
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
File: NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft (raw, json)
Hash identifier: xEIjVMUQh1Jm2injPh2Fj4+n45VhweEifHCFiW0iXtM=
Subject key identifier: 80:64:CF:4F:65:49:39:E0:D6:D0:CE:78:2E:22:E1:96:0F:99:2F:B7
Authority key identifier: 35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77
Certificate issuer: /CN=A916714C/serialNumber=353E48875376C6DB97E3426365CC7F18C9456877
Certificate serial: 0679
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
Manifest number: 066F
Signing time: Tue 22 Sep 2026 22:17:19 +0000
Manifest this update: Tue 22 Sep 2026 22:17:18 +0000
Manifest next update: Tue 29 Sep 2026 22:17:18 +0000
Files and hashes: 1: NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl (hash: wBArTPthjQNp5WXN4UqfN6h38148zn+Tbl3OiC9+cKc=)
2: E50353FEDFED11EBA155C712C4F9AE02.roa (hash: DljMvLKa4sQ9wA9+ruYYv4Wx13hc9+MtmACdvX5LCjs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl
rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1657 (0x679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916714C, serialNumber=353E48875376C6DB97E3426365CC7F18C9456877
Validity
Not Before: Sep 22 22:17:18 2026 GMT
Not After : Sep 29 22:17:18 2026 GMT
Subject: CN=6ab2fe6e-db82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:22:18:7a:1a:53:5e:7e:5e:ae:54:3b:38:71:
7b:47:6e:2d:9a:0a:f1:bc:83:08:40:54:75:8b:fa:
d6:32:f1:62:60:f9:17:ce:05:49:01:f9:11:a3:73:
61:13:90:9c:4a:62:d5:b6:77:91:df:b7:72:22:e9:
e4:2c:7e:6f:45:a0:81:e7:b9:65:3f:e9:80:a3:bb:
6a:ca:f9:ec:48:a2:bd:c6:a1:72:af:4b:ea:d4:82:
ee:a9:18:29:53:a5:58:6a:74:e3:25:26:1d:a2:44:
aa:45:f0:96:98:19:dc:02:c3:a3:95:8a:cf:fd:77:
7e:9b:e8:01:db:31:5e:30:4b:52:ec:9a:cd:69:c1:
16:09:59:87:7e:60:b8:d9:35:22:da:70:48:86:9f:
8e:8d:d5:0a:c8:45:e2:eb:f4:ff:cd:30:73:b5:af:
c9:fe:60:b5:3e:f5:14:2f:6b:c2:35:42:de:00:4e:
90:71:43:52:cc:d3:e0:70:f9:ea:7c:db:2d:bf:35:
77:33:35:6a:58:20:10:3f:b2:29:b2:9e:c9:42:7c:
87:71:74:4d:9d:7a:80:94:f6:6c:6c:9e:3d:7d:c3:
14:de:fc:58:7b:fc:a9:bc:e5:3d:0c:78:74:2e:7d:
10:df:e5:47:94:12:17:fe:e3:42:51:a3:18:96:81:
9b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:64:CF:4F:65:49:39:E0:D6:D0:CE:78:2E:22:E1:96:0F:99:2F:B7
X509v3 Authority Key Identifier:
keyid:35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:e2:6e:99:bd:d2:2a:7f:f2:14:06:1f:b9:93:db:37:ff:bc:
d5:a9:93:2a:a0:e9:f7:f2:49:a1:67:7b:c6:8c:dd:87:b6:99:
21:bc:a0:88:7c:c2:d0:99:a0:69:20:70:d8:69:ff:93:32:32:
79:6b:71:4b:b9:87:49:fa:66:86:60:02:f7:7b:a0:82:6e:e0:
8e:db:cf:d7:b9:80:8e:01:cd:20:52:be:c0:47:7b:c9:90:4e:
20:57:e4:70:b1:7a:5e:a2:6d:16:2d:a1:8a:78:96:36:ad:1c:
b3:f5:cb:86:f7:cb:ae:41:4c:82:2b:5c:a6:aa:2e:0d:ea:fc:
82:d0:d5:f9:e1:fe:11:eb:0a:29:44:98:d3:b5:5d:f6:53:06:
8a:3d:6b:72:2f:77:3e:64:c9:02:1e:f7:75:76:e6:8c:0c:fe:
3b:bc:cf:9c:e2:ba:01:1f:e9:2b:ae:4a:0d:f4:a1:b9:73:78:
10:58:ce:5b:c8:3c:3f:0e:bb:e4:c9:d7:c9:80:94:29:a6:ba:
42:e3:43:a4:c0:f9:38:c5:89:c5:40:b6:7d:e2:67:d1:ea:5d:
a1:b9:72:d3:51:24:95:fc:f7:cf:12:72:c2:2b:7a:0b:fc:e4:
ce:e1:54:0d:60:9c:b9:74:36:02:1d:2e:88:7a:72:9b:f8:ca:
1e:f1:b7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:15:47 2026 by rpki-client