
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
File: nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json)
Hash identifier: jgsM6EoW8Dacx3bV0im0X9LZylpbqgemiAR5UOOns4g=
Subject key identifier: 4F:74:75:C9:BF:8A:B5:F2:F7:F5:64:A4:B7:49:F4:A8:02:57:BF:8E
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Certificate issuer: /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial: 06CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
Manifest number: 06A4
Signing time: Sat 14 Nov 2026 22:19:38 +0000
Manifest this update: Sat 14 Nov 2026 22:19:38 +0000
Manifest next update: Sat 21 Nov 2026 22:19:38 +0000
Files and hashes: 1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: AVDlY83AUxudr+TDquQvl47ttjmQ39F+ZtNePD9fMw0=)
2: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: x8sZ4QxQXhvPiVMJ2oKAKBGtbntHbWyBpumXqbB9h14=)
3: 729F253CAB7611F0BCB28743C4F9AE02.roa (hash: RNZ4spqntA0JMCZsSqaH+sqpORW1IDmuJusYPmcPZSk=)
4: A7EBD74EAB7611F0A4F18663C4F9AE02.roa (hash: fMUinF8FSeKtIYLfJ88CgvoxibOKGi4+/9nzdFUr5UY=)
5: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: 6oy8vfXbR13Fccn1nC7FTUc7Ni330SgxcaSdkrjuIvk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 22:19:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1740 (0x6cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Validity
Not Before: Nov 14 22:19:38 2026 GMT
Not After : Nov 21 22:19:38 2026 GMT
Subject: CN=6af8de7a-0d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a5:ed:4f:f6:9c:fe:f3:45:ac:e7:ad:08:0c:
92:bb:df:77:78:71:c9:b2:97:4f:dd:76:ba:e3:b2:
7f:68:19:49:ce:00:c5:aa:75:05:b2:bc:2d:86:f5:
5f:86:9a:f5:99:9d:cd:46:89:de:79:e9:69:76:e6:
18:d7:e0:13:62:ff:4d:7a:04:d4:49:27:84:35:8c:
d7:5c:8b:2a:3d:97:f4:9b:09:e5:f6:83:47:27:86:
1e:85:c1:c1:fa:97:c3:be:4c:9f:44:b1:64:e6:73:
9f:bc:f5:f6:81:6c:bf:0a:05:70:f0:70:bf:e6:03:
5a:91:95:4e:c9:05:73:51:12:3a:cd:31:1f:8c:02:
b3:a7:5a:15:23:f6:d9:9f:79:d8:3f:bb:5b:46:12:
85:0b:04:ff:8b:62:05:f7:7a:c1:55:6b:60:33:f9:
68:a7:76:e6:e7:72:3b:5e:b5:2e:5b:00:56:f8:26:
8c:1a:f6:2a:ea:a7:32:8a:1d:74:db:40:b5:b3:3a:
c0:d8:4e:13:f0:d6:d8:76:3f:d5:34:5e:f6:43:a1:
6a:cb:a7:89:3e:a6:4a:7d:f6:80:1d:e0:b0:4f:54:
47:2b:6c:71:7d:e7:73:c1:c3:a2:8b:b4:12:14:40:
30:81:2b:25:c6:d2:83:43:d3:cf:81:45:cf:75:45:
50:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:74:75:C9:BF:8A:B5:F2:F7:F5:64:A4:B7:49:F4:A8:02:57:BF:8E
X509v3 Authority Key Identifier:
keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:64:37:f6:3f:fc:cf:84:7c:3c:f4:3a:c8:32:38:b7:10:35:
c7:79:20:c8:9d:d6:d2:16:1e:94:45:1d:be:20:47:7b:48:7e:
87:bb:0c:d4:39:84:70:ac:a5:a6:9e:0e:29:39:2a:41:0b:ea:
e1:2f:a4:1d:d6:76:5f:53:7b:4c:13:c7:63:ee:17:2f:55:73:
39:a7:b1:7c:4d:5e:2d:66:d7:8f:54:ec:da:5c:6f:93:fa:35:
80:a9:39:37:10:19:64:de:8b:e0:c7:a7:83:7b:d5:d9:73:46:
39:7b:3d:3c:c9:10:a2:7c:79:07:6c:5b:0f:b0:f0:1a:80:96:
8f:09:27:d8:3b:67:61:18:e8:ba:ba:a8:4b:7b:ed:1b:05:96:
45:56:0b:d3:fb:1d:f2:77:37:60:bb:2b:35:4f:fd:e8:15:60:
fd:f5:b3:c2:6c:d2:eb:06:6c:f4:2a:e5:c7:d3:e6:1b:d2:dc:
4d:d6:ae:61:93:bc:ad:aa:db:83:c1:97:72:03:02:f0:da:ee:
13:29:b7:94:f8:6c:05:5d:47:58:35:28:39:82:84:94:88:cd:
e5:89:0f:40:12:f9:07:32:40:a9:d5:22:bf:8f:b6:64:0b:1e:
6d:af:b8:5d:3c:4f:44:14:6b:88:52:53:4e:4d:07:5a:b6:d3:
cf:0e:52:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUIzODMxMTAvBgNVBAUTKDlDMjM1MUQ0NUE5N0Q3MUQwM0Q2QkMzODVCMzdERDlC
RkI4MENGNUUwHhcNMjYxMTE0MjIxOTM4WhcNMjYxMTIxMjIxOTM4WjAYMRYwFAYD
VQQDEw02YWY4ZGU3YS0wZDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhqXtT/ac/vNFrOetCAySu993eHHJspdP3Xa647J/aBlJzgDFqnUFsrwthvVf
hpr1mZ3NRoneeelpduYY1+ATYv9NegTUSSeENYzXXIsqPZf0mwnl9oNHJ4YehcHB
+pfDvkyfRLFk5nOfvPX2gWy/CgVw8HC/5gNakZVOyQVzURI6zTEfjAKzp1oVI/bZ
n3nYP7tbRhKFCwT/i2IF93rBVWtgM/lop3bm53I7XrUuWwBW+CaMGvYq6qcyih10
20C1szrA2E4T8NbYdj/VNF72Q6Fqy6eJPqZKffaAHeCwT1RHK2xxfedzwcOii7QS
FEAwgSslxtKDQ9PPgUXPdUVQowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE90dcm/
irXy9/VkpLdJ9KgCV7+OMB8GA1UdIwQYMBaAFJwjUdRal9cdA9a8OFs33Zv7gM9e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4My84Q0MyQTlBQURF
NzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4MEQxcnc0V3pmZG1fdUF6
MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25DTlIxRnFYMXgwRDFydzRXemZkbV91QXoxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjM4My84Q0MyQTlBQURFNzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4
MEQxcnc0V3pmZG1fdUF6MTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxmQ39j/8z4R8PPQ6yDI4txA1x3kgyJ3W0hYelEUdviBHe0h+h7sM1DmEcKyl
pp4OKTkqQQvq4S+kHdZ2X1N7TBPHY+4XL1VzOaexfE1eLWbXj1Ts2lxvk/o1gKk5
NxAZZN6L4Meng3vV2XNGOXs9PMkQonx5B2xbD7DwGoCWjwkn2DtnYRjourqoS3vt
GwWWRVYL0/sd8nc3YLsrNU/96BVg/fWzwmzS6wZs9Crlx9PmG9LcTdauYZO8rarb
g8GXcgMC8NruEym3lPhsBV1HWDUoOYKElIjN5YkPQBL5BzJAqdUiv4+2ZAseba+4
XTxPRBRriFJTTk0HWrbTzw5Svg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:47:18 2026 by rpki-client