
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
File: NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft (raw, json)
Hash identifier: oD9eewStDn41Ld2DOc2uu0t9yD9P0/Pj4jQd+RXJQhQ=
Subject key identifier: 7A:D8:AD:2E:76:43:68:18:46:D8:6F:98:36:2F:3A:A7:8E:ED:7F:12
Authority key identifier: 34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7
Certificate issuer: /CN=A915A268/serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
Manifest number: 019B
Signing time: Wed 25 Mar 2026 03:30:58 +0000
Manifest this update: Wed 25 Mar 2026 03:30:57 +0000
Manifest next update: Wed 01 Apr 2026 03:30:57 +0000
Files and hashes: 1: NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl (hash: ojKPB2rWvSOxEJz9T3iotiMhRZA8cQL9s6iag51uQ6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl
rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A268, serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7
Validity
Not Before: Mar 25 03:30:57 2026 GMT
Not After : Apr 1 03:30:57 2026 GMT
Subject: CN=69c356f2-f697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:b2:70:c6:bf:4c:e5:e1:0b:b5:85:81:c5:
2a:40:77:08:c3:db:ee:5a:02:a0:50:84:b8:37:39:
16:d7:dd:eb:4d:33:2f:ad:79:53:ae:12:db:7a:87:
3e:b4:d7:bc:ff:47:09:ee:01:3e:b6:2e:c4:89:1c:
56:c4:59:c7:b2:fa:56:bd:77:d0:6e:22:45:08:e1:
aa:bb:42:8c:d8:19:d6:99:c7:8b:29:0e:a3:62:26:
fa:e7:88:84:e4:8c:64:f9:18:74:f0:81:60:06:67:
4b:f8:30:7e:bd:3a:21:2b:9c:ea:ae:08:dc:55:55:
8e:53:3f:48:85:5c:8d:0f:00:e0:7e:bd:a6:0a:f8:
36:91:a6:ba:50:0d:d5:ec:f5:57:69:bc:1d:12:43:
1c:06:93:b6:73:f0:bb:37:78:2d:8d:a7:d7:7a:73:
75:e1:90:86:04:74:f5:53:51:6e:44:24:89:5b:c8:
73:0e:ad:a8:b9:b5:eb:40:34:0d:8b:00:8d:33:4c:
86:1c:a8:a9:ca:5f:e4:f7:9e:3e:ac:a4:e3:1d:cd:
eb:4b:94:5b:8a:4b:e5:c3:ee:e5:44:c7:e2:82:18:
67:1a:e4:6f:c9:ec:d3:ed:d1:8a:99:10:3c:d4:e1:
65:57:06:24:29:f3:13:cc:57:d8:95:4b:99:ab:3a:
a3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D8:AD:2E:76:43:68:18:46:D8:6F:98:36:2F:3A:A7:8E:ED:7F:12
X509v3 Authority Key Identifier:
keyid:34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ba:42:7b:c1:ac:cb:e3:e8:95:77:d2:ed:9c:4f:e8:dd:38:
b0:59:8c:cd:f0:77:d4:65:f4:e1:f6:db:1b:bb:07:57:a5:40:
39:ba:09:29:25:4b:62:0e:13:9a:1a:48:bc:b3:ef:09:e6:d4:
d1:27:03:fc:50:df:65:89:73:bc:e6:c1:8f:65:7e:f2:49:63:
7a:f6:54:0f:32:3f:18:0e:1b:39:f0:37:23:66:0a:71:d8:c3:
19:8e:62:ec:6e:fa:f4:d9:38:a8:44:71:28:c9:ef:46:88:5b:
97:c5:e3:12:c1:c7:fd:17:c3:5c:56:77:76:98:1a:3a:cc:38:
37:49:a0:d2:0a:89:d5:59:e0:00:58:51:22:c4:54:86:18:3e:
da:d8:2c:04:04:72:8c:0f:29:67:4f:60:90:92:fe:4d:33:1d:
fb:32:2d:88:3a:ce:a3:df:eb:0e:52:ff:16:16:87:a8:29:1c:
dd:41:67:8d:2a:50:f4:99:b6:5a:5c:be:49:43:99:86:6b:cd:
53:29:77:19:8e:35:a3:35:f1:fe:b2:1c:51:e1:b4:5e:ff:36:
37:f7:e8:51:5f:1d:6c:07:87:81:a2:8e:4c:9e:b1:10:7f:ad:
62:9b:7b:dd:e0:df:c6:34:1f:f4:36:fe:0f:e1:ce:18:36:f8:
67:e2:b5:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEyNjgxMTAvBgNVBAUTKDM0RUZEN0M0RDY2Q0ZBMzRCODQ1NjZCMjYyMzlEOTBB
OEM5MUVDQjcwHhcNMjYwMzI1MDMzMDU3WhcNMjYwNDAxMDMzMDU3WjAYMRYwFAYD
VQQDEw02OWMzNTZmMi1mNjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAusOycMa/TOXhC7WFgcUqQHcIw9vuWgKgUIS4NzkW193rTTMvrXlTrhLbeoc+
tNe8/0cJ7gE+ti7EiRxWxFnHsvpWvXfQbiJFCOGqu0KM2BnWmceLKQ6jYib654iE
5Ixk+Rh08IFgBmdL+DB+vTohK5zqrgjcVVWOUz9IhVyNDwDgfr2mCvg2kaa6UA3V
7PVXabwdEkMcBpO2c/C7N3gtjafXenN14ZCGBHT1U1FuRCSJW8hzDq2oubXrQDQN
iwCNM0yGHKipyl/k954+rKTjHc3rS5Rbikvlw+7lRMfighhnGuRvyezT7dGKmRA8
1OFlVwYkKfMTzFfYlUuZqzqjdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHrYrS52
Q2gYRthvmDYvOqeO7X8SMB8GA1UdIwQYMBaAFDTv18TWbPo0uEVmsmI52QqMkey3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTI2OC81NDFGMzg4OEIz
NTAxMUVFOTI1RDc3MUFDNEY5QUUwMi9OT19YeE5acy1qUzRSV2F5WWpuWkNveVI3
TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05PX1h4TlpzLWpTNFJXYXlZam5aQ295UjdMYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTI2OC81NDFGMzg4OEIzNTAxMUVFOTI1RDc3MUFDNEY5QUUwMi9OT19YeE5acy1q
UzRSV2F5WWpuWkNveVI3TGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPrpCe8Gsy+PolXfS7ZxP6N04sFmMzfB31GX04fbbG7sHV6VAOboJKSVLYg4T
mhpIvLPvCebU0ScD/FDfZYlzvObBj2V+8kljevZUDzI/GA4bOfA3I2YKcdjDGY5i
7G769Nk4qERxKMnvRohbl8XjEsHH/RfDXFZ3dpgaOsw4N0mg0gqJ1VngAFhRIsRU
hhg+2tgsBARyjA8pZ09gkJL+TTMd+zItiDrOo9/rDlL/FhaHqCkc3UFnjSpQ9Jm2
Wly+SUOZhmvNUyl3GY41ozXx/rIcUeG0Xv82N/foUV8dbAeHgaKOTJ6xEH+tYpt7
3eDfxjQf9Db+D+HOGDb4Z+K14Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:06:34 2026 by rpki-client