
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
File: nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json)
Hash identifier: j61BQ4I9SEqIAfNRnwkQWy4upK/anfYq9aj3tWTn0Ak=
Subject key identifier: 2C:F2:8C:0C:0F:32:C0:1B:D9:4E:DA:BE:4E:95:E0:D0:D1:D0:18:27
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Certificate issuer: /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial: 064E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
Manifest number: 062A
Signing time: Tue 24 Mar 2026 22:33:07 +0000
Manifest this update: Tue 24 Mar 2026 22:33:07 +0000
Manifest next update: Tue 31 Mar 2026 22:33:07 +0000
Files and hashes: 1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: oqe6laBss13R2Ftr3YKTcTJJs5CJwZkphw91Q27OaQU=)
2: 729F253CAB7611F0BCB28743C4F9AE02.roa (hash: cgiDC2IeZyxnx0YTTuxfu//CGtgQm8yJluwva/OgfKI=)
3: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: 9L/8rIC6SRhqg6qSd6LFBimcV8KPIkKPiXaPwT3ytbY=)
4: A7EBD74EAB7611F0A4F18663C4F9AE02.roa (hash: LeLRqsxMpp4Ky8wD6G3jj2qk2RePehhwztN5Ryshg7k=)
5: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: KV24/bEBcylNLG4cs1n5VfE+kOmO6T6A1cs3Vw5jHfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1614 (0x64e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Validity
Not Before: Mar 24 22:33:07 2026 GMT
Not After : Mar 31 22:33:07 2026 GMT
Subject: CN=69c31123-2d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:e4:37:d5:f3:84:53:20:6a:c8:01:e5:92:
62:21:22:13:d8:61:55:b3:03:66:ac:a0:52:ae:bc:
49:0b:ba:e8:e9:1e:80:eb:5f:25:68:5f:19:49:63:
4f:df:da:bf:83:93:e9:98:5b:1e:f2:3a:ce:a7:ec:
90:75:b0:74:55:1d:ef:fa:31:5e:9f:d2:4c:dc:db:
b7:cd:df:8f:18:a5:45:61:64:f8:6e:cb:38:aa:9e:
67:cc:ec:96:56:44:8c:4e:85:f5:49:d6:12:d9:c2:
9b:84:cf:ee:0b:d6:49:a0:7a:d3:2d:1e:aa:7a:35:
67:e2:5c:c4:d7:bf:70:1c:a4:9a:b1:21:87:55:e3:
1f:b2:05:4a:cc:b2:3c:a5:91:7a:e6:18:9a:ef:e0:
55:2d:6f:c5:a5:57:cd:45:63:62:3b:61:a3:34:b0:
84:0f:e2:21:c3:9f:bc:09:01:32:1a:f1:7d:be:71:
6e:ac:7a:bb:74:86:7b:4e:2e:e9:4b:19:85:6a:de:
b7:11:28:f8:8b:b4:03:02:9e:8b:36:8b:1c:7f:7f:
4c:a9:c7:a6:7d:e2:2d:ee:99:c8:3a:e0:a7:09:d6:
3f:45:ea:ca:83:60:f6:b1:29:88:e4:ac:22:a2:f5:
29:d6:35:22:2f:a5:c7:9d:07:fb:d1:5e:18:c1:59:
e6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F2:8C:0C:0F:32:C0:1B:D9:4E:DA:BE:4E:95:E0:D0:D1:D0:18:27
X509v3 Authority Key Identifier:
keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c4:47:d1:0a:6e:7a:79:35:b4:b8:e3:6b:0c:3a:62:6a:a8:
31:4d:5d:3c:68:08:5a:6f:88:3d:3f:2a:34:b1:4c:f8:96:35:
48:34:5c:b6:af:dd:37:c3:d6:b1:83:a7:42:39:dd:20:9b:2c:
f9:6a:cd:d4:92:05:5d:fd:2d:e1:c5:49:07:90:8b:ce:bf:15:
df:cc:b3:3e:73:e5:56:2c:80:fc:32:9d:6a:58:24:ad:c7:e1:
4c:4f:ea:f0:7d:1f:6d:d9:77:18:38:c0:60:e4:4c:29:f2:a1:
b8:8e:88:91:ba:8c:8e:10:b6:2a:38:2f:3a:bf:41:f6:4a:0e:
95:92:00:1d:95:1a:3d:92:62:a9:56:05:f3:9e:1b:a2:13:f9:
96:50:5e:2c:76:7d:67:d5:70:04:be:97:51:dd:16:fb:c1:5d:
7f:85:46:b0:04:e4:74:86:5b:82:a7:33:e2:c9:32:a5:2e:b7:
f3:bd:b7:00:c6:57:d4:14:ac:3b:93:29:8e:bc:4a:49:ad:1b:
9b:24:f7:85:c5:33:0f:e7:1e:35:61:a7:0d:59:51:68:96:7b:
85:d8:0b:3a:e6:ed:0c:da:b1:53:70:33:56:17:36:a2:4a:1f:
ad:7a:af:a7:4a:d8:4c:b9:25:76:c6:b5:1a:44:ef:0f:79:46:
8a:3d:a6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:52 2026 by rpki-client