
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft
File: NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft (raw, json)
Hash identifier: pkZogpkWfkrclfTPFFRW7r1vCibmM3sOfaRPHkv0EKQ=
Subject key identifier: 10:89:71:83:A1:19:71:71:14:82:1E:27:79:7C:36:77:43:FC:95:ED
Authority key identifier: 34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46
Certificate issuer: /CN=A911C90F/serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46
Certificate serial: 7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft
Manifest number: 79
Signing time: Thu 19 Feb 2026 06:04:29 +0000
Manifest this update: Thu 19 Feb 2026 06:04:29 +0000
Manifest next update: Thu 26 Feb 2026 06:04:29 +0000
Files and hashes: 1: NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl (hash: MYqU+IIdviCPWFC2KVZpR/k0F8EcQOvlP/o1OpMhsS4=)
2: CB4ACDBC54AF11F0999FAA3EC4F9AE02.roa (hash: YI5KTewQHT3HCq7P4Cu8YAVGa4eC3SI/cxqK9ohfnmY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl
rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C90F, serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46
Validity
Not Before: Feb 19 06:04:29 2026 GMT
Not After : Feb 26 06:04:29 2026 GMT
Subject: CN=6996a7ed-161d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9b:24:f5:47:2a:d0:ab:2b:1d:40:33:6c:29:
1a:d8:74:a6:76:2d:6d:6b:d4:46:50:07:a3:91:66:
01:22:0f:95:03:f9:34:eb:fd:80:80:e6:69:51:2b:
c2:ef:5b:f7:6d:51:01:cc:fd:32:c6:02:dc:52:29:
27:99:a3:7b:64:8c:e4:68:02:42:05:4a:4c:be:0e:
c2:b6:2b:6c:b2:0a:ff:e8:6c:2b:78:c2:be:20:80:
88:1b:b7:fd:57:b3:85:ed:70:fc:df:c3:93:9d:c6:
bf:31:9e:51:57:db:64:5f:93:3a:e1:4e:dc:1d:2b:
43:fc:56:b9:3f:6b:ff:cf:57:6c:a1:c0:51:e1:61:
bc:14:32:53:10:24:55:ef:8a:32:a2:c2:19:b3:54:
18:83:a1:a1:bf:4e:8a:fc:cc:f5:7c:0d:bf:e0:59:
05:56:6b:99:af:28:93:4f:73:81:14:61:bd:26:fc:
98:76:d5:1b:d6:b1:2d:54:28:8d:d7:63:c8:ae:41:
6d:9c:a7:82:6d:f3:1f:d9:ca:1c:1e:23:61:46:45:
f4:1d:84:39:a2:4e:83:b4:3e:71:9c:ab:6f:e6:71:
73:dd:63:1c:f2:0f:9f:44:67:0d:45:85:4d:2c:c0:
9a:cc:ac:c8:ab:b8:d1:d9:3b:54:94:b2:67:03:8d:
93:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:89:71:83:A1:19:71:71:14:82:1E:27:79:7C:36:77:43:FC:95:ED
X509v3 Authority Key Identifier:
keyid:34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:ff:cf:c0:02:53:5f:aa:c0:5a:cc:2a:f0:9b:81:de:dc:3c:
a2:d0:db:86:59:5a:8d:0f:38:a8:95:8b:c3:da:93:2f:d0:e5:
16:ab:c2:0d:08:9f:c6:59:51:92:69:14:4d:06:c7:37:08:5a:
92:f1:94:e7:74:79:47:01:ed:0d:15:44:92:86:73:9d:ef:e9:
5e:93:6b:7d:c5:78:a0:5f:7d:9b:8c:69:81:9e:59:fb:8c:ee:
ab:06:61:4b:6c:15:6c:9f:f3:62:dc:31:8d:9c:81:f0:01:a8:
e8:69:e4:56:0e:b3:34:d5:bc:8a:51:6c:16:e6:28:a6:7e:cc:
d6:3e:79:ac:d2:88:e3:17:9d:d8:8c:0a:f5:2b:db:2f:f7:db:
48:ef:27:53:e6:cf:56:06:00:60:3d:6e:41:76:ec:8f:fd:c2:
02:c2:4d:16:4a:03:3d:c1:f5:2c:3f:a5:0a:92:9f:03:b1:3b:
c3:02:0f:f0:14:66:f6:65:47:95:5f:5c:b3:81:c7:0f:b6:d0:
bf:4e:04:60:71:ac:0f:8a:50:cf:aa:b1:05:88:73:ff:e9:ec:
85:9e:da:ac:d4:08:a7:a8:b9:db:cc:07:89:d1:82:f1:af:49:
3f:da:69:94:75:84:a0:a8:32:ec:71:a8:85:b1:60:43:47:03:
1e:48:9c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:50 2026 by rpki-client