
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
File: nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json)
Hash identifier: YxpHBisw+66IZFXDH+dmFHqTVwsy1IMY54g8QMSIlvE=
Subject key identifier: F2:77:8D:A7:8F:8F:58:47:ED:8D:F6:0F:CC:F4:35:50:94:69:DE:8E
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Certificate issuer: /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial: 06B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
Manifest number: 068B
Signing time: Sat 26 Sep 2026 22:38:52 +0000
Manifest this update: Sat 26 Sep 2026 22:38:52 +0000
Manifest next update: Sat 03 Oct 2026 22:38:52 +0000
Files and hashes: 1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: ytb3U+hBJdqltAN63gaxZWmTehVb4v9fbWuLgH8cjfI=)
2: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: 6oy8vfXbR13Fccn1nC7FTUc7Ni330SgxcaSdkrjuIvk=)
3: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: x8sZ4QxQXhvPiVMJ2oKAKBGtbntHbWyBpumXqbB9h14=)
4: 729F253CAB7611F0BCB28743C4F9AE02.roa (hash: RNZ4spqntA0JMCZsSqaH+sqpORW1IDmuJusYPmcPZSk=)
5: A7EBD74EAB7611F0A4F18663C4F9AE02.roa (hash: fMUinF8FSeKtIYLfJ88CgvoxibOKGi4+/9nzdFUr5UY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 22:38:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1715 (0x6b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Validity
Not Before: Sep 26 22:38:52 2026 GMT
Not After : Oct 3 22:38:52 2026 GMT
Subject: CN=6ab8497c-b1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c8:32:ce:95:9f:a4:f6:a1:f9:1a:59:16:bf:
84:30:05:61:78:ea:ff:03:f6:89:c7:aa:f0:d4:ec:
64:7e:56:79:3d:7c:26:6a:5c:f5:d3:d1:6a:cd:87:
26:ac:10:75:ac:55:c5:39:73:7c:e5:85:75:90:cc:
60:f2:a6:4d:d6:19:b6:7c:df:5b:16:0c:92:f1:ce:
1b:73:a2:62:51:6b:6b:69:80:5e:4c:30:fb:0c:49:
8d:e2:1c:33:da:b0:c6:05:87:29:a8:6c:6f:4f:5d:
b2:c4:3f:0d:50:94:77:9f:7b:be:4c:05:66:9e:de:
ec:f4:33:17:0d:05:75:18:03:33:bc:f7:8d:d1:a4:
64:c8:ea:4e:4d:3f:60:f4:31:eb:ec:f4:92:1d:42:
c1:4d:df:5e:3f:ad:76:eb:78:3e:5f:77:d4:29:4e:
43:56:70:5f:bc:a9:b5:c8:89:b7:4e:cb:f5:b6:42:
a2:89:80:8f:60:28:5c:de:ad:f8:be:4d:e6:b3:88:
ee:de:9b:f3:5e:b9:0f:e9:d6:6d:11:ed:18:80:87:
2b:11:9b:58:73:ff:a2:5c:66:36:d5:a0:bd:6a:2e:
62:d2:da:cd:34:90:b6:4c:ff:ca:26:b0:32:3f:27:
fa:38:47:79:6d:8e:c4:65:44:4a:14:99:9b:dd:6c:
4a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:77:8D:A7:8F:8F:58:47:ED:8D:F6:0F:CC:F4:35:50:94:69:DE:8E
X509v3 Authority Key Identifier:
keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:f0:54:3d:81:db:ef:a6:c5:ee:3d:42:e1:08:6d:d4:78:da:
34:c9:67:46:24:6e:c3:f3:6e:f6:da:e7:3d:7b:45:2f:7d:fa:
f7:7a:41:02:fc:fa:70:54:2b:61:3d:0c:c2:b1:36:37:88:01:
75:20:8d:48:35:f1:a3:bd:49:ca:c1:f8:45:d2:25:fd:7d:1d:
c6:ce:04:45:ea:6f:ca:6a:54:59:44:f6:f5:9e:b1:4f:91:13:
96:b9:bb:2c:6d:d1:c2:fc:a3:f1:cf:40:1b:a7:b6:fb:87:ce:
0d:a9:6d:d2:cb:81:9b:1b:65:26:e5:ee:8d:77:d6:07:c2:e1:
43:7c:07:e6:b1:25:48:77:c4:91:8f:0c:48:91:dc:6c:ef:f4:
c2:c0:f0:f9:9a:40:44:ff:74:a7:75:6c:a6:b0:17:34:8b:a9:
12:f0:3d:b6:4f:62:bf:7f:39:35:cb:12:6a:83:29:2c:56:bc:
17:c1:5d:b8:b6:a9:76:3a:10:cb:73:2b:51:c9:67:fd:39:14:
27:5b:c7:78:28:ac:0d:89:2c:2b:66:ab:b9:ab:0f:48:b5:44:
03:09:c2:5e:43:d9:bc:0b:c4:3a:2a:e1:03:89:c8:30:e8:27:
3a:09:38:97:f5:9b:2e:32:c6:a1:a8:61:cd:cb:32:88:2f:31:
f2:a6:73:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:45:05 2026 by rpki-client