
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
File: NcbYSDFsIdmTz25MBtYB3AXvxOE.mft (raw, json)
Hash identifier: vWCfOIkQasUw7Zf2DbNqx4jcP3VCkH8FvHjnzHsywi4=
Subject key identifier: 4F:5C:D4:A6:39:1A:70:A8:47:78:0A:B4:E1:80:1E:EE:88:22:62:93
Authority key identifier: 35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1
Certificate issuer: /CN=A91F473F/serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1
Certificate serial: 0217
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
Manifest number: 0211
Signing time: Mon 11 May 2026 02:58:59 +0000
Manifest this update: Mon 11 May 2026 02:58:58 +0000
Manifest next update: Mon 18 May 2026 02:58:58 +0000
Files and hashes: 1: NcbYSDFsIdmTz25MBtYB3AXvxOE.crl (hash: oKoV0IxMhX5dDmQXCM/THf7eZyna+Zc8MFGU2zW4USw=)
2: C416FBB02D6F11EEAC755B42C4F9AE02.roa (hash: 7y4oXNer6WsBPlefm0aDOGxXKn0I4ZDBbQhKmEfxFC8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl
rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:58:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F473F, serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1
Validity
Not Before: May 11 02:58:58 2026 GMT
Not After : May 18 02:58:58 2026 GMT
Subject: CN=6a0145f3-498e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:79:6f:46:b8:83:80:7e:88:1b:d3:c0:e3:86:
9f:c8:9f:bc:5b:69:c2:5f:92:76:46:ec:ad:61:4d:
f1:df:43:b2:5c:f6:76:ca:48:5f:82:b6:6e:7f:28:
61:86:8b:db:ad:03:59:a4:50:34:0c:7a:b2:a0:69:
c9:66:bc:57:62:d4:65:5b:e4:56:b2:32:5f:bb:e8:
75:78:02:f5:86:5f:24:16:28:23:d9:5c:ae:dd:79:
45:3c:94:01:b1:35:05:57:00:08:44:23:fb:b4:0f:
e7:58:64:1a:1a:c4:01:42:c0:bf:68:3d:f6:eb:16:
6c:0a:9b:aa:d2:5c:fa:7c:ab:bf:5f:5f:ad:40:cb:
aa:78:3d:3e:37:26:60:65:e7:4f:af:02:c2:b8:bf:
6f:c1:b5:3f:e4:a7:c5:39:45:65:b1:3e:8f:2d:2d:
69:04:89:a4:d6:93:ac:6e:a5:ca:01:44:20:bd:68:
32:6b:2d:fd:d0:6e:2b:b0:66:02:69:15:d3:ad:53:
1d:50:9e:59:dd:26:4f:5e:6f:8e:6d:18:64:8d:d5:
72:54:f3:40:cc:75:89:a4:f7:47:bb:58:2e:4d:0b:
23:5f:8f:55:fc:78:b6:db:73:03:4f:e7:80:dc:35:
ab:e3:d4:3b:bf:66:5d:bc:e1:8e:a8:52:a9:90:85:
c5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5C:D4:A6:39:1A:70:A8:47:78:0A:B4:E1:80:1E:EE:88:22:62:93
X509v3 Authority Key Identifier:
keyid:35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:1f:e3:f0:94:23:76:87:89:8d:2a:20:04:03:ab:4e:35:1f:
77:03:37:9c:53:c5:e7:ee:3c:fc:b3:c1:ac:5d:51:ee:47:a7:
0d:0e:32:8b:90:26:b3:e3:b3:26:f0:2a:5a:14:8d:65:62:49:
3f:9e:e4:f8:7f:9d:dc:0d:47:cf:2c:d5:a4:1d:22:6f:c2:55:
04:65:42:5b:34:3e:b8:89:45:11:79:ba:a5:d3:d0:0b:38:b1:
58:91:bd:3f:7e:cd:5f:b3:ad:b8:3c:bf:28:05:92:7d:6a:2d:
03:dd:52:2d:ca:1c:1f:60:1d:37:01:3d:c0:c2:fe:ea:b6:41:
e5:fe:bd:f0:08:3b:ca:09:8b:40:0e:d2:f0:70:d1:a7:e5:7a:
3d:9b:10:09:96:17:1e:f4:0c:e0:2e:24:0d:8f:4e:99:e4:64:
98:55:25:1a:28:eb:9e:98:cd:79:8c:59:0f:59:3a:a7:17:0c:
a4:5d:5b:64:ed:39:aa:e7:70:25:12:fc:88:fa:84:31:9d:47:
50:9f:92:c9:ad:43:24:83:41:a3:2a:a5:33:1e:2c:b9:33:79:
65:78:d2:c3:f7:4c:f8:a3:d6:e9:56:fc:01:e0:de:22:2d:a3:
a1:da:d5:c3:f9:ef:5b:10:ca:4e:d8:5b:a0:d2:10:37:ee:70:
f7:f4:b6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:15:49 2026 by rpki-client