
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
File: NHTJTDbo-aDToNIuHdoQjNNAqyg.mft (raw, json)
Hash identifier: ip+zpFaseu96Z/kviHQPvK1n06AVYUURVtqz8W8dRB8=
Subject key identifier: 82:65:89:D0:91:78:14:36:E4:96:8E:C6:85:BF:5A:E6:BC:E7:8D:B2
Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
Certificate issuer: /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Certificate serial: 10BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
Manifest number: 1083
Signing time: Wed 14 Oct 2026 17:27:46 +0000
Manifest this update: Wed 14 Oct 2026 17:27:45 +0000
Manifest next update: Wed 21 Oct 2026 17:27:45 +0000
Files and hashes: 1: NHTJTDbo-aDToNIuHdoQjNNAqyg.crl (hash: zjWAQwEkX4IT08Kf29ZWPSDm2o9Phfe2uSUNOrstDkU=)
2: 5E0253B6232111EB9896B783C4F9AE02.roa (hash: hR7qWV21WghiAL874Cg5BXLrN5Vzk7yXJRBqbiJ44Rg=)
3: A7BDC50C7A4811EBA907BB5BC4F9AE02.roa (hash: C6eN/HRJOvECjn0iUsrFGGsR84yYAYigU79dZHsh6MA=)
4: 08CD1510027011EB98FEC44BC4F9AE02.roa (hash: +IMdgWTdcA1g1fqND4+7nCJIPD1lLydbWWaRQ1akOWM=)
5: B47C278021D711EB9CFAC46EC4F9AE02.roa (hash: YAVJ3KSJGZy5BW+wsOCfkHC/9utYf+L5rdo1d3HvAbs=)
6: B2B24A4221D711EB9CFAC46EC4F9AE02.roa (hash: UFtgLJp8H69yZx4HPXt6+xleZLi+o5QDWEezYOkAgV8=)
7: B3682FEC21D711EB9CFAC46EC4F9AE02.roa (hash: WYFWGdkdelXl0XhClCR56TxX5kk6w/e/4RLmS9XXch4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl
rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 17:27:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4286 (0x10be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131690, serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Validity
Not Before: Oct 14 17:27:45 2026 GMT
Not After : Oct 21 17:27:45 2026 GMT
Subject: CN=6acfbb92-9fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b3:86:fa:0f:e1:2e:17:82:b6:06:bc:fd:6e:
3c:6d:4d:3a:8f:b6:f3:1c:c5:b9:56:19:81:00:be:
27:1d:6b:9c:ab:0a:95:46:f6:b4:7f:df:3d:e1:b8:
c8:f8:c6:41:db:ec:63:a6:65:e4:36:ce:46:22:bb:
7c:e2:e8:7b:59:32:e6:b1:15:2e:ec:a3:87:eb:a2:
16:d3:1b:31:2b:09:42:8e:03:aa:3a:65:66:84:b8:
e4:67:66:66:f9:41:7e:e2:ef:c3:d2:85:c1:ac:b0:
07:71:7b:60:f5:4d:d7:03:a6:88:ce:b7:32:06:d1:
38:4b:39:38:59:b5:71:f0:fe:1e:38:dd:77:a9:fa:
cc:e0:d0:d1:f3:4e:fd:c8:dd:ab:15:c0:42:f5:43:
c4:ba:a1:7b:66:08:fb:cb:06:cf:fb:e8:78:17:0d:
1c:ae:5c:85:8f:d0:58:1a:ea:89:1f:f5:1e:09:3d:
3f:ba:6c:87:c9:31:06:2a:40:c0:23:3f:98:73:e3:
f0:cf:90:6e:39:95:b7:74:7d:30:c9:c8:9c:dd:73:
b1:3a:68:62:63:95:89:74:ba:a6:fe:67:4a:1c:ec:
62:2c:1f:e6:0b:26:07:42:d7:87:ee:66:bc:50:43:
02:21:ae:df:be:ec:13:b7:95:80:48:65:fe:cc:f4:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:65:89:D0:91:78:14:36:E4:96:8E:C6:85:BF:5A:E6:BC:E7:8D:B2
X509v3 Authority Key Identifier:
keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:af:40:dd:51:c4:95:95:e7:a4:75:1c:ae:c6:77:3f:73:3d:
3d:6c:37:96:37:81:e2:62:bb:54:72:a1:eb:eb:28:7d:c3:65:
32:a4:48:16:43:2e:25:55:af:ab:12:86:47:6d:96:02:11:10:
f8:65:eb:70:c2:8f:b5:fc:a1:94:51:03:45:23:f4:f1:3d:d2:
fa:3b:59:e3:16:ec:e5:de:17:60:b0:fe:23:2a:38:1a:e3:3d:
c3:4d:1f:41:f3:ed:c0:32:8d:51:81:7c:b9:92:28:e7:04:d6:
f0:7a:91:e7:87:ac:55:74:35:0e:eb:b0:28:3c:ea:a0:ec:c8:
ea:d9:89:ed:15:3e:46:85:e5:01:d0:3b:0b:d5:9a:9a:b7:30:
79:40:4d:81:a1:a8:9b:cf:c7:7a:fe:a5:fc:ce:78:b6:c7:b2:
bf:42:50:24:83:be:5d:d9:85:bf:f3:2c:eb:ae:7c:92:ae:75:
a8:28:82:a1:31:61:a8:79:ba:c4:a0:2c:6e:04:b1:3e:aa:d4:
d4:8a:90:bf:ac:09:c9:72:c3:cf:da:29:0e:7f:3c:98:e1:f8:
bc:71:51:fe:11:57:62:63:15:e9:36:9e:f9:91:ca:10:8d:c0:
7f:8a:c6:33:b4:b7:9d:bc:b4:67:4b:40:81:6b:89:ee:d5:2b:
13:55:d5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 08:11:21 2026 by rpki-client