9AE02.roa (hash: xgivwJxveenvIu97Bz+/FrcRoG+/apEQkUFco+CmFm0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl
rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C90F, serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46
Validity
Not Before: Sep 25 06:29:23 2026 GMT
Not After : Oct 2 06:29:23 2026 GMT
Subject: CN=6ab614c4-c618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e3:73:c8:c3:bd:09:3b:56:2b:d7:89:33:88:
33:f5:00:f4:60:a9:0d:f3:23:ac:84:94:61:94:38:
70:4f:8c:55:a0:0d:7b:74:b3:df:81:a3:04:fe:a2:
7e:f0:d1:2c:27:4a:71:0c:3d:18:e6:db:e2:eb:f6:
a4:df:b2:79:4f:df:50:4f:b8:28:aa:c4:f7:c9:93:
bf:42:6f:dd:df:0c:2a:49:e1:fc:b0:68:56:9e:9e:
4d:3a:de:1b:51:be:04:29:4e:b3:b6:06:c1:84:45:
99:c9:14:0b:fb:8d:c7:b3:31:75:91:11:20:e3:f6:
5c:22:d8:d3:bb:b7:f3:9f:fb:c3:f1:f3:01:f6:4a:
dd:80:26:07:74:b1:a4:31:2b:04:06:b5:b4:47:72:
81:7b:fd:6b:0e:05:70:4c:bd:2a:1a:1c:dd:81:01:
fc:37:e9:ff:c6:4d:ad:18:32:97:96:8b:66:50:d6:
4d:93:07:b4:21:3f:a9:2d:81:25:ff:4d:9f:17:61:
8f:5e:e2:3b:ab:71:a0:1c:6b:54:64:7c:55:7c:27:
ca:85:1a:e3:01:2d:cc:0a:29:66:60:72:2c:07:23:
98:49:56:4f:fc:3d:df:fd:c9:71:1c:b8:44:a1:6f:
47:d2:6e:cb:3e:13:d2:bc:2b:79:bf:9e:f8:31:3f:
ab:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C9:DD:CC:A8:8B:B1:1B:A0:D6:4C:2A:CA:B1:B2:20:46:92:CD:1F
X509v3 Authority Key Identifier:
keyid:34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e8:02:25:4a:45:03:d4:66:d9:fc:d4:87:4e:75:b0:7b:bf:fc:
b2:e1:ed:3f:10:0e:72:d0:47:b0:73:fd:b8:16:6e:5d:55:86:
a4:f9:19:11:a6:1b:57:6e:3d:69:86:bb:6f:fc:53:78:3b:14:
37:07:1d:fd:64:29:a5:e8:14:8f:b0:f1:b3:dd:35:f0:52:ea:
a2:23:89:5d:6e:27:36:78:e7:6f:45:0b:ab:6c:fb:c4:9a:07:
fb:e1:7f:15:ab:58:85:f6:f0:19:c7:d9:59:7d:b4:f1:af:16:
a8:d6:04:13:4d:5b:57:9c:f5:d9:0e:78:db:72:d2:99:5a:64:
8a:6f:f3:f2:2e:f9:ce:65:5c:cc:de:d9:ae:fb:56:96:2f:4c:
07:ca:dd:bc:01:ef:a9:04:3a:b0:a5:3d:5e:2c:8b:ef:c4:73:
da:88:cd:83:c8:63:cc:1b:12:f4:8d:0e:5e:d5:31:9f:45:aa:
c9:b9:76:4f:a6:56:b7:bf:ef:2d:bf:ed:4f:1f:a2:7f:28:1e:
80:45:2b:e4:b4:3c:48:3d:76:ba:fb:9a:fb:f4:07:6f:ca:fd:
45:85:7d:41:c3:00:ab:c5:1b:fb:5b:cf:2a:ef:c2:81:49:f6:
2c:e5:79:0e:29:69:0e:0d:4e:de:3b:52:f9:e8:dd:15:e3:60:
75:12:1b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:07:27 2026 by rpki-client