
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
File: 1NfdJccT56lVTPNS2TK_gNplLeQ.mft (raw, json)
Hash identifier: pI0QPCEtP20RwamxhMXNGsqjYNW//R2cDT3b/Udgfgs=
Subject key identifier: E7:9A:57:17:E9:2C:EE:0A:AD:61:5B:E3:CD:EF:1F:F9:F9:DE:4D:2E
Authority key identifier: D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4
Certificate issuer: /CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
Certificate serial: 09DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
Manifest number: 09A7
Signing time: Sat 14 Nov 2026 19:53:08 +0000
Manifest this update: Sat 14 Nov 2026 19:53:08 +0000
Manifest next update: Sat 21 Nov 2026 19:53:08 +0000
Files and hashes: 1: 1NfdJccT56lVTPNS2TK_gNplLeQ.crl (hash: X/jg6Uvt30qtNx8COTekGKkVkv+0AADME0rX99ZFVRw=)
2: 5280D466DDA311ECA6964F20C4F9AE02.roa (hash: UWr4jClnskvEkH2pyPlCLtQv8iZhDdQZrPSFj3GjKQU=)
3: F814A546C01411EA912AC365C4F9AE02.roa (hash: Oa+XnWmZj8lxQOoLBB41DoIKtq0PD+QvaiWHN0dWav0=)
4: 53224C1ADDA311ECA6964F20C4F9AE02.roa (hash: 5dm2GJppnwQLxyI+/KHCtnHpzvdwIeBlG+Uq2+xIBLk=)
5: C21DA992E83B11EBB3231D5EC4F9AE02.roa (hash: svm3b+FOjudEmEh2mFcFyLkRp8VLD/CgHWYS2Xs5k8k=)
6: F7968CA6C01411EA912AC365C4F9AE02.roa (hash: h0YLWYdnVREKaC12vkuCYnG4Bbp86dz3rIXpiR27EcY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl
rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 19:53:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2522 (0x9da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A64F, serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
Validity
Not Before: Nov 14 19:53:08 2026 GMT
Not After : Nov 21 19:53:08 2026 GMT
Subject: CN=6af8bc24-a27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cb:15:57:8a:d1:2b:17:3a:ef:69:0a:f0:46:
bb:f2:f5:c4:ce:db:90:c2:1e:0c:19:d0:eb:e4:35:
c9:86:21:3d:ae:9a:93:bc:46:5f:c7:7b:dc:f9:69:
4b:bf:36:09:17:4f:a6:ed:30:9d:66:3b:78:62:8b:
5f:4b:30:06:a5:02:20:35:84:fb:b8:2b:bd:c9:aa:
e8:13:72:ef:a4:6a:f6:81:16:54:0b:43:74:89:55:
a8:ac:e5:0b:eb:5f:f6:d6:3c:08:bc:e7:74:88:db:
aa:9e:86:35:a2:b8:c0:67:2b:20:eb:84:30:7c:d1:
d7:75:43:f0:73:74:d2:4f:45:45:e6:3e:d4:fb:52:
d8:b2:f2:cd:2e:28:dc:c5:5b:4a:1e:b2:72:aa:65:
b4:53:99:a6:8e:56:2b:b7:f2:8f:33:3f:f8:7a:7d:
53:3b:14:67:c5:45:0a:74:76:d7:44:04:76:c7:49:
e6:eb:a3:05:83:1e:36:58:38:89:e2:7d:4c:47:e7:
61:6d:9c:af:2a:a4:c6:42:01:33:00:8d:e8:c9:ad:
69:7a:20:67:ba:80:73:ab:09:cf:df:36:f6:38:74:
dd:98:70:dd:5c:4b:68:e9:1d:9c:e4:91:63:b0:da:
c3:65:c2:71:6e:af:7c:83:4c:c3:d5:db:43:43:2d:
54:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9A:57:17:E9:2C:EE:0A:AD:61:5B:E3:CD:EF:1F:F9:F9:DE:4D:2E
X509v3 Authority Key Identifier:
keyid:D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:ec:96:18:d3:c9:87:e9:ef:e4:7b:74:3d:4c:71:e5:4d:45:
27:c4:0a:b0:56:c1:af:9f:b5:3a:e0:a5:d3:f0:4d:b3:60:18:
e4:9e:e3:69:7c:6b:d6:9f:8a:db:13:dc:30:07:ec:e9:3b:93:
4d:4b:76:74:85:91:df:6a:86:4f:fb:4d:03:fb:cd:70:c1:3d:
c5:a8:6c:05:5c:32:55:bd:85:1b:51:1f:72:38:85:cf:72:dc:
13:eb:b7:bc:0b:6f:59:fc:b5:18:8e:01:06:0f:c3:91:26:3c:
9e:cd:14:e8:9a:1a:fa:5e:81:8d:fa:43:f9:9c:8e:b4:26:5d:
51:39:ca:ee:ff:65:ba:f0:61:f9:8f:1b:1b:1e:4c:cc:ff:75:
d6:38:3a:a3:31:62:3e:16:b5:84:86:8b:e3:04:67:82:db:a5:
5c:b9:4e:27:ad:61:8e:89:79:aa:aa:9a:08:f1:e7:f5:8e:9e:
ad:6c:31:af:e0:04:e6:10:db:b6:9a:a4:f1:a4:7f:88:a9:61:
8b:99:98:9a:ca:2c:61:e0:40:d8:7a:cd:1e:07:e8:40:ed:79:
19:68:55:e6:b8:c6:f6:cb:ec:c1:ad:3d:23:b0:1d:eb:27:9a:
e1:2b:3e:86:17:42:75:84:6a:38:79:a8:e1:23:90:1a:99:04:
81:e5:b5:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE2NEYxMTAvBgNVBAUTKEQ0RDdERDI1QzcxM0U3QTk1NTRDRjM1MkQ5MzJCRjgw
REE2NTJERTQwHhcNMjYxMTE0MTk1MzA4WhcNMjYxMTIxMTk1MzA4WjAYMRYwFAYD
VQQDEw02YWY4YmMyNC1hMjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArcsVV4rRKxc672kK8Ea78vXEztuQwh4MGdDr5DXJhiE9rpqTvEZfx3vc+WlL
vzYJF0+m7TCdZjt4YotfSzAGpQIgNYT7uCu9yaroE3LvpGr2gRZUC0N0iVWorOUL
61/21jwIvOd0iNuqnoY1orjAZysg64QwfNHXdUPwc3TST0VF5j7U+1LYsvLNLijc
xVtKHrJyqmW0U5mmjlYrt/KPMz/4en1TOxRnxUUKdHbXRAR2x0nm66MFgx42WDiJ
4n1MR+dhbZyvKqTGQgEzAI3oya1peiBnuoBzqwnP3zb2OHTdmHDdXEto6R2c5JFj
sNrDZcJxbq98g0zD1dtDQy1U0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOeaVxfp
LO4KrWFb483vH/n53k0uMB8GA1UdIwQYMBaAFNTX3SXHE+epVUzzUtkyv4DaZS3k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTY0Ri8zQzlFMkI1Q0Mw
MTQxMUVBODE2ODkwNjVDNEY5QUUwMi8xTmZkSmNjVDU2bFZUUE5TMlRLX2dOcGxM
ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFOZmRKY2NUNTZsVlRQTlMyVEtfZ05wbExlUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTY0Ri8zQzlFMkI1Q0MwMTQxMUVBODE2ODkwNjVDNEY5QUUwMi8xTmZkSmNjVDU2
bFZUUE5TMlRLX2dOcGxMZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxeyWGNPJh+nv5Ht0PUxx5U1FJ8QKsFbBr5+1OuCl0/BNs2AY5J7jaXxr1p+K
2xPcMAfs6TuTTUt2dIWR32qGT/tNA/vNcME9xahsBVwyVb2FG1EfcjiFz3LcE+u3
vAtvWfy1GI4BBg/DkSY8ns0U6Joa+l6BjfpD+ZyOtCZdUTnK7v9luvBh+Y8bGx5M
zP911jg6ozFiPha1hIaL4wRngtulXLlOJ61hjol5qqqaCPHn9Y6erWwxr+AE5hDb
tpqk8aR/iKlhi5mYmsosYeBA2HrNHgfoQO15GWhV5rjG9svswa09I7Ad6yea4Ss+
hhdCdYRqOHmo4SOQGpkEgeW1Vg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:57:30 2026 by rpki-client