
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft
File: NHTCU5hhEAr9ljoWPIAtAmT47H0.mft (raw, json)
Hash identifier: SH7Ge3keHczE1UqBmKiHBpPpHCz54rWhMo38iJ4X9U0=
Subject key identifier: EB:94:13:C9:4F:3A:6B:E4:57:70:B4:AC:2E:2B:44:A6:79:8E:50:3D
Authority key identifier: 34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D
Certificate issuer: /CN=A91D63AF/serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D
Certificate serial: 01F2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft
Manifest number: 01E4
Signing time: Thu 23 Jul 2026 04:57:10 +0000
Manifest this update: Thu 23 Jul 2026 04:57:10 +0000
Manifest next update: Thu 30 Jul 2026 04:57:10 +0000
Files and hashes: 1: NHTCU5hhEAr9ljoWPIAtAmT47H0.crl (hash: /jJe56mi2eZp6m7s1bkUQtXfXEgMG2zTxx/rh28Lz6E=)
2: 8C508DC055F711EFA5200828C4F9AE02.roa (hash: +vcgHqQaVF6a8tBeWlRZvq+SFdKItNicDBwJjhcEwPQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl
rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D63AF, serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D
Validity
Not Before: Jul 23 04:57:10 2026 GMT
Not After : Jul 30 04:57:10 2026 GMT
Subject: CN=6a619f26-0e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b4:be:ec:93:ba:64:95:27:d3:ad:d3:71:b5:
05:0e:67:a5:d3:f7:4f:14:8a:75:5d:44:42:41:79:
1d:58:fa:c8:5d:9d:10:98:fe:a3:8d:14:ea:3d:a7:
ab:0d:03:94:2c:aa:4e:b4:70:da:4f:3d:cb:f8:04:
eb:b7:58:bf:1f:16:a7:cc:0e:98:ea:9e:05:7d:4b:
9f:f3:22:cd:9f:43:d6:e0:3d:e0:57:6e:4a:83:4e:
3d:16:b5:81:ca:63:1b:b3:b7:35:da:f3:3b:08:ab:
06:e2:de:75:3d:6c:f9:46:86:14:3f:7b:87:8e:d4:
51:91:3a:e5:22:22:d3:1e:91:93:7d:d0:52:ef:b8:
e6:44:30:a0:8f:1b:38:6b:7b:6b:6c:6f:c7:30:b6:
07:17:fd:82:6d:de:2e:9f:a0:8c:64:a2:be:c2:04:
e4:70:9b:e3:88:a2:87:78:4b:49:29:f5:64:dc:d9:
9f:81:eb:ad:ed:b8:a7:18:47:57:0b:6b:ca:1f:1d:
4c:d5:8d:73:8e:93:c6:2e:a0:b3:0a:e2:d8:0b:5e:
de:c2:4c:bb:99:ee:d2:d5:ef:db:96:e7:c5:10:97:
d0:ed:fb:50:d1:d2:ce:c6:ec:0f:f6:e8:c8:6b:9b:
11:b0:84:af:ca:37:99:a6:d3:fc:ff:6a:78:ff:61:
9e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:94:13:C9:4F:3A:6B:E4:57:70:B4:AC:2E:2B:44:A6:79:8E:50:3D
X509v3 Authority Key Identifier:
keyid:34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:38:9c:01:29:b6:88:d0:ea:63:37:a2:0b:52:1b:44:56:95:
1e:06:91:5d:00:10:aa:65:a2:86:74:19:21:46:95:7f:71:64:
0f:09:ae:51:bd:7f:e4:59:d3:0a:23:67:7c:c2:23:b2:5b:12:
9c:86:f3:35:44:cd:ee:2b:30:ac:a9:3a:7d:93:02:98:d8:79:
96:d8:8e:37:1d:f7:df:94:02:92:b7:40:47:33:d3:cd:08:fc:
ab:97:dc:51:a7:53:30:2e:45:69:0b:f6:ce:4e:6a:89:80:1c:
3b:b9:40:61:2b:e3:db:8d:ad:76:e3:41:24:c9:bb:81:68:14:
39:34:61:99:ed:37:7f:18:46:aa:38:d5:76:ce:fd:af:65:72:
74:fa:1b:01:7d:fb:8a:57:4f:13:dd:d9:ae:33:4d:be:d2:2a:
83:9d:61:c3:1d:1e:08:2e:d8:a6:4f:2c:fc:63:74:ef:6f:03:
2f:97:57:a2:8e:5a:ca:3f:07:3d:09:ee:f6:40:ee:f4:ac:49:
df:ab:48:ce:79:4b:54:7c:ae:03:9a:0d:1f:52:28:9e:1f:ac:
d2:9f:8d:86:af:45:be:e4:0a:1d:db:c9:17:f4:88:ee:5b:c5:
d9:60:e4:b5:3b:5a:87:65:50:24:42:98:11:ae:2a:8d:14:fa:
6b:48:fa:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:09:12 2026 by rpki-client