
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
File: NttE1MFZiGc4IVpWELEQwkSGylY.mft (raw, json)
Hash identifier: +JapFSwoPEv/x8XGyC96Oo7aZOEsqw+QwsBtrTwkVGw=
Subject key identifier: C0:80:1F:8F:18:9B:0B:50:2F:3C:58:83:3E:4D:35:84:C9:AD:D8:5E
Authority key identifier: 36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56
Certificate issuer: /CN=A91C6515/serialNumber=36DB44D4C159886738215A5610B110C24486CA56
Certificate serial: 8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
Manifest number: 85
Signing time: Wed 25 Mar 2026 06:52:19 +0000
Manifest this update: Wed 25 Mar 2026 06:52:18 +0000
Manifest next update: Wed 01 Apr 2026 06:52:18 +0000
Files and hashes: 1: NttE1MFZiGc4IVpWELEQwkSGylY.crl (hash: z7ZMp5hRmSmx+5YkQgN4luKjysd/V6yvPKIe8VW352w=)
2: E5723CA260C111F0A9EB0333C4F9AE02.roa (hash: cYt+KD2Qk+BlMRrfFar8wLBaPDEtviMRQH8N+k8Q4G4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl
rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6515, serialNumber=36DB44D4C159886738215A5610B110C24486CA56
Validity
Not Before: Mar 25 06:52:18 2026 GMT
Not After : Apr 1 06:52:18 2026 GMT
Subject: CN=69c38623-1457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d9:65:b3:31:60:b8:b6:5a:95:31:f8:9e:b4:
79:84:d2:2e:5e:6b:18:19:4c:c1:61:e6:a5:d0:b2:
51:c5:73:78:58:e1:e1:cf:4f:6a:63:b8:b7:90:91:
08:d1:0f:9e:37:03:14:47:5d:06:31:e5:f4:67:d2:
c8:65:ec:ec:c9:82:9c:ee:2b:70:f4:9c:62:3d:61:
33:66:65:e5:4e:82:ca:0c:d2:1d:dc:6d:44:cd:87:
4a:b2:03:2e:43:ad:ed:fa:5f:9b:87:70:c2:f8:97:
74:7f:8d:12:ba:fa:a5:dc:50:6f:f8:94:81:ab:ef:
1d:19:5d:6b:81:c6:27:33:a1:c4:0a:ef:cb:f7:f5:
bb:4c:6c:c6:53:31:5a:25:c7:3d:c8:a3:e1:ab:03:
19:b7:b0:cf:f7:87:4f:a4:6e:e2:6a:b0:1f:30:58:
37:c6:5e:b2:e7:d3:5c:f8:a9:2b:ca:71:0a:1d:20:
9e:f9:a2:89:6a:2a:31:4f:19:58:00:18:1c:4c:52:
cb:04:fa:30:38:e3:98:53:12:9a:52:72:fc:f4:6d:
bd:32:c4:fb:be:68:29:04:5e:8f:15:60:55:59:2b:
7d:07:14:88:a2:30:9e:8a:0c:a7:11:70:95:59:48:
48:a6:39:4f:4c:a3:db:23:90:86:58:5e:11:a0:df:
cf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:80:1F:8F:18:9B:0B:50:2F:3C:58:83:3E:4D:35:84:C9:AD:D8:5E
X509v3 Authority Key Identifier:
keyid:36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:25:5d:4f:f8:e9:42:ac:06:1e:58:76:b0:cd:3b:41:9f:4e:
75:79:3e:bc:53:d2:f4:ba:4e:b2:0a:ec:fd:ff:f0:f6:de:86:
7c:36:b5:37:69:9b:5e:7f:e8:28:7c:aa:62:a2:8c:9d:07:42:
9e:d0:3a:0b:21:99:1c:80:5e:f5:32:c9:9d:26:ab:7b:48:cd:
a5:8a:de:67:85:66:33:0f:28:d2:2e:59:35:bc:dc:ab:56:d8:
f2:73:26:18:f5:6e:9c:4c:54:70:cb:b8:61:30:78:3a:5c:66:
67:9f:ca:52:f8:cd:23:d6:03:f5:2b:b8:be:b7:40:d9:14:34:
7f:e6:75:1b:21:a7:b7:6b:c4:1f:03:eb:12:d5:7a:3f:1f:06:
00:e4:2e:9a:36:75:08:7f:89:44:f2:8e:ba:44:69:8f:18:9c:
b5:88:44:e9:2f:23:d5:e9:55:5f:34:68:41:ae:73:9a:9d:79:
2f:89:33:70:67:fa:e9:d9:fd:71:19:19:24:88:db:66:4f:fe:
2d:28:4c:05:b9:05:02:9e:a6:19:82:21:f5:72:16:aa:18:c5:
b3:f0:22:25:ff:53:11:96:2f:5b:7c:77:ba:45:ea:4d:6b:32:
94:54:8d:7b:04:96:61:93:bd:a9:b6:a5:19:10:6a:19:62:8f:
c5:c0:50:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzY1MTUxMTAvBgNVBAUTKDM2REI0NEQ0QzE1OTg4NjczODIxNUE1NjEwQjExMEMy
NDQ4NkNBNTYwHhcNMjYwMzI1MDY1MjE4WhcNMjYwNDAxMDY1MjE4WjAYMRYwFAYD
VQQDEw02OWMzODYyMy0xNDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApNllszFguLZalTH4nrR5hNIuXmsYGUzBYeal0LJRxXN4WOHhz09qY7i3kJEI
0Q+eNwMUR10GMeX0Z9LIZezsyYKc7itw9JxiPWEzZmXlToLKDNId3G1EzYdKsgMu
Q63t+l+bh3DC+Jd0f40Suvql3FBv+JSBq+8dGV1rgcYnM6HECu/L9/W7TGzGUzFa
Jcc9yKPhqwMZt7DP94dPpG7iarAfMFg3xl6y59Nc+KkrynEKHSCe+aKJaioxTxlY
ABgcTFLLBPowOOOYUxKaUnL89G29MsT7vmgpBF6PFWBVWSt9BxSIojCeigynEXCV
WUhIpjlPTKPbI5CGWF4RoN/PUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMCAH48Y
mwtQLzxYgz5NNYTJrdheMB8GA1UdIwQYMBaAFDbbRNTBWYhnOCFaVhCxEMJEhspW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjUxNS84NEM0Njc0QTYw
QzExMUYwOEJENUI4MkVDNEY5QUUwMi9OdHRFMU1GWmlHYzRJVnBXRUxFUXdrU0d5
bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL050dEUxTUZaaUdjNElWcFdFTEVRd2tTR3lsWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjUxNS84NEM0Njc0QTYwQzExMUYwOEJENUI4MkVDNEY5QUUwMi9OdHRFMU1GWmlH
YzRJVnBXRUxFUXdrU0d5bFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiCVdT/jpQqwGHlh2sM07QZ9OdXk+vFPS9LpOsgrs/f/w9t6GfDa1N2mbXn/o
KHyqYqKMnQdCntA6CyGZHIBe9TLJnSare0jNpYreZ4VmMw8o0i5ZNbzcq1bY8nMm
GPVunExUcMu4YTB4OlxmZ5/KUvjNI9YD9Su4vrdA2RQ0f+Z1GyGnt2vEHwPrEtV6
Px8GAOQumjZ1CH+JRPKOukRpjxictYhE6S8j1elVXzRoQa5zmp15L4kzcGf66dn9
cRkZJIjbZk/+LShMBbkFAp6mGYIh9XIWqhjFs/AiJf9TEZYvW3x3ukXqTWsylFSN
ewSWYZO9qbalGRBqGWKPxcBQ0Q==
-----END CERTIFICATE-----
Generated at Fri Mar 27 06:21:08 2026 by rpki-client