
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
File: nTQUKDsie49RLzBfKs20PN6eTRI.mft (raw, json)
Hash identifier: Y2UHgrbsVvONy85PXAy8x1BNbIIjEhVHh89r02GJKL8=
Subject key identifier: 49:70:28:D1:75:B3:A7:C4:73:BE:15:29:0C:50:4F:AC:F2:E0:F4:AC
Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12
Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
Certificate serial: 0214
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
Manifest number: 01D5
Signing time: Wed 25 Mar 2026 03:22:29 +0000
Manifest this update: Wed 25 Mar 2026 03:22:28 +0000
Manifest next update: Wed 01 Apr 2026 03:22:28 +0000
Files and hashes: 1: nTQUKDsie49RLzBfKs20PN6eTRI.crl (hash: 0f3qjXonBVdcN0IOlgzaRfAcDcVd//wz4klITVC8E8w=)
2: 551036FCF1CA11EFA1495230C4F9AE02.roa (hash: ph9mjxQXcLl4fEECl4pEGWMTp7mLbB/lR7kFkW96rzY=)
3: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (hash: RuIzPpPmU5SYBxbzVmTPm1exsa1irL+SD8QrPzFj6WU=)
4: CA364B681A1711F0A1D93523C4F9AE02.roa (hash: VMXxFIYcOcmwdzE0TfKotJbGv4ASOkRQEsgw2BaIwTw=)
5: 31C9441E68ED11F0BA447B41C4F9AE02.roa (hash: Tw/mmccci9TsCg4wjjeIfCh0v/cTONBZG05kzKfAujc=)
6: EC985F92AD6D11EE83DA6253C4F9AE02.roa (hash: BmXwbaUB2PnwCtWWwqTCrL/Z4ZUCXb6in34aW4SAhII=)
7: 3C880EBABEEF11EF9178186BC4F9AE02.roa (hash: gDBNV8FCQoQRlF4+Z0of3x2gK+wLXaHl7XFSFbaKadM=)
8: 908E69B20D4311F0B83AB36BC4F9AE02.roa (hash: 0rCihLa1R/JwK4jlGINRooaKzW7UBmX+YQfpTQsJlgY=)
9: C75B642268F211EFB7A6A06EC4F9AE02.roa (hash: cMO5zU9AD/RoFLcnPT+DXNczqdbBJpb9yT+lZHAEick=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl
rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:22:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 532 (0x214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
Validity
Not Before: Mar 25 03:22:28 2026 GMT
Not After : Apr 1 03:22:28 2026 GMT
Subject: CN=69c354f4-b9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:41:45:5e:17:0e:ba:b5:0c:c9:65:58:30:
f4:3f:84:93:28:8f:11:f8:c2:32:60:3d:c1:f4:c8:
43:23:ca:cd:96:c4:2c:6c:d3:f0:58:dd:71:dd:e9:
9d:79:0f:34:06:47:8d:6a:19:7a:3a:77:a2:5c:1f:
86:fe:ea:70:77:8d:57:ae:d1:bc:90:37:17:a3:78:
98:b7:ef:e3:a7:ca:5c:6b:c7:08:70:72:89:0e:ba:
40:96:59:63:29:93:23:9b:22:6f:1e:38:a0:af:58:
92:47:7b:33:32:5b:6a:cc:01:66:ce:f0:2d:14:e1:
f6:5c:5a:02:6d:19:3c:08:c5:50:45:ed:f8:46:d3:
a3:e3:61:01:d6:1e:ae:d9:ac:3a:13:28:01:b7:c6:
dc:d7:14:df:91:5e:32:38:cd:7f:75:49:52:86:f0:
2f:f4:29:a3:ca:7f:ef:9a:5e:3d:f1:e9:ce:6e:6d:
d4:ec:1b:48:31:80:29:a4:22:46:d4:a7:b5:82:c0:
0b:57:ee:25:f0:52:08:f1:9d:19:5b:b6:17:b9:04:
94:80:a0:88:0b:47:47:20:ff:48:48:9a:34:40:1f:
ef:65:58:30:a1:6d:87:c4:bf:cb:83:dc:a8:19:9d:
c6:6d:d9:b3:4f:6b:05:13:30:c6:c3:5d:8c:ab:a9:
7d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:70:28:D1:75:B3:A7:C4:73:BE:15:29:0C:50:4F:AC:F2:E0:F4:AC
X509v3 Authority Key Identifier:
keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:0b:34:b0:69:ad:1c:f2:62:c6:eb:c1:34:be:34:b9:92:99:
b5:c8:f1:06:fc:52:c4:ae:09:7a:dd:a5:50:dd:20:e0:6d:1d:
b7:10:d4:b7:f8:2e:b8:a0:2e:c3:6d:77:ea:8a:5d:7e:77:df:
ef:f4:a7:69:7b:6c:fe:48:89:ef:97:51:cc:64:5a:e5:b1:58:
b5:e3:6d:bf:e9:a7:cc:14:ca:27:3b:ec:b1:c4:50:4f:08:26:
5b:9b:ae:50:b6:96:60:42:d3:d3:d1:30:4b:da:54:0a:5c:9a:
19:f7:91:7e:4d:dd:dd:6e:39:5f:3d:81:16:7d:de:83:2d:fc:
24:30:4b:1b:49:81:1d:f7:35:9d:f3:f6:43:57:0c:7c:d1:b6:
7f:83:ce:95:44:a5:d5:29:88:4c:e5:89:ea:8f:af:f4:85:07:
19:cd:d9:54:a8:13:c2:fe:c8:11:c1:85:99:5e:dd:e5:11:ff:
cc:66:1f:10:70:31:4e:99:6e:67:a2:d5:64:21:3c:33:a0:f8:
62:26:7b:30:a1:ba:5d:14:24:32:9a:2c:ed:31:5b:31:02:2f:
12:65:16:46:3d:dc:0b:ad:3d:9c:eb:00:32:69:19:a5:59:7b:
26:62:4a:d6:b8:47:1a:09:c7:b6:e8:1d:d4:f4:7d:d6:85:2f:
4b:75:ed:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:47:06 2026 by rpki-client