
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
File: Nocz_cVgxeuJ5FJA331AOcsvYQg.mft (raw, json)
Hash identifier: U4JcL+JPdhC+BwMZBXyYXNInh6OTr/D5iXJ7OBOf670=
Subject key identifier: 54:5C:74:37:E9:B4:D5:0A:F4:4E:98:21:71:74:50:95:B9:82:95:BA
Authority key identifier: 36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08
Certificate issuer: /CN=A91C97F5/serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108
Certificate serial: 02E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
Manifest number: 02D4
Signing time: Wed 25 Mar 2026 01:00:30 +0000
Manifest this update: Wed 25 Mar 2026 01:00:30 +0000
Manifest next update: Wed 01 Apr 2026 01:00:30 +0000
Files and hashes: 1: Nocz_cVgxeuJ5FJA331AOcsvYQg.crl (hash: +HubL9FaEkf1IOWNGsfPEdof0p3SPYxZTA2kq9HpsyU=)
2: 48B639C8B85E11F0B0F0B01CC4F9AE02.roa (hash: pcUI164QP94dET6vxGqZiMWs2E97pOagQxpOZq2263A=)
3: 020D49E0283211ED9E29FA70C4F9AE02.roa (hash: bnjR0+NKXKAmWxRc9D3E4vCO8glI5TIRHVBCY29e/KE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl
rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 736 (0x2e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C97F5, serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108
Validity
Not Before: Mar 25 01:00:30 2026 GMT
Not After : Apr 1 01:00:30 2026 GMT
Subject: CN=69c333ae-4aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:ae:30:df:c9:75:16:94:8c:dd:40:8f:f4:
b2:59:02:62:f2:9e:1c:f7:27:06:98:d3:3a:2c:00:
c4:8f:70:9e:42:99:da:b1:e8:3c:b3:fd:4b:9b:d0:
24:58:15:f7:ba:07:f3:f6:71:45:9d:ee:68:b6:97:
20:a8:e3:2d:64:ce:95:55:ef:c5:1c:60:b7:3c:59:
6b:f7:6d:19:78:01:a9:f5:8f:27:d8:e1:25:9c:dd:
aa:5b:9d:fc:da:f5:be:47:59:70:74:87:1d:5e:ac:
fc:63:e6:06:dd:51:9f:4b:cb:3b:c2:91:d4:98:3c:
f1:b4:bf:90:47:19:f6:06:9d:32:47:ad:4b:d9:d1:
b4:e3:82:0f:62:fe:d0:15:32:6e:8a:99:74:b5:9b:
1b:de:7a:08:67:03:23:d1:2c:5d:7f:ae:42:b6:6f:
a5:ec:41:1d:cc:22:d4:9f:76:1d:4c:79:8b:d9:d7:
28:87:44:00:62:76:46:f7:53:5e:65:07:cb:9e:8b:
49:f7:1b:84:d3:be:fe:cc:a7:92:74:fc:87:fd:3b:
b4:c5:29:17:03:39:4f:90:f7:91:9f:69:c0:e4:0d:
6b:4c:6f:09:83:a6:57:fc:98:ef:ca:f2:92:4e:1e:
32:c7:10:30:85:3b:26:f1:cc:05:0b:91:02:fb:82:
36:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5C:74:37:E9:B4:D5:0A:F4:4E:98:21:71:74:50:95:B9:82:95:BA
X509v3 Authority Key Identifier:
keyid:36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:ab:e1:42:d2:d1:de:aa:d7:59:4d:24:e3:b6:47:da:c0:20:
57:52:8f:70:ff:71:c2:fd:0a:45:38:8f:51:d1:42:0c:b7:c7:
99:59:ab:fd:0c:c3:36:d6:09:3f:bf:39:4c:65:ba:5d:b2:e0:
a7:86:97:81:e7:97:b0:9c:b9:44:fc:5d:19:2b:8d:10:51:4a:
79:78:f2:7f:e2:f8:dd:a2:78:b4:ea:44:2e:32:ec:2c:3b:98:
93:5f:53:6f:9e:9b:a1:78:59:fe:77:1d:66:b3:0b:06:2c:03:
36:48:df:a8:9c:ea:e0:5f:77:02:15:21:89:3e:dc:44:18:9b:
5d:7b:42:68:23:e7:c9:1b:94:bd:59:c4:00:ee:89:e6:a8:2c:
01:6b:39:18:6d:1d:12:20:98:0c:9c:6d:df:1a:1c:5d:b7:0e:
c7:d1:14:22:95:87:12:d7:92:73:0e:20:20:03:55:3c:ff:c8:
32:01:96:10:e6:c9:30:66:4c:31:20:59:4f:91:4f:7b:1f:df:
d6:5a:37:f2:24:44:64:8e:d3:b4:d9:64:16:04:72:5e:1d:4e:
c2:de:c1:c6:f9:01:20:44:ca:b6:90:87:c5:ae:50:6a:99:e5:
9a:43:88:1b:b2:7a:ce:22:c7:32:4e:b4:68:31:2e:09:c6:14:
20:cf:f1:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzk3RjUxMTAvBgNVBAUTKDM2ODczM0ZEQzU2MEM1RUI4OUU0NTI0MERGN0Q0MDM5
Q0IyRjYxMDgwHhcNMjYwMzI1MDEwMDMwWhcNMjYwNDAxMDEwMDMwWjAYMRYwFAYD
VQQDEw02OWMzMzNhZS00YWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvSeuMN/JdRaUjN1Aj/SyWQJi8p4c9ycGmNM6LADEj3CeQpnaseg8s/1Lm9Ak
WBX3ugfz9nFFne5otpcgqOMtZM6VVe/FHGC3PFlr920ZeAGp9Y8n2OElnN2qW538
2vW+R1lwdIcdXqz8Y+YG3VGfS8s7wpHUmDzxtL+QRxn2Bp0yR61L2dG044IPYv7Q
FTJuipl0tZsb3noIZwMj0Sxdf65Ctm+l7EEdzCLUn3YdTHmL2dcoh0QAYnZG91Ne
ZQfLnotJ9xuE077+zKeSdPyH/Tu0xSkXAzlPkPeRn2nA5A1rTG8Jg6ZX/JjvyvKS
Th4yxxAwhTsm8cwFC5EC+4I2rwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFRcdDfp
tNUK9E6YIXF0UJW5gpW6MB8GA1UdIwQYMBaAFDaHM/3FYMXrieRSQN99QDnLL2EI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTdGNS85MTcwQzQyQTI3
NDQxMUVEOEMxMzlCNTFDNEY5QUUwMi9Ob2N6X2NWZ3hldUo1RkpBMzMxQU9jc3ZZ
UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05vY3pfY1ZneGV1SjVGSkEzMzFBT2NzdllRZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTdGNS85MTcwQzQyQTI3NDQxMUVEOEMxMzlCNTFDNEY5QUUwMi9Ob2N6X2NWZ3hl
dUo1RkpBMzMxQU9jc3ZZUWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANqvhQtLR3qrXWU0k47ZH2sAgV1KPcP9xwv0KRTiPUdFCDLfHmVmr/QzDNtYJ
P785TGW6XbLgp4aXgeeXsJy5RPxdGSuNEFFKeXjyf+L43aJ4tOpELjLsLDuYk19T
b56boXhZ/ncdZrMLBiwDNkjfqJzq4F93AhUhiT7cRBibXXtCaCPnyRuUvVnEAO6J
5qgsAWs5GG0dEiCYDJxt3xocXbcOx9EUIpWHEteScw4gIANVPP/IMgGWEObJMGZM
MSBZT5FPex/f1lo38iREZI7TtNlkFgRyXh1Owt7BxvkBIETKtpCHxa5QapnlmkOI
G7J6ziLHMk60aDEuCcYUIM/xKg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:43:05 2026 by rpki-client