
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft
File: 1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft (raw, json)
Hash identifier: JV52i8u6PKPG/f7xlIrqfHICW2gjuWru22vtEfBsMXA=
Subject key identifier: 1A:E6:73:56:97:9E:9F:6E:7C:07:ED:5A:B7:08:16:B1:1F:3C:2B:D5
Authority key identifier: D4:D1:8E:F1:C4:2B:04:99:5C:B1:A1:8F:57:64:BA:49:EF:B9:5B:E5
Certificate issuer: /CN=A91689B9/serialNumber=D4D18EF1C42B04995CB1A18F5764BA49EFB95BE5
Certificate serial: 2C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft
Manifest number: 2B
Signing time: Wed 23 Sep 2026 08:29:14 +0000
Manifest this update: Wed 23 Sep 2026 08:29:14 +0000
Manifest next update: Wed 30 Sep 2026 08:29:14 +0000
Files and hashes: 1: 1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl (hash: U8CAeYS82y+JMPbyHcf+ep8fAgEfvFFmWaB+LLPHAH8=)
2: C0D1BBF079BD11F1BB8B39355BA30FBC.roa (hash: gGu0FmVRoRjPupu9uKCq5cNV44H2mLC6217rmSNSokI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl
rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:29:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91689B9, serialNumber=D4D18EF1C42B04995CB1A18F5764BA49EFB95BE5
Validity
Not Before: Sep 23 08:29:14 2026 GMT
Not After : Sep 30 08:29:14 2026 GMT
Subject: CN=6ab38dda-20fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:dd:cf:36:0c:66:b1:33:6d:4c:75:c7:5b:
a8:c6:92:b8:7b:3c:b5:70:ff:d1:d5:1c:4f:b9:7e:
30:2d:09:22:b4:f5:c9:6f:b2:3e:fa:20:6b:f8:cf:
7a:f7:86:a8:5e:48:6d:f6:e3:5d:8f:2e:8b:ea:58:
7d:1e:0a:70:24:43:e9:ad:f1:46:bc:22:cd:e2:d9:
73:f2:3c:d6:8c:a5:35:91:fb:9a:b5:69:be:6b:0d:
2a:14:c6:df:de:c9:00:e5:28:14:8b:51:d1:37:ad:
83:f5:1b:31:5f:3f:14:21:50:b0:cb:94:2a:cc:a8:
03:e2:a8:e7:97:68:9f:81:71:48:70:44:c1:86:aa:
27:ee:1e:4c:d6:3f:41:57:5b:81:02:17:93:3b:43:
d9:4f:fe:6a:d6:f6:fe:85:51:70:be:98:fd:54:ff:
43:94:2b:e4:c5:20:de:79:c7:c4:c2:69:50:f5:2b:
47:1d:22:43:22:db:32:a8:2b:31:4b:df:74:71:69:
8d:58:6d:76:88:0d:40:4e:90:fa:1f:7a:f2:66:5c:
21:8e:c0:2e:7b:e3:f7:3c:6c:fc:71:d5:dd:67:0d:
ee:02:e4:fd:a7:6d:26:67:33:d3:aa:66:5e:c5:32:
ec:64:78:74:af:dc:25:45:c4:9c:bd:95:50:bc:50:
aa:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E6:73:56:97:9E:9F:6E:7C:07:ED:5A:B7:08:16:B1:1F:3C:2B:D5
X509v3 Authority Key Identifier:
keyid:D4:D1:8E:F1:C4:2B:04:99:5C:B1:A1:8F:57:64:BA:49:EF:B9:5B:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:d4:68:44:e5:c0:3e:85:4c:8f:1d:eb:7d:bf:f5:f0:bd:29:
d4:fa:2d:1d:f9:c9:63:bb:7f:94:09:a3:f7:47:68:67:d5:75:
98:70:fd:36:33:a9:a8:f0:b3:f0:db:34:54:73:0b:a9:51:6b:
37:d2:41:fd:b7:53:25:89:c7:65:0f:71:b4:b5:ae:9f:fc:ac:
9e:df:23:c8:6b:c0:31:be:c1:df:e1:47:13:eb:4f:d9:c2:c5:
1f:0f:f8:b9:d6:01:d6:89:09:ae:54:1b:63:4f:20:54:00:d5:
4d:6c:c8:b2:74:3b:c1:be:ce:5a:77:6d:cd:c1:f4:95:1e:fc:
3e:89:f0:c2:38:aa:71:a0:d3:7f:d8:33:5c:58:aa:2f:7f:0a:
fc:1b:ae:33:ae:38:32:78:a1:8d:1d:3c:85:37:0d:0a:83:45:
13:90:b8:9f:6f:2b:98:60:8c:a6:4b:4c:fd:ba:e6:de:64:8e:
bb:f4:63:ab:11:ae:d2:be:68:a1:ae:94:5c:d1:a0:0b:d3:7b:
88:9f:49:7c:de:95:eb:07:1f:3b:6d:c8:db:c1:71:19:55:e2:
38:f8:a9:c3:01:f2:96:ba:91:c5:b4:f9:bc:e7:53:5f:b6:13:
0d:e8:1e:0c:82:25:df:b4:b0:1a:fd:74:7c:61:c1:1f:90:95:
92:4a:a1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:50:34 2026 by rpki-client