
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft
File: NctCHFV3F3WBziSzai9syTGEYFI.mft (raw, json)
Hash identifier: 2fC/cFYB+8b+dwpRaRuK1nfIOsvb/tHnq+8BVmeyqC8=
Subject key identifier: DE:43:FC:9B:54:A8:3A:6A:DD:89:CD:0A:31:84:4C:A0:45:0B:3B:38
Authority key identifier: 35:CB:42:1C:55:77:17:75:81:CE:24:B3:6A:2F:6C:C9:31:84:60:52
Certificate issuer: /CN=A91CA3CD/serialNumber=35CB421C5577177581CE24B36A2F6CC931846052
Certificate serial: 01FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft
Manifest number: 01F3
Signing time: Thu 23 Jul 2026 04:38:04 +0000
Manifest this update: Thu 23 Jul 2026 04:38:03 +0000
Manifest next update: Thu 30 Jul 2026 04:38:03 +0000
Files and hashes: 1: NctCHFV3F3WBziSzai9syTGEYFI.crl (hash: 0J9zMKsWvq4jYUe32mCRU0hs2dFKHIogaYBaE3eDLBI=)
2: F5121FB090CF11EE8036815AC4F9AE02.roa (hash: fAaur7LW2+pEge7BQCktlo8tOQuU2cmVWJ8Ioa474Lw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.crl
rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:38:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506 (0x1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA3CD, serialNumber=35CB421C5577177581CE24B36A2F6CC931846052
Validity
Not Before: Jul 23 04:38:03 2026 GMT
Not After : Jul 30 04:38:03 2026 GMT
Subject: CN=6a619aac-7117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b5:56:f7:c0:73:77:e9:45:4a:b7:a5:e7:63:
a1:c2:b9:ac:ae:3d:6b:65:18:9a:65:12:0c:64:f8:
3f:59:7a:ac:5f:0f:0e:9d:59:ec:ae:08:eb:cd:60:
af:aa:46:8a:e8:7a:a8:62:23:34:b2:6f:46:04:49:
b0:6a:b7:91:97:8b:da:f3:b5:f7:48:de:34:54:f0:
a3:d2:1e:31:60:de:8e:7a:10:96:cc:7b:bb:ab:e9:
70:c8:e3:78:10:c3:12:92:40:43:0c:61:0f:3a:cf:
32:d3:04:3f:4d:11:95:27:61:4b:64:0f:84:6f:ef:
1b:03:4e:c8:19:0e:fd:09:b8:51:d6:23:32:46:4a:
fb:ee:a7:69:3a:71:e9:09:42:5a:fd:ba:09:cc:4c:
3d:82:fa:ac:49:73:67:d0:cf:0c:84:cc:a8:ef:d5:
22:72:ed:ab:7a:a6:2a:55:63:bc:9d:42:f9:74:f5:
7f:b2:ad:44:7c:6c:32:c8:5d:2f:e5:0a:24:e4:ad:
aa:3f:e0:e3:f3:75:3c:f1:ba:c2:92:39:88:4d:d1:
80:39:29:ea:29:c9:30:63:d1:05:87:ae:d3:a5:f2:
46:1f:6f:4b:9d:0a:75:5b:e8:fb:cf:ed:e1:73:fa:
0b:aa:92:0b:2f:29:94:ae:b2:0c:9e:ec:5c:28:9c:
42:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:43:FC:9B:54:A8:3A:6A:DD:89:CD:0A:31:84:4C:A0:45:0B:3B:38
X509v3 Authority Key Identifier:
keyid:35:CB:42:1C:55:77:17:75:81:CE:24:B3:6A:2F:6C:C9:31:84:60:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:74:00:c1:5e:4b:dc:27:80:b1:9b:21:4f:4e:8a:24:5c:4f:
4f:af:33:d5:d2:c6:86:0c:a0:44:24:68:4e:36:92:b7:9d:3a:
a7:32:64:6e:c6:66:f7:f2:12:62:b8:ae:b0:7b:62:a3:75:64:
56:b3:a4:a1:4d:73:d1:66:56:bb:b9:a1:a3:54:39:34:bf:be:
fe:b6:37:a4:72:b4:01:5f:59:60:33:41:a3:64:49:77:a8:f0:
44:77:21:7c:9c:43:8d:a9:3c:08:45:44:a6:82:99:cc:fb:16:
04:2c:55:ff:ab:31:78:0d:88:15:c4:3f:9a:af:fc:a1:d1:97:
b2:96:b7:9c:b0:37:e2:3d:da:34:3d:da:29:94:d3:e0:b4:c1:
1b:b6:88:43:3c:a7:da:66:cd:4c:9f:b4:3f:2e:78:a7:dd:aa:
37:2e:c6:de:1b:1f:d1:74:4f:b8:e3:e3:a4:9c:8b:52:9f:a9:
79:30:60:68:ee:84:c7:f8:f7:9c:3d:0f:87:52:04:99:ef:01:
23:11:52:28:0b:db:1f:29:03:0f:6d:ab:38:6e:dc:92:52:b5:
f2:77:6f:a6:5c:47:82:c1:3b:f2:72:c7:2d:09:84:0e:7d:27:
5c:3e:77:5b:4e:9a:32:09:c0:12:22:33:6b:e2:11:64:21:2a:
35:df:33:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:57:44 2026 by rpki-client