
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
File: Ngra_oYcSDq21UqjQPuE0kur8hs.mft (raw, json)
Hash identifier: 99bJZAwK+h0fuN6s5lgW1tKTxJft+QJtajg6TGGbUMA=
Subject key identifier: 9B:8F:DB:0C:80:A4:49:DF:9F:2B:53:A7:61:1A:BC:16:4F:58:D2:B5
Authority key identifier: 36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B
Certificate issuer: /CN=A914E4C3/serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B
Certificate serial: 27DA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
Manifest number: 27DA
Signing time: Tue 24 Mar 2026 15:34:35 +0000
Manifest this update: Tue 24 Mar 2026 15:34:35 +0000
Manifest next update: Tue 31 Mar 2026 15:34:35 +0000
Files and hashes: 1: Ngra_oYcSDq21UqjQPuE0kur8hs.crl (hash: 5tb91e81t7K/JCj3w9RrjUl062jSQGMVMlHYGkdJgiE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl
rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10202 (0x27da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E4C3, serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B
Validity
Not Before: Mar 24 15:34:35 2026 GMT
Not After : Mar 31 15:34:35 2026 GMT
Subject: CN=69c2af0b-6e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0e:c4:07:67:06:9e:ac:02:1f:8d:71:26:dd:
71:73:c9:5d:37:5c:b2:39:a4:9d:c2:31:59:f0:19:
f2:c9:1f:af:2c:12:2d:08:ad:5c:5b:06:c6:db:95:
b0:85:5a:1e:18:93:c3:3a:89:0f:2f:40:87:fb:81:
7a:37:49:7c:75:5e:e3:7e:28:7b:91:73:70:8d:26:
72:c3:92:57:1a:7e:43:f7:36:63:40:91:59:ed:42:
70:cf:8d:36:58:bf:ff:2a:c4:c9:85:d6:f0:d5:c7:
22:80:ce:f9:f8:74:3a:30:c9:31:78:76:c8:d7:bc:
df:cb:48:84:ca:54:fa:67:22:30:da:b3:66:47:70:
2e:69:5b:5e:29:da:e9:61:ad:66:cb:7b:73:2c:b5:
4c:0a:a4:62:93:94:72:21:2f:eb:e5:c4:b8:14:62:
16:f4:94:71:9d:5a:d6:f0:0f:64:f9:1f:cb:91:d9:
66:d9:d7:64:c8:da:2c:89:00:f6:f0:2f:25:d7:11:
45:40:3f:28:61:c9:0a:be:c0:78:08:ed:01:b4:2b:
18:81:c8:1a:f9:9a:d5:37:0c:32:e1:f2:8c:ce:61:
8b:d7:34:24:a6:a0:5e:64:52:d4:ae:26:70:0c:c2:
7b:bf:f3:a3:70:8c:29:0f:3b:aa:55:92:b3:39:4a:
35:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8F:DB:0C:80:A4:49:DF:9F:2B:53:A7:61:1A:BC:16:4F:58:D2:B5
X509v3 Authority Key Identifier:
keyid:36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:eb:e2:8f:62:62:ab:c1:03:95:4c:85:41:e7:4f:ae:74:5a:
5d:cb:37:b2:68:b4:d3:ac:8f:d1:00:0c:19:14:0e:55:8e:87:
3b:48:8c:0a:cd:4f:d1:44:7a:f6:47:7a:a6:17:84:d7:6b:5f:
5b:c8:1f:ec:f7:3e:c8:0b:db:f4:2d:97:a2:1a:50:50:2c:3f:
9d:18:5d:da:93:ac:46:e9:67:f1:5e:51:76:c6:06:b3:8b:ab:
3c:8f:2c:5a:28:6d:d1:0a:e7:e0:8f:49:34:02:3a:92:d4:b3:
4d:ac:04:5b:75:a9:d3:38:d8:48:8b:46:c4:8b:2d:98:0f:c5:
e9:8c:d3:31:06:3a:99:45:05:28:14:db:a0:95:ca:0b:1e:19:
80:d7:70:b2:ae:99:ce:d7:91:38:9c:41:ab:0f:15:d2:b9:de:
e1:8f:a1:b0:00:4a:ee:5d:45:bd:5c:f2:ee:2a:73:f4:55:bb:
b6:28:2d:62:2f:08:e3:7d:ad:da:c6:ed:ff:49:c4:98:7c:af:
8f:37:f9:a4:a5:6a:ca:e3:f3:13:14:c6:14:aa:8d:98:f9:03:
5b:75:8c:2f:9e:65:0e:cb:7e:3f:ea:6e:39:b3:0f:68:60:bb:
98:e3:e2:24:29:03:da:42:40:3e:3e:7a:af:22:ee:d4:86:13:
17:bd:dc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:20:33 2026 by rpki-client