
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
File: nTQUKDsie49RLzBfKs20PN6eTRI.mft (raw, json)
Hash identifier: pwJt7UFTn95p+hxBrAMo80ppcDLZw/iT1bMskhuzfOs=
Subject key identifier: C3:F3:6E:30:06:B4:26:28:38:D8:2B:6B:42:50:3E:36:54:4A:2F:FD
Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12
Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
Certificate serial: 022C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
Manifest number: 01ED
Signing time: Mon 11 May 2026 03:50:44 +0000
Manifest this update: Mon 11 May 2026 03:50:44 +0000
Manifest next update: Mon 18 May 2026 03:50:44 +0000
Files and hashes: 1: nTQUKDsie49RLzBfKs20PN6eTRI.crl (hash: hs5TlECltaGfv8boMsRP4g3ITsiVkJehvGCF2om35Yo=)
2: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (hash: RuIzPpPmU5SYBxbzVmTPm1exsa1irL+SD8QrPzFj6WU=)
3: 3C880EBABEEF11EF9178186BC4F9AE02.roa (hash: gDBNV8FCQoQRlF4+Z0of3x2gK+wLXaHl7XFSFbaKadM=)
4: 31C9441E68ED11F0BA447B41C4F9AE02.roa (hash: Tw/mmccci9TsCg4wjjeIfCh0v/cTONBZG05kzKfAujc=)
5: C75B642268F211EFB7A6A06EC4F9AE02.roa (hash: cMO5zU9AD/RoFLcnPT+DXNczqdbBJpb9yT+lZHAEick=)
6: EC985F92AD6D11EE83DA6253C4F9AE02.roa (hash: BmXwbaUB2PnwCtWWwqTCrL/Z4ZUCXb6in34aW4SAhII=)
7: 551036FCF1CA11EFA1495230C4F9AE02.roa (hash: ph9mjxQXcLl4fEECl4pEGWMTp7mLbB/lR7kFkW96rzY=)
8: CA364B681A1711F0A1D93523C4F9AE02.roa (hash: VMXxFIYcOcmwdzE0TfKotJbGv4ASOkRQEsgw2BaIwTw=)
9: 908E69B20D4311F0B83AB36BC4F9AE02.roa (hash: 0rCihLa1R/JwK4jlGINRooaKzW7UBmX+YQfpTQsJlgY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl
rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:50:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556 (0x22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
Validity
Not Before: May 11 03:50:44 2026 GMT
Not After : May 18 03:50:44 2026 GMT
Subject: CN=6a015214-5cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:69:1e:c4:1d:b4:5d:00:41:80:7e:73:fa:7c:
ac:5d:15:a9:f7:59:1c:a1:c5:c0:eb:76:20:68:01:
4e:c3:ea:a2:bc:92:e6:d5:1d:e9:07:6a:70:fd:4c:
2e:55:91:32:2d:73:fd:09:9f:54:b5:32:49:e3:81:
2d:cc:3b:42:cd:00:20:65:aa:5d:9e:97:ac:f5:20:
aa:e0:ab:0d:53:df:67:1a:b5:86:55:dc:86:b6:ea:
ea:b4:31:d2:c1:ab:f5:7e:16:07:b6:d2:f2:ce:c5:
d5:ef:38:97:91:3b:62:ec:ec:2a:8e:62:ae:17:62:
0b:17:a9:9a:0a:14:e1:ad:8d:c9:72:67:1e:b6:ea:
7c:4e:87:6a:3d:0b:08:4f:c8:2d:69:69:2f:6f:b6:
c7:ba:c0:08:18:f8:76:65:4f:7e:e9:36:01:5f:13:
f7:3a:4d:f6:89:18:5a:d7:f2:2a:35:5f:d8:ed:ef:
ab:e0:73:1d:b5:b1:2c:6e:dd:2c:af:02:5b:78:2c:
95:bf:ed:75:4b:f4:81:26:ca:1e:82:bc:6a:cd:1e:
af:8b:f4:7b:bd:33:6c:90:2a:48:dd:81:c3:02:27:
54:a7:23:a9:6b:22:cf:24:5a:bb:a8:d1:04:10:55:
49:d9:d0:0e:f3:1e:1a:95:64:70:0e:72:69:d6:02:
99:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F3:6E:30:06:B4:26:28:38:D8:2B:6B:42:50:3E:36:54:4A:2F:FD
X509v3 Authority Key Identifier:
keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a2:8d:e2:03:b8:32:66:6d:1b:d2:89:90:e5:8b:81:07:14:
28:dd:2d:b6:d5:0d:93:00:e5:5c:41:ad:1a:9e:43:f7:84:f2:
69:ad:a6:17:fe:34:f6:a5:1c:70:a8:86:db:71:bf:8e:3f:57:
c6:e9:52:fd:90:b8:4e:44:a6:b8:ae:4a:dc:6a:d2:db:c5:c9:
a7:9a:40:33:8e:5f:5e:76:a0:97:ab:05:ea:78:0a:6d:a3:74:
7e:1c:c0:5d:a2:36:c0:c5:80:84:0f:6d:87:b3:3c:6e:93:be:
7e:d3:c5:81:3d:c2:fe:39:67:1a:d7:64:a0:a4:31:77:c2:78:
2c:51:8c:71:be:28:ac:58:72:52:85:df:cd:40:6a:6b:4e:5a:
68:07:7e:8c:9b:74:21:99:a8:eb:42:98:9a:a6:d4:ac:10:d7:
cd:fe:60:f0:f7:17:68:2c:0b:ac:13:37:65:a9:ca:8c:13:4a:
39:47:e4:8f:57:77:57:c8:3f:33:41:36:25:dc:e4:69:c5:80:
12:b6:f9:88:ac:fe:c2:1a:f6:d5:7d:91:0b:0e:97:2c:01:c3:
f3:83:17:9a:f9:47:f7:d2:9c:e7:ae:81:3a:40:99:81:70:7c:
04:c4:10:71:0f:78:73:fe:e3:ae:04:6a:ac:85:2f:b0:c1:41:
2b:0b:4a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:22:05 2026 by rpki-client