
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft
File: NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft (raw, json)
Hash identifier: 7bGuCW82UxmjI0+tymHsY9zq1Hhr86E8c0jvmLHlmiY=
Subject key identifier: A4:46:12:2D:50:70:D1:C0:AE:A2:46:27:81:7C:A4:90:03:DE:F0:E4
Authority key identifier: 34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46
Certificate issuer: /CN=A911C90F/serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46
Certificate serial: F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft
Manifest number: F3
Signing time: Fri 09 Oct 2026 07:00:19 +0000
Manifest this update: Fri 09 Oct 2026 07:00:18 +0000
Manifest next update: Fri 16 Oct 2026 07:00:18 +0000
Files and hashes: 1: NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl (hash: dJApSjjdIiXs9WIiW9YyJMN9fJIfEc00r66sQ0haEQI=)
2: CB4ACDBC54AF11F0999FAA3EC4F9AE02.roa (hash: xgivwJxveenvIu97Bz+/FrcRoG+/apEQkUFco+CmFm0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl
rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C90F, serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46
Validity
Not Before: Oct 9 07:00:18 2026 GMT
Not After : Oct 16 07:00:18 2026 GMT
Subject: CN=6ac89102-c406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b8:ef:1d:76:4e:d5:88:fd:57:60:07:5a:d2:
36:4b:c5:8a:8e:d8:7c:6c:f7:7a:a4:e2:15:49:a8:
da:40:5a:30:b8:b6:89:bd:93:0d:91:36:e6:d9:fc:
82:fd:de:47:4c:3c:61:9a:a7:56:23:fa:93:8b:78:
e2:17:73:8c:90:95:e9:4b:22:d3:87:a3:7f:c0:2c:
d6:8c:b1:5a:0b:64:80:d6:43:9e:6b:b0:45:34:14:
cf:60:4d:1c:39:e8:00:0c:cb:52:40:e8:da:84:20:
eb:31:a3:24:39:ba:a8:a7:73:97:f2:8d:e4:3d:3b:
3f:1c:2f:76:4b:2f:ae:f6:74:56:2f:b8:1e:1b:90:
10:2e:fd:49:5a:10:56:3c:94:19:52:c6:d5:60:d7:
d9:8b:ce:36:ac:d6:a1:24:39:cb:b3:2a:2f:b7:be:
b2:c4:ee:5c:11:3c:6f:ee:c0:39:e1:3e:5b:05:0a:
ff:83:6c:b2:04:a5:60:02:3c:4d:1d:88:1b:ea:89:
e7:f7:49:7c:e5:ea:23:dc:60:b3:50:e8:6a:f7:5f:
4f:29:ac:6d:0f:06:e0:05:ce:53:08:a2:b6:79:d1:
0f:11:5b:56:bf:8d:b6:98:97:3a:9b:b4:9f:6e:c4:
7e:4f:9c:1a:50:ef:bb:b8:34:a0:cf:f6:22:38:9d:
35:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:46:12:2D:50:70:D1:C0:AE:A2:46:27:81:7C:A4:90:03:DE:F0:E4
X509v3 Authority Key Identifier:
keyid:34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:cd:2b:1c:35:e2:51:8b:0e:dc:a0:12:f8:ea:ba:7c:9d:d1:
89:9d:b9:10:90:85:9a:e3:c9:5b:b2:85:d4:60:84:9f:82:9b:
bc:88:b4:31:1d:3e:79:ee:79:f2:08:41:89:27:79:46:6a:ed:
ed:d2:2d:d6:e0:ed:9f:12:07:b2:dc:b6:20:4d:fc:a5:9b:96:
e8:d9:cb:84:7b:12:10:07:79:d0:c1:1a:52:23:e1:45:c6:e2:
ef:bc:46:2c:2c:81:79:bf:fb:7e:90:e2:ac:30:34:7d:21:cb:
14:06:1d:c5:e8:45:fc:d9:37:d6:b5:b6:6b:1d:8b:5b:b5:0c:
29:5d:b3:4d:95:0c:1a:b3:c8:b9:b8:bd:79:1c:8f:fa:38:2e:
43:38:a8:60:b1:2e:26:c2:04:21:ee:fc:79:d1:cd:a3:32:99:
54:ad:fc:16:56:d0:c4:6f:3f:cd:73:66:f7:34:46:e0:9f:4c:
d9:a4:20:ab:c0:f1:4d:89:ac:b1:ab:c7:9c:a5:8d:b7:0e:6b:
5e:26:8f:d0:20:8d:8d:c6:8e:ba:f9:8f:ec:a3:5c:e5:29:f1:
8c:c3:dd:67:6a:2d:8c:0c:a2:b0:ea:38:35:2c:8a:6c:1f:38:
7d:f9:87:00:8a:02:24:2d:10:9a:e6:3a:fa:13:8c:e2:46:2f:
4a:bb:bf:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:01:40 2026 by rpki-client