
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft
File: NDyCcTdhxY6CRQ2UqleWffm0bxU.mft (raw, json)
Hash identifier: Sni0onbt+Gt+BHvLDZHEjb4K7J32m27p7NaQ62nCzrI=
Subject key identifier: F3:80:B1:DF:3A:CA:50:6E:47:94:5A:84:80:75:BF:66:1A:4F:FD:43
Authority key identifier: 34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15
Certificate issuer: /CN=A91DE10F/serialNumber=343C82713761C58E82450D94AA57967DF9B46F15
Certificate serial: 18AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft
Manifest number: 18A1
Signing time: Tue 24 Mar 2026 16:23:27 +0000
Manifest this update: Tue 24 Mar 2026 16:23:27 +0000
Manifest next update: Tue 31 Mar 2026 16:23:27 +0000
Files and hashes: 1: NDyCcTdhxY6CRQ2UqleWffm0bxU.crl (hash: l6JWDiRwDSFz4bZv937KYLFAOw7oqpntNwO25K0Kt/M=)
2: 31AA8496B62811E7882B893BC4F9AE02.roa (hash: 6sLoFUeESrRwO2QcFsgOleUZ2lZsfKCDD+HCcQh7dNM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.crl
rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:23:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6317 (0x18ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE10F, serialNumber=343C82713761C58E82450D94AA57967DF9B46F15
Validity
Not Before: Mar 24 16:23:27 2026 GMT
Not After : Mar 31 16:23:27 2026 GMT
Subject: CN=69c2ba7f-e071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:98:f8:d3:68:51:2e:08:19:38:bd:1b:d4:66:
f1:d7:fa:7c:9d:4d:fa:69:69:57:6d:3c:09:21:06:
f4:46:a6:73:06:aa:7f:22:b5:76:b7:67:b7:0b:de:
88:61:37:92:43:4e:4f:a3:56:78:d1:81:11:a4:c0:
ff:ae:00:58:2c:eb:9e:63:09:39:fc:79:b5:cd:e0:
98:18:53:c1:ea:e8:39:9a:d1:c1:1b:e6:c1:07:61:
e3:06:6b:47:2f:96:2a:41:54:a0:d5:f4:3b:e1:95:
cc:b6:3d:8b:63:92:ad:d6:a4:ed:98:09:b0:8e:3b:
3c:95:ed:05:4a:45:fc:47:b9:c7:5e:2d:47:ac:81:
d6:e5:2d:9b:cf:d5:25:fd:f7:8f:b7:fd:76:b3:1f:
22:83:9f:ce:71:ac:32:c8:6e:86:80:5b:6b:7b:87:
02:7a:4c:14:bb:55:7d:c5:38:ef:6c:8c:c3:10:a0:
9a:bc:ac:44:da:3a:6f:f5:0f:d1:35:de:68:ab:bb:
7a:24:ed:00:ef:bd:14:dc:9f:98:ba:f0:34:8e:01:
f9:87:74:cf:ff:5d:b5:eb:b4:fd:da:3e:1e:94:f9:
90:ab:a2:89:49:a4:1a:52:52:6d:fd:9d:01:c0:76:
51:e4:f7:e3:4e:7a:94:fb:99:88:08:ca:82:54:57:
ec:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:80:B1:DF:3A:CA:50:6E:47:94:5A:84:80:75:BF:66:1A:4F:FD:43
X509v3 Authority Key Identifier:
keyid:34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:8f:78:c8:e4:79:33:27:2d:5c:f6:09:f3:98:5c:06:7e:e1:
b8:d6:f7:26:9e:d2:67:5e:00:e3:1c:c0:52:60:35:aa:dc:23:
75:d0:13:2f:42:92:86:b2:60:89:6c:c7:49:81:bc:8d:02:4c:
0d:6a:51:fa:38:dc:6a:15:35:a9:19:6d:56:48:78:6e:38:03:
7e:1b:0d:9d:f4:14:9d:32:7a:ff:62:b7:ec:66:07:16:e6:3a:
8c:38:a2:5f:6d:bd:0b:8d:a7:56:da:a9:1b:ec:90:b0:9b:13:
e1:05:e0:3c:df:3c:88:ca:00:b3:37:a2:69:0d:f3:cb:4b:0c:
e1:16:e1:09:c9:7b:47:19:03:e6:8b:1e:1e:43:71:5e:b4:ad:
20:a8:ef:17:cf:57:83:f8:07:14:cd:c2:f9:44:c3:29:f0:7b:
85:84:6d:13:c6:de:81:85:d3:21:5f:c9:c6:35:9a:da:6b:90:
43:88:b6:40:0d:b1:1f:00:6b:22:b0:d8:3d:4e:a5:cd:9a:45:
33:a3:7d:10:30:82:f8:50:bc:3d:38:9a:ef:85:87:6b:62:de:
06:bc:b6:e4:2d:cf:93:a3:bf:ce:d5:09:08:aa:5c:35:f6:70:
f7:07:8f:d2:17:33:bb:84:55:bc:3d:57:bd:18:69:13:48:0f:
1f:a2:df:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:08:47 2026 by rpki-client