
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft
File: NUOeC_NciIu4TRsk7N5wYM90TpE.mft (raw, json)
Hash identifier: D/BuhYl9sYlQU3ADak6YaN1iGLDe0+OTApt0HrN7Khs=
Subject key identifier: 04:43:04:15:8D:4B:05:E9:3B:7A:03:45:AD:AA:D5:91:4E:C9:45:75
Authority key identifier: 35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91
Certificate issuer: /CN=A917C422/serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91
Certificate serial: 2C2A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft
Manifest number: 2C10
Signing time: Tue 12 May 2026 14:26:27 +0000
Manifest this update: Tue 12 May 2026 14:26:26 +0000
Manifest next update: Tue 19 May 2026 14:26:26 +0000
Files and hashes: 1: NUOeC_NciIu4TRsk7N5wYM90TpE.crl (hash: zyQ/NW15Kw9W2h7aHOGrHgB4I10qDfk2asDVm1201dQ=)
2: 6313DADA500011EBB74A2C2AC4F9AE02.roa (hash: h/xjw2uGVTtL8b2ydd+g45aswVdSOXMWt+z5VztwbYw=)
3: F645F318500C11EBA2295426C4F9AE02.roa (hash: T/3Qd5JLkUZ8axH+b8NITt79vh28jc8CtqLL9xCu9/o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl
rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:26:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11306 (0x2c2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C422, serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91
Validity
Not Before: May 12 14:26:26 2026 GMT
Not After : May 19 14:26:26 2026 GMT
Subject: CN=6a033893-d077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f8:7e:a9:bc:7d:b1:c2:f1:a1:d3:fd:af:62:
f5:d1:6e:54:57:f8:73:6f:6e:fd:29:44:2a:8a:db:
6f:51:de:50:cc:5c:b1:d7:7c:34:7d:a4:a8:e0:a5:
d7:eb:f9:60:02:6a:b0:d1:dd:8f:96:fd:9e:fc:2e:
4a:95:0e:a2:79:83:a2:81:ef:dc:8d:3b:56:db:10:
50:f3:07:5a:29:31:6e:00:85:79:e4:36:89:d1:75:
cd:1c:4a:fc:27:3a:21:b3:7d:24:db:19:c6:f1:10:
ae:31:55:6e:73:61:a3:0a:3e:ff:44:32:af:d0:49:
8e:f7:61:62:4e:8e:8e:82:b9:4b:c5:9e:8a:d2:f2:
5c:53:02:35:31:67:96:47:2f:4d:2f:c2:2b:5f:69:
c2:ac:45:1d:30:a5:12:21:5e:2d:7f:3e:b3:8a:f2:
e6:24:eb:96:63:97:27:66:4c:04:69:50:13:ae:62:
4c:5b:b7:59:96:47:49:14:e6:6c:fa:04:c4:06:09:
29:22:59:05:ea:da:b9:44:0e:8c:18:b0:8e:59:27:
3b:b8:a8:e8:f6:17:bc:2d:1a:07:e0:04:b7:14:b8:
4b:df:45:a8:30:e9:7c:4d:63:2c:56:14:ad:00:a9:
f0:09:8f:70:f4:88:15:d1:33:fb:92:6e:d3:da:56:
f5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:43:04:15:8D:4B:05:E9:3B:7A:03:45:AD:AA:D5:91:4E:C9:45:75
X509v3 Authority Key Identifier:
keyid:35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:42:9c:fe:85:e4:64:7f:73:6b:81:4f:f0:64:a7:e3:18:9d:
97:39:56:a7:6e:4c:7e:b0:f1:38:83:5f:a9:db:00:a9:66:1f:
53:36:3a:94:55:39:22:01:b4:c8:97:5a:a1:7f:06:1d:02:6a:
d7:6a:c5:d8:47:3c:0f:51:74:f3:48:aa:c2:3b:6f:09:31:30:
9d:4e:3a:f1:76:16:24:45:4b:54:11:13:32:ff:2b:81:18:ec:
b7:d3:1f:dd:eb:b0:40:d5:2c:78:25:71:3d:23:25:79:5f:77:
a5:ac:ac:95:46:13:db:04:62:f4:ce:8e:7a:cc:33:a7:83:52:
f8:1b:3c:47:eb:97:73:e3:f3:85:93:34:59:fb:94:0a:86:9c:
b5:dc:6f:15:27:46:d6:2a:b6:ca:fc:aa:c5:1b:91:e5:53:62:
81:f3:ed:1a:0b:4c:3d:b8:00:b0:cd:59:35:67:8f:9c:0c:2b:
54:2e:a9:4c:c9:7e:4d:58:a3:e8:aa:d7:2e:fc:88:71:be:06:
7f:77:e5:84:ec:e1:90:06:17:44:d2:fc:7a:e4:da:8a:13:88:
11:ce:da:02:aa:c0:8f:9a:34:06:e9:d3:70:14:f7:0e:21:07:
80:c1:45:14:0a:ed:6d:19:f9:8e:b1:b9:e0:d9:22:8c:bd:88:
7a:bf:5f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:33:36 2026 by rpki-client