
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
File: NttE1MFZiGc4IVpWELEQwkSGylY.mft (raw, json)
Hash identifier: jHIessmXN04umDj4+B3C6qCe6kCd4TJ+XDARDIXsJnY=
Subject key identifier: 8C:5F:ED:EE:9E:86:36:F2:4C:2E:D4:6D:90:2D:0D:7B:D5:A5:C1:46
Authority key identifier: 36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56
Certificate issuer: /CN=A91C6515/serialNumber=36DB44D4C159886738215A5610B110C24486CA56
Certificate serial: CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
Manifest number: C3
Signing time: Thu 23 Jul 2026 08:46:44 +0000
Manifest this update: Thu 23 Jul 2026 08:46:43 +0000
Manifest next update: Thu 30 Jul 2026 08:46:43 +0000
Files and hashes: 1: NttE1MFZiGc4IVpWELEQwkSGylY.crl (hash: zUOrQeXMc83owmYU1TJLadWxJPxWSUwWN2frxUVU4JU=)
2: E5723CA260C111F0A9EB0333C4F9AE02.roa (hash: vxcGwI8Luk+cexqrtDI44NCym1uBtp6Sxq28P5I1c3Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl
rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:46:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6515, serialNumber=36DB44D4C159886738215A5610B110C24486CA56
Validity
Not Before: Jul 23 08:46:43 2026 GMT
Not After : Jul 30 08:46:43 2026 GMT
Subject: CN=6a61d4f3-9487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7a:ea:4d:4a:fb:62:e6:b3:96:e9:33:ad:25:
26:3d:73:cc:d0:56:23:46:bd:f4:82:d3:2f:13:a9:
e0:76:af:bb:e0:30:6e:fb:f9:dc:c6:54:c5:b2:cc:
7b:fe:57:52:6e:dc:d0:3f:e0:a4:bf:3e:5c:0f:31:
00:cc:57:d5:fd:4f:a3:cf:0f:0b:ca:12:5a:32:e3:
d5:59:5e:51:1e:5d:6d:d6:0f:fd:d9:ec:38:98:65:
36:a3:d2:7a:4d:9d:55:97:51:07:4b:18:ec:7d:f1:
3b:51:6a:9a:54:bb:e3:2f:02:95:23:fe:f4:9b:4d:
f1:d9:93:78:a4:0e:5f:54:3e:91:c4:2a:3f:48:bd:
ce:25:33:52:68:08:62:13:02:c6:40:42:0d:d2:ac:
8d:ba:6a:9c:5f:a3:00:ff:8f:46:58:25:ef:87:4f:
ff:7b:c7:41:57:f2:cc:16:83:53:cb:b9:d8:ed:3a:
aa:bb:25:b5:05:13:d1:eb:2f:9b:1f:47:8e:de:04:
b1:16:f1:c1:b9:da:b8:e5:45:6e:e4:c5:28:33:60:
67:f5:5c:91:4b:7b:f2:4f:53:34:37:42:b6:46:23:
ac:17:dd:46:1d:51:91:c7:3b:cf:27:d8:3c:95:c5:
61:ce:a7:74:e4:73:00:7b:98:c4:18:23:e5:a6:54:
f7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5F:ED:EE:9E:86:36:F2:4C:2E:D4:6D:90:2D:0D:7B:D5:A5:C1:46
X509v3 Authority Key Identifier:
keyid:36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a0:82:c3:93:60:e8:82:84:f7:2c:f4:cb:fe:47:96:6d:e9:
70:19:c4:53:7f:98:49:50:96:a5:bb:bb:13:02:30:22:58:b6:
12:09:11:27:e9:b7:b5:09:5c:ff:bc:d2:b9:c5:49:bd:08:ac:
45:2a:64:a4:4b:bf:76:b3:12:7d:0c:f3:c7:2f:da:bd:c9:98:
06:2a:23:4b:0d:10:a0:62:04:73:90:b2:1d:53:da:65:6b:85:
ef:c2:80:a8:33:e2:88:b2:5d:43:15:d0:dc:c2:2b:3f:af:19:
43:02:45:d9:c1:21:4e:fc:64:53:0a:15:f3:7b:ed:7e:45:02:
16:2c:a9:20:f8:c5:9a:c8:68:a5:e1:b5:62:f1:7c:39:fa:67:
b0:07:c3:ef:09:8e:21:2c:d8:ee:5c:ae:66:5f:bc:5d:af:86:
46:64:4d:79:9b:7b:03:2e:e8:6e:0f:bb:35:f2:b9:c2:9d:96:
ce:7a:8b:e5:0a:04:50:99:17:a7:0c:8d:6a:62:da:3c:a2:78:
ae:3a:8f:38:59:20:79:7a:d9:70:4d:9e:81:18:81:12:54:a3:
4f:1f:6f:e4:59:dc:04:ea:ea:b0:71:f7:32:fd:78:77:8c:c0:
25:d8:e8:c0:a4:8b:fa:c1:37:cb:79:7a:bb:ef:a4:08:26:ef:
25:fb:03:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:48:32 2026 by rpki-client