
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
File: Ngra_oYcSDq21UqjQPuE0kur8hs.mft (raw, json)
Hash identifier: r5THDC4cu3DKptZOSObujNG4MD3VXhvZ14KUopOsvok=
Subject key identifier: 44:EC:04:B5:5A:EF:DB:B7:1E:2A:FF:D8:B5:86:2A:91:53:D7:E7:4A
Authority key identifier: 36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B
Certificate issuer: /CN=A914E4C3/serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B
Certificate serial: 2817
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
Manifest number: 2817
Signing time: Wed 22 Jul 2026 15:41:45 +0000
Manifest this update: Wed 22 Jul 2026 15:41:45 +0000
Manifest next update: Wed 29 Jul 2026 15:41:45 +0000
Files and hashes: 1: Ngra_oYcSDq21UqjQPuE0kur8hs.crl (hash: SyTFbMEIXSXl2n1Zy8G20Pi9XcgbcT3mcJj6AjXrlkw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl
rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:41:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10263 (0x2817)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E4C3, serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B
Validity
Not Before: Jul 22 15:41:45 2026 GMT
Not After : Jul 29 15:41:45 2026 GMT
Subject: CN=6a60e4b9-507e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:53:f9:ed:11:f8:bf:06:ad:5d:57:b5:4b:
9f:09:24:6e:7a:3f:e6:eb:ef:70:61:d0:f0:fd:58:
00:15:5f:c9:2e:dc:5a:68:24:0c:e6:18:e4:d9:53:
12:28:14:27:c8:3d:0c:e1:84:52:df:12:43:92:a3:
0c:72:42:cd:73:89:54:f9:1d:62:91:78:f1:df:28:
19:0e:b0:2f:c7:bc:63:4d:d3:95:a7:95:5f:56:76:
b9:c2:70:9b:ec:26:1c:4a:3e:3f:37:98:8f:29:e5:
81:ce:da:04:6f:3f:ee:82:2f:7f:66:28:bf:07:d9:
13:b3:cb:df:d0:bb:40:dd:23:eb:b7:97:09:c8:db:
0d:92:f4:03:9f:fb:20:09:e3:db:95:74:a6:d2:80:
a1:18:f2:bf:9f:f5:64:13:94:af:04:29:1a:b7:bf:
2a:1d:94:7c:e0:63:3f:41:6e:ed:31:e7:79:7a:c2:
3d:a3:22:98:be:45:a8:7f:a3:1b:83:4d:9e:eb:58:
98:84:3f:ff:93:e2:36:cd:18:13:11:fc:09:de:88:
1f:a0:6b:37:ba:35:11:76:94:45:44:32:b5:f7:17:
2d:28:4e:47:0d:e9:73:6e:46:c8:c0:b9:fc:7f:7b:
90:be:ad:af:c9:38:4e:db:a7:c8:2d:42:f3:e1:71:
af:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EC:04:B5:5A:EF:DB:B7:1E:2A:FF:D8:B5:86:2A:91:53:D7:E7:4A
X509v3 Authority Key Identifier:
keyid:36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9d:03:70:b6:07:75:7b:2a:49:e3:3f:d7:e0:7e:31:95:ae:
86:05:ae:07:f3:56:9b:0c:27:67:14:20:6e:6a:56:75:f9:b0:
7e:cc:f4:2a:26:36:6f:41:c7:02:2f:78:13:0f:7e:b2:89:7a:
26:5a:cd:66:05:c4:c6:2a:49:55:be:7f:61:6f:fd:fa:db:c5:
2e:41:a3:c7:5b:4b:6e:43:a2:39:41:54:8e:8a:a5:36:c9:f9:
d8:ba:48:e6:ae:86:dc:f7:09:b2:85:9c:fc:55:2b:bc:dc:e6:
58:c3:71:3b:ea:c4:68:10:79:44:03:95:eb:17:35:36:1e:29:
fd:04:d6:ea:75:13:4b:5a:e0:5d:4f:d6:e2:df:13:02:80:89:
45:02:84:6d:b9:ae:ab:71:b7:b2:93:e3:68:3b:82:e0:61:ab:
c0:b6:ef:62:39:7d:43:86:ae:28:c3:0e:9e:de:ed:f7:83:63:
15:ec:66:64:58:2f:e7:68:8f:12:bb:dc:f7:ec:51:9c:6a:2f:
d6:d3:0d:31:bd:a3:25:0f:de:83:ee:26:fd:ad:c4:6a:58:43:
c8:e4:ee:ef:72:45:97:2d:d1:c2:db:fe:55:c7:f3:2d:0a:6c:
f6:58:52:32:ee:47:ca:3d:d2:f3:40:03:53:85:6b:d9:3a:e2:
8f:3d:b8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:03:06 2026 by rpki-client