
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft
File: NctCHFV3F3WBziSzai9syTGEYFI.mft (raw, json)
Hash identifier: 7oSoTxYGazKqNTH9CShdSZ7A4CrMzaIkE9bFU/Oeb+o=
Subject key identifier: 3C:0B:F6:01:75:48:B5:0D:CB:74:A4:EE:94:9F:CF:24:25:2C:20:0C
Authority key identifier: 35:CB:42:1C:55:77:17:75:81:CE:24:B3:6A:2F:6C:C9:31:84:60:52
Certificate issuer: /CN=A91CA3CD/serialNumber=35CB421C5577177581CE24B36A2F6CC931846052
Certificate serial: 01A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft
Manifest number: 01A1
Signing time: Thu 19 Feb 2026 02:44:48 +0000
Manifest this update: Thu 19 Feb 2026 02:44:48 +0000
Manifest next update: Thu 26 Feb 2026 02:44:48 +0000
Files and hashes: 1: NctCHFV3F3WBziSzai9syTGEYFI.crl (hash: eqpQK43SF6eoe5S2i+5/Vxo6yRvOwMo5k2L3mBEHXh0=)
2: F5121FB090CF11EE8036815AC4F9AE02.roa (hash: cuDY334MkIVtRBq3o3ujGRQ6jR/z000CC0KgPqw5K+Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.crl
rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:44:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA3CD, serialNumber=35CB421C5577177581CE24B36A2F6CC931846052
Validity
Not Before: Feb 19 02:44:48 2026 GMT
Not After : Feb 26 02:44:48 2026 GMT
Subject: CN=69967920-331f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ef:37:1d:c8:af:3e:0c:6b:d6:4d:1b:c8:5f:
92:db:02:57:97:f2:fc:15:6f:f7:70:b9:fe:9f:34:
a5:91:a9:cf:53:bc:0c:aa:32:b8:35:81:51:61:49:
ed:36:8c:ab:74:15:2c:cd:5e:fe:11:13:df:5d:32:
0d:fe:8d:f4:8a:de:e0:7d:41:4d:da:31:54:5e:19:
75:78:4c:43:fb:f0:0b:ee:32:e2:53:1e:4f:54:57:
03:15:df:fe:84:e8:6a:fc:ff:d3:67:78:30:d1:da:
e5:36:ba:26:be:e9:c7:05:81:e2:c1:d2:57:91:c3:
cc:dc:c9:ec:98:e9:4d:d7:fa:86:61:16:f8:9f:44:
76:31:b7:79:80:bd:a0:89:5e:83:3b:76:d8:8c:87:
ca:cd:2b:21:6e:d5:e0:d0:4b:ad:9c:40:9b:8f:a7:
be:6c:1b:15:be:dc:80:be:53:6c:91:48:4a:d8:ca:
38:83:ac:43:7f:2a:f9:75:35:24:5c:35:48:77:da:
20:f5:7e:e9:d6:5e:33:ea:af:6e:0a:b7:60:68:ab:
bd:c8:d8:23:54:ca:d4:c2:4d:f4:54:c4:18:71:be:
83:ba:e8:3e:2b:92:c3:32:1d:d9:e0:6e:34:15:e3:
97:b4:37:b4:88:24:22:3c:1d:e6:0c:d4:63:03:96:
8d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0B:F6:01:75:48:B5:0D:CB:74:A4:EE:94:9F:CF:24:25:2C:20:0C
X509v3 Authority Key Identifier:
keyid:35:CB:42:1C:55:77:17:75:81:CE:24:B3:6A:2F:6C:C9:31:84:60:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b2:4b:6f:ed:75:95:24:b2:d7:33:df:c3:91:42:b5:e0:f6:
40:eb:72:16:7f:95:f1:0e:02:36:2c:88:a8:a3:01:f5:e3:2b:
96:2d:c0:e5:1b:72:a8:53:07:59:92:76:61:70:a9:c6:a3:f3:
39:9d:73:fd:5e:af:6c:c9:e5:01:e8:1b:ad:1b:70:d0:38:0e:
c5:85:9c:42:f1:74:4d:66:0f:cf:e4:79:d7:e0:f5:ee:d9:e9:
c9:6b:c3:ae:8e:73:5b:bc:8d:ee:0d:51:81:17:cb:ca:2c:07:
cc:06:3d:b1:5a:50:cc:5e:9c:b7:27:af:24:ca:2b:f3:3d:b0:
c3:33:0d:97:c8:65:17:42:f4:76:fe:77:10:89:ed:82:28:a6:
a2:74:f1:78:e0:36:d9:e3:89:a3:fb:c6:fa:f9:69:51:2e:f6:
83:88:a6:79:19:22:be:6f:cd:ea:92:5c:78:76:b2:71:54:48:
10:d6:a5:56:86:94:3f:21:07:3a:bd:83:d2:dd:de:eb:2f:2b:
cb:a2:ba:4f:3a:6c:d7:6f:5e:ea:6d:9f:54:8e:a8:c2:10:29:
6d:83:07:a0:a0:10:dd:5c:9d:82:e2:87:8c:4a:cc:14:10:34:
75:ec:56:f3:83:6b:71:14:e0:d6:fb:b8:ef:0d:3e:da:4e:91:
ae:55:8f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:01:28 2026 by rpki-client