
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
File: NHTJTDbo-aDToNIuHdoQjNNAqyg.mft (raw, json)
Hash identifier: BDJPUjrOKClRpQ5T+OIz6DXvZcKLZgC+gem3jN6Gcwo=
Subject key identifier: 93:F5:AE:CF:7F:F6:B5:98:42:8A:D1:3E:A9:8C:92:49:A4:DF:A8:94
Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
Certificate issuer: /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Certificate serial: 1093
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
Manifest number: 1058
Signing time: Wed 22 Jul 2026 17:33:35 +0000
Manifest this update: Wed 22 Jul 2026 17:33:34 +0000
Manifest next update: Wed 29 Jul 2026 17:33:34 +0000
Files and hashes: 1: NHTJTDbo-aDToNIuHdoQjNNAqyg.crl (hash: dzsIeAMYhpZPenkgzDqP1YrsCd4EL8Xdoz0t7eQ4BaQ=)
2: 5E0253B6232111EB9896B783C4F9AE02.roa (hash: hR7qWV21WghiAL874Cg5BXLrN5Vzk7yXJRBqbiJ44Rg=)
3: B2B24A4221D711EB9CFAC46EC4F9AE02.roa (hash: UFtgLJp8H69yZx4HPXt6+xleZLi+o5QDWEezYOkAgV8=)
4: B3682FEC21D711EB9CFAC46EC4F9AE02.roa (hash: WYFWGdkdelXl0XhClCR56TxX5kk6w/e/4RLmS9XXch4=)
5: 08CD1510027011EB98FEC44BC4F9AE02.roa (hash: +IMdgWTdcA1g1fqND4+7nCJIPD1lLydbWWaRQ1akOWM=)
6: A7BDC50C7A4811EBA907BB5BC4F9AE02.roa (hash: C6eN/HRJOvECjn0iUsrFGGsR84yYAYigU79dZHsh6MA=)
7: B47C278021D711EB9CFAC46EC4F9AE02.roa (hash: YAVJ3KSJGZy5BW+wsOCfkHC/9utYf+L5rdo1d3HvAbs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl
rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4243 (0x1093)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131690, serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Validity
Not Before: Jul 22 17:33:34 2026 GMT
Not After : Jul 29 17:33:34 2026 GMT
Subject: CN=6a60feef-688f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f1:e5:2a:21:80:ff:4c:cf:c8:e2:4a:16:3d:
14:d4:38:bb:24:8d:a6:05:b2:bf:b2:03:5d:07:77:
29:00:b2:a3:c4:8a:87:2f:aa:fe:90:82:f4:a9:5a:
55:22:5a:5b:3c:bc:f5:f6:58:1e:df:a2:54:4a:17:
53:90:24:ac:1f:d6:99:90:fb:63:73:ad:2b:0d:4b:
5c:be:5f:e0:b7:4a:5b:3f:78:bb:c5:ee:cf:5e:69:
0f:2e:4e:0f:d6:31:9a:dd:03:2a:a8:9c:50:78:d7:
e3:10:07:a5:e2:f5:4f:0f:05:ba:c0:d2:da:9f:79:
c6:79:22:f1:54:7a:33:3b:69:d4:f0:73:ad:d9:57:
90:e0:1e:73:2a:19:b3:dc:28:f0:9b:fe:f6:60:6b:
8d:d2:88:d9:8d:fe:1f:13:6b:1c:db:d1:38:84:0f:
e7:d3:63:28:e6:53:32:0b:5b:dc:a3:9f:1b:54:9b:
32:34:f6:7e:96:9f:6c:39:10:89:55:b8:08:af:2d:
2f:d1:b4:e0:a8:23:9c:4a:f9:8d:a7:df:07:36:7c:
aa:47:97:c5:e6:06:03:4e:a7:4b:16:ed:a1:f9:e3:
59:c4:25:96:8b:8f:4c:e6:19:88:e3:33:de:a6:27:
81:9f:0f:6e:ba:08:94:be:c0:60:01:c7:8a:7e:e3:
4a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F5:AE:CF:7F:F6:B5:98:42:8A:D1:3E:A9:8C:92:49:A4:DF:A8:94
X509v3 Authority Key Identifier:
keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:f3:ee:ff:60:64:1d:de:e9:a9:40:d9:ab:a2:d9:dc:77:26:
85:49:92:21:8a:2f:86:4e:2b:ec:e8:bc:94:0b:54:7f:ab:7c:
34:0e:b5:a2:86:70:94:b9:45:9c:74:4b:11:c4:56:8b:52:69:
42:64:b9:20:c3:41:ec:ae:21:88:0c:8a:68:6b:8f:f2:24:f6:
f1:a6:7a:ee:46:f4:00:35:bb:65:22:92:c4:18:b8:7a:02:6b:
e6:4c:a4:72:89:7c:be:bf:98:b4:97:6c:9c:7f:d0:bc:df:31:
b6:8c:7f:87:f7:66:d7:70:09:ea:8d:19:ae:8c:eb:dd:c0:53:
de:a8:49:a5:80:5e:a0:d6:26:da:b3:6d:3b:95:9d:42:6e:ab:
70:df:cf:6d:65:ad:3d:42:ec:24:f7:55:9c:54:92:12:cf:44:
de:f1:04:e7:cd:f7:9e:ba:19:ce:06:31:9c:1a:c9:b4:94:3f:
61:a8:61:fe:75:ef:6a:f5:1c:3d:ca:be:c4:52:26:41:e9:28:
e6:e7:86:f8:ef:cd:28:75:6e:76:48:2a:f6:53:7b:f9:bc:4a:
08:2d:8e:85:80:4c:60:87:87:4e:37:18:a9:06:7d:0d:36:5c:
00:a8:44:8c:9a:26:1f:4f:27:95:f7:78:df:cb:e5:ed:de:c6:
cb:73:2c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:02:52 2026 by rpki-client