
$ rpki-client -vvf rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
File: Ntd-kkOrui_VSWopGDC304sLy8Q.mft (raw, json)
Hash identifier: 96YsU6vYCF6MJJRj2697xsxJFSgt4U0JwSQMSBs1HmM=
Subject key identifier: C6:51:DA:A1:14:7A:10:82:36:57:12:91:E2:06:47:27:BE:F5:E1:4E
Authority key identifier: 36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4
Certificate issuer: /CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
Certificate serial: 098D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
Manifest number: 0965
Signing time: Tue 12 May 2026 20:11:21 +0000
Manifest this update: Tue 12 May 2026 20:11:21 +0000
Manifest next update: Tue 19 May 2026 20:11:21 +0000
Files and hashes: 1: Ntd-kkOrui_VSWopGDC304sLy8Q.crl (hash: Bx2eLJxL59ptBL89z4MzKicC9jymy+bhYLAvZ5zlmL4=)
2: 72E60DEA3CC911EDA5EBD21DC4F9AE02.roa (hash: z5nXpQYggF7FtxvjRhPO50T8ACMAQ3fNgZEPR5O1d4k=)
3: B453EBC4BB4011EAAF70B028C4F9AE02.roa (hash: lT94xNEkm0/RuJcMLykdff4mRseMOoMW/OqsJc8kVvg=)
4: A58B9338AD4A11EBA6B48687C4F9AE02.roa (hash: JFLo1Ja1paalAQ9cRjNBAw9+CXjqmX6hCmHw3VDuOWQ=)
5: 0F91DE9EAD4C11EB903C150DC4F9AE02.roa (hash: 2MWq2gYgL8Z2r2vMKeBL4wxSZIjEodsX3g/1Rc+PbcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl
rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2445 (0x98d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91452AC, serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
Validity
Not Before: May 12 20:11:21 2026 GMT
Not After : May 19 20:11:21 2026 GMT
Subject: CN=6a038969-f40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:8e:54:87:15:22:f6:2a:cc:ef:cb:ad:db:
9f:8a:5d:2b:86:99:37:c2:8e:a0:9b:74:ce:98:d1:
92:2c:c0:39:c1:ba:12:92:42:e3:89:81:29:c8:7f:
9c:1c:b9:cb:af:63:e0:3f:02:c3:66:70:8f:0a:35:
2e:d3:29:e8:1f:26:9c:28:31:81:fd:49:32:ea:e9:
24:bb:69:b9:3e:bf:1d:a2:03:40:3b:97:98:2b:b3:
2a:50:94:9a:f9:4e:12:c3:53:7f:65:dd:61:ca:8a:
9d:99:26:16:35:a1:ba:3b:8b:21:b1:91:66:d3:30:
39:84:53:ab:0a:37:c6:84:7c:0b:61:57:74:7b:2d:
7d:fa:c9:f5:f3:ab:d4:c9:3b:11:1e:fd:a9:42:e1:
0e:9c:93:49:3f:16:e4:a0:06:72:83:97:0e:d7:28:
77:78:e9:ce:85:11:4e:01:63:40:12:5a:5a:69:d5:
f3:6d:43:d6:76:e7:af:f0:46:e7:8c:d1:b7:97:89:
bb:a1:8c:5b:fc:d6:33:1f:5b:4a:37:1f:a2:23:a9:
db:af:98:5e:98:6a:aa:8f:81:ea:91:3f:9a:37:d4:
07:62:05:af:cf:ae:d8:55:82:60:ec:1c:f8:d7:75:
0d:42:e6:85:33:aa:95:d0:d5:c1:43:5c:ec:af:af:
95:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:51:DA:A1:14:7A:10:82:36:57:12:91:E2:06:47:27:BE:F5:E1:4E
X509v3 Authority Key Identifier:
keyid:36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:82:a4:57:ac:13:ee:eb:ee:a7:8c:a5:ad:54:ba:d2:e9:d4:
24:2e:f8:aa:a2:83:d4:17:e6:da:f4:38:ec:d7:0e:57:64:e8:
6d:2e:f3:40:0a:80:a1:a4:01:d2:25:d1:8c:cc:c3:e7:ad:cf:
34:9f:62:0b:5c:4e:00:28:9b:56:7f:c3:67:a5:4a:f8:7d:81:
8f:ad:e5:22:02:54:f0:bd:12:50:66:1d:f6:de:b8:de:2b:80:
dd:87:c3:9b:4d:22:4b:d2:b9:b9:81:76:6d:71:2a:f3:45:34:
a7:ca:dd:fd:04:f9:58:55:8a:1f:13:ba:f0:3f:f6:b7:e1:37:
68:8e:44:91:ca:04:f6:fd:ad:32:59:df:48:80:30:eb:79:3b:
ff:a1:44:6c:d3:11:36:12:a7:7a:13:a8:e6:0b:ec:76:52:b6:
e5:62:30:fe:69:da:36:4e:a9:36:58:0b:f2:7d:a4:5a:fd:dc:
e4:10:6b:5d:48:c1:e9:e9:84:8c:31:ff:a3:89:5c:a1:85:21:
fc:c5:0f:46:a5:1e:1a:90:56:07:e6:2a:c5:ba:32:81:37:3c:
6f:62:cc:22:1d:6a:86:9b:be:37:a1:3c:64:30:84:46:3a:40:
73:72:c2:ef:b4:78:99:70:88:9e:3f:e0:a4:b5:41:cb:76:62:
33:5e:0d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:47:21 2026 by rpki-client