
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
File: Ngra_oYcSDq21UqjQPuE0kur8hs.mft (raw, json)
Hash identifier: Nr6m/ui4GRQdDAjGBFK5IbqQEg3rgD3n4O8Dr6vYrwo=
Subject key identifier: 84:DE:63:D4:1A:1B:55:5B:26:D6:96:91:DC:AD:12:F3:53:F2:F4:FE
Authority key identifier: 36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B
Certificate issuer: /CN=A914E4C3/serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B
Certificate serial: 283A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
Manifest number: 283A
Signing time: Mon 28 Sep 2026 15:38:06 +0000
Manifest this update: Mon 28 Sep 2026 15:38:05 +0000
Manifest next update: Mon 05 Oct 2026 15:38:05 +0000
Files and hashes: 1: Ngra_oYcSDq21UqjQPuE0kur8hs.crl (hash: AzZiVRq56sgHl4rmzMz9CjJvV9lp4lxggOcST7A29Ws=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl
rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 15:38:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10298 (0x283a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E4C3, serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B
Validity
Not Before: Sep 28 15:38:05 2026 GMT
Not After : Oct 5 15:38:05 2026 GMT
Subject: CN=6aba89dd-8937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:bb:29:f5:0d:5c:bd:55:01:97:b8:b2:fd:
ef:08:f5:ab:f9:47:35:dd:5e:7c:ff:4f:c0:52:a0:
9c:30:f7:fd:c4:01:8d:a9:84:30:4f:a9:4f:13:a9:
79:35:71:ce:6c:06:b3:b2:59:b8:54:24:6c:74:8d:
d8:0e:91:5a:66:85:3b:b4:f3:7b:e7:6a:49:c9:4b:
98:68:f5:cf:26:20:ff:77:5a:b2:8f:06:ed:f5:d7:
5b:ae:11:c6:92:ab:5f:18:0c:ca:f6:85:f0:a9:ad:
40:59:85:3b:48:55:77:7f:63:6a:05:9d:a4:10:9d:
46:74:da:f1:7c:b5:53:38:7c:dc:48:96:8d:17:9a:
c9:ad:d4:6e:50:d4:95:74:f5:4e:ae:b6:65:c2:bf:
09:e1:7f:d0:f4:e7:c6:41:a6:93:0b:f1:b2:a7:a8:
7a:ac:de:30:0a:50:1f:d6:e0:cf:1e:eb:2e:1c:68:
2e:70:45:c4:1f:ed:c4:64:10:27:c1:11:dd:63:c5:
69:a9:1d:16:16:a1:f0:87:d2:bc:b9:d8:18:6a:20:
6d:ec:2b:30:34:fe:7d:d5:be:2d:34:4f:d3:f4:a2:
a4:bf:cd:be:a6:a2:d6:fd:89:77:16:09:15:33:4c:
09:3c:af:db:e7:6a:82:07:56:ac:cb:a1:af:26:51:
01:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DE:63:D4:1A:1B:55:5B:26:D6:96:91:DC:AD:12:F3:53:F2:F4:FE
X509v3 Authority Key Identifier:
keyid:36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:67:63:1c:9b:a5:f8:ae:19:2f:dd:e7:c0:41:1e:39:ca:fe:
3e:9a:25:ca:3d:a5:31:2d:95:52:5d:95:64:4b:1a:7d:44:87:
6e:4d:37:ad:a6:28:de:ec:0e:1f:18:ad:ef:1d:00:4f:9e:4f:
df:9c:97:f4:d3:03:b5:d5:ef:fe:89:d9:f9:fa:41:76:20:43:
1e:14:ed:9d:f7:a2:3b:a7:65:64:55:a6:7c:3e:fe:6e:b7:a2:
ce:51:6b:be:9d:f8:b6:ec:93:14:7e:e8:33:c6:d5:87:af:1d:
c9:97:29:3c:a2:20:8f:b2:6a:9a:2f:1f:c1:4f:3e:61:af:c2:
c1:39:80:37:86:59:1f:e5:1c:57:48:40:20:c5:db:f9:f0:dc:
88:6c:db:92:90:cc:00:7e:72:4a:21:1d:c4:98:f6:39:5b:38:
45:cf:d7:6a:43:e0:df:bb:b0:2f:da:b8:5f:fe:46:06:77:f1:
8a:dd:df:87:5e:80:ab:bf:66:c1:72:53:f0:ab:3b:7d:c4:52:
00:5b:52:d3:d9:8d:5b:59:a0:33:f6:f5:34:e7:9f:d2:ff:bb:
87:4a:86:0b:4d:09:09:dd:12:64:11:8b:18:ed:68:e2:47:d5:
43:18:c4:dc:89:3d:a0:19:c7:91:ea:19:3a:fa:7b:0e:09:f8:
35:7d:a8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:35:11 2026 by rpki-client