
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
File: nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json)
Hash identifier: G33W9ld0p4XkNxtCEyWIEaGnzoQQFn/z+K0eCfULCF0=
Subject key identifier: AA:8A:06:A8:E8:44:6C:EB:18:CB:78:70:DC:94:92:A3:64:95:D2:98
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Certificate issuer: /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial: 0691
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
Manifest number: 0669
Signing time: Wed 22 Jul 2026 23:23:47 +0000
Manifest this update: Wed 22 Jul 2026 23:23:47 +0000
Manifest next update: Wed 29 Jul 2026 23:23:47 +0000
Files and hashes: 1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: 01CHIJxfIg68V6KyP8NqcFvNjtgZ/QTMDrvu3GBpqYM=)
2: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: 6oy8vfXbR13Fccn1nC7FTUc7Ni330SgxcaSdkrjuIvk=)
3: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: x8sZ4QxQXhvPiVMJ2oKAKBGtbntHbWyBpumXqbB9h14=)
4: A7EBD74EAB7611F0A4F18663C4F9AE02.roa (hash: fMUinF8FSeKtIYLfJ88CgvoxibOKGi4+/9nzdFUr5UY=)
5: 729F253CAB7611F0BCB28743C4F9AE02.roa (hash: RNZ4spqntA0JMCZsSqaH+sqpORW1IDmuJusYPmcPZSk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:23:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1681 (0x691)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Validity
Not Before: Jul 22 23:23:47 2026 GMT
Not After : Jul 29 23:23:47 2026 GMT
Subject: CN=6a615103-e25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:2a:85:e3:18:81:4e:b9:7c:8b:e9:da:83:
c5:79:8e:fe:61:bc:b5:75:fc:e1:bd:af:a2:28:9e:
cd:70:eb:d8:29:ad:06:4c:af:8f:17:f5:9d:9e:4c:
a2:40:a7:d5:bd:ce:07:e6:77:12:e4:4d:6d:50:79:
37:4a:e2:fa:10:fe:99:20:73:a4:3a:68:b7:15:b7:
2c:ff:a8:1a:62:01:aa:21:74:18:c0:81:a1:3e:54:
ca:bd:37:32:ed:68:b7:eb:9a:f7:53:a9:01:b6:ba:
6d:5c:95:1c:c4:f9:f1:d5:f0:c6:23:e9:a3:bf:e2:
d1:fe:c5:e2:93:4b:82:5e:d9:49:44:08:05:aa:36:
7c:cf:6f:db:16:d3:c7:98:88:39:18:13:bc:91:00:
09:44:71:d2:ab:90:17:ca:2b:ba:37:00:ec:0f:61:
92:07:3d:57:01:ff:91:a0:86:42:f7:4c:3b:b5:a3:
d9:83:81:e2:49:30:80:f6:2c:c9:50:5e:d0:b6:df:
6a:74:95:b8:a5:3b:20:a1:db:88:51:71:7a:e5:07:
8e:eb:09:9c:93:df:6b:1b:25:f7:8e:83:b7:68:f2:
ba:fc:ea:a7:3e:21:2d:7d:fb:f9:06:2a:16:61:d2:
ef:39:b6:bb:ac:c4:40:d4:e4:ae:4d:70:45:7a:54:
37:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8A:06:A8:E8:44:6C:EB:18:CB:78:70:DC:94:92:A3:64:95:D2:98
X509v3 Authority Key Identifier:
keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9f:ea:19:30:72:26:b9:3b:a3:57:81:da:06:b6:7a:a9:52:
24:4f:9c:ab:9e:db:48:63:fb:ca:97:b1:55:07:3b:75:6d:3e:
e0:92:ba:a6:65:ec:ba:a6:60:53:29:4c:bf:79:6e:45:21:af:
0f:be:83:06:94:94:55:c3:1b:01:7a:ed:1e:68:f7:61:94:37:
c8:5a:82:2a:95:f0:de:0d:01:fe:99:74:f2:5a:1c:00:85:3c:
be:b7:4a:e2:f5:c8:52:e8:ff:58:45:e0:17:65:47:bb:d4:78:
f5:81:d2:e3:81:27:47:53:28:0c:31:1f:6e:6f:cc:ff:b2:c6:
e2:85:94:ff:57:e1:ca:1e:cb:f7:52:e5:04:60:24:46:b1:5e:
6d:82:e6:15:eb:44:63:ec:bf:70:1b:a0:83:b7:2b:ce:54:f3:
dd:c5:91:97:8a:d9:66:66:0d:be:d1:50:25:5a:3f:32:31:49:
d8:3e:51:db:3e:b1:20:a4:38:be:2e:40:b5:4f:b8:82:9d:df:
85:24:8e:c1:a4:7d:9c:dd:bf:66:21:51:1d:f0:d2:a4:6a:79:
76:5a:0e:2f:35:27:a5:1f:da:4e:95:79:94:7b:9e:c4:b6:8e:
a1:11:b4:bc:42:29:eb:45:3e:77:11:09:d4:3f:ca:ea:b9:7a:
34:cf:f9:68
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUIzODMxMTAvBgNVBAUTKDlDMjM1MUQ0NUE5N0Q3MUQwM0Q2QkMzODVCMzdERDlC
RkI4MENGNUUwHhcNMjYwNzIyMjMyMzQ3WhcNMjYwNzI5MjMyMzQ3WjAYMRYwFAYD
VQQDEw02YTYxNTEwMy1lMjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwGoqheMYgU65fIvp2oPFeY7+Yby1dfzhva+iKJ7NcOvYKa0GTK+PF/Wdnkyi
QKfVvc4H5ncS5E1tUHk3SuL6EP6ZIHOkOmi3Fbcs/6gaYgGqIXQYwIGhPlTKvTcy
7Wi365r3U6kBtrptXJUcxPnx1fDGI+mjv+LR/sXik0uCXtlJRAgFqjZ8z2/bFtPH
mIg5GBO8kQAJRHHSq5AXyiu6NwDsD2GSBz1XAf+RoIZC90w7taPZg4HiSTCA9izJ
UF7Qtt9qdJW4pTsgoduIUXF65QeO6wmck99rGyX3joO3aPK6/OqnPiEtffv5BioW
YdLvOba7rMRA1OSuTXBFelQ3AwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKqKBqjo
RGzrGMt4cNyUkqNkldKYMB8GA1UdIwQYMBaAFJwjUdRal9cdA9a8OFs33Zv7gM9e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4My84Q0MyQTlBQURF
NzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4MEQxcnc0V3pmZG1fdUF6
MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25DTlIxRnFYMXgwRDFydzRXemZkbV91QXoxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjM4My84Q0MyQTlBQURFNzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4
MEQxcnc0V3pmZG1fdUF6MTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjJ/qGTByJrk7o1eB2ga2eqlSJE+cq57bSGP7ypexVQc7dW0+4JK6pmXsuqZg
UylMv3luRSGvD76DBpSUVcMbAXrtHmj3YZQ3yFqCKpXw3g0B/pl08locAIU8vrdK
4vXIUuj/WEXgF2VHu9R49YHS44EnR1MoDDEfbm/M/7LG4oWU/1fhyh7L91LlBGAk
RrFebYLmFetEY+y/cBugg7crzlTz3cWRl4rZZmYNvtFQJVo/MjFJ2D5R2z6xIKQ4
vi5AtU+4gp3fhSSOwaR9nN2/ZiFRHfDSpGp5dloOLzUnpR/aTpV5lHuexLaOoRG0
vEIp60U+dxEJ1D/K6rl6NM/5aA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:19:07 2026 by rpki-client