
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
File: nTQUKDsie49RLzBfKs20PN6eTRI.mft (raw, json)
Hash identifier: RyUpCy5i/TVexfd/V0fSX2YLt2l761mPhutz2V0ZDkE=
Subject key identifier: 38:F4:F5:58:BE:85:F9:1D:13:7F:A2:C8:1E:F5:68:FC:77:61:69:58
Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12
Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
Certificate serial: 0258
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
Manifest number: 0219
Signing time: Fri 07 Aug 2026 03:06:38 +0000
Manifest this update: Fri 07 Aug 2026 03:06:38 +0000
Manifest next update: Fri 14 Aug 2026 03:06:38 +0000
Files and hashes: 1: nTQUKDsie49RLzBfKs20PN6eTRI.crl (hash: kCcUxIiPM5falp8qbIIq/NWZD0LFlXB6p6rtqUCsyEU=)
2: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (hash: RuIzPpPmU5SYBxbzVmTPm1exsa1irL+SD8QrPzFj6WU=)
3: CA364B681A1711F0A1D93523C4F9AE02.roa (hash: VMXxFIYcOcmwdzE0TfKotJbGv4ASOkRQEsgw2BaIwTw=)
4: C75B642268F211EFB7A6A06EC4F9AE02.roa (hash: cMO5zU9AD/RoFLcnPT+DXNczqdbBJpb9yT+lZHAEick=)
5: EC985F92AD6D11EE83DA6253C4F9AE02.roa (hash: BmXwbaUB2PnwCtWWwqTCrL/Z4ZUCXb6in34aW4SAhII=)
6: 908E69B20D4311F0B83AB36BC4F9AE02.roa (hash: 0rCihLa1R/JwK4jlGINRooaKzW7UBmX+YQfpTQsJlgY=)
7: 31C9441E68ED11F0BA447B41C4F9AE02.roa (hash: Tw/mmccci9TsCg4wjjeIfCh0v/cTONBZG05kzKfAujc=)
8: 551036FCF1CA11EFA1495230C4F9AE02.roa (hash: ph9mjxQXcLl4fEECl4pEGWMTp7mLbB/lR7kFkW96rzY=)
9: 3C880EBABEEF11EF9178186BC4F9AE02.roa (hash: gDBNV8FCQoQRlF4+Z0of3x2gK+wLXaHl7XFSFbaKadM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl
rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 14 Aug 2026 03:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 600 (0x258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
Validity
Not Before: Aug 7 03:06:38 2026 GMT
Not After : Aug 14 03:06:38 2026 GMT
Subject: CN=6a754bbe-e641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:62:31:43:1d:05:9f:2d:fc:24:e9:c4:99:1c:
42:45:4f:82:67:a8:ac:17:28:59:87:ff:1c:4f:46:
e9:f1:51:d7:40:da:a8:76:2f:5b:4a:83:c0:49:4b:
51:a0:9f:96:20:81:2a:4b:b5:62:a9:57:82:db:66:
0e:eb:87:18:59:a0:8d:5d:86:51:45:de:03:88:c5:
49:c2:21:5a:1e:bd:0c:a3:03:39:d1:f9:75:8f:7a:
d6:c0:7f:c0:ce:ce:cf:77:ba:ef:d0:7d:fe:5b:cb:
10:cf:96:bd:2d:b0:3c:37:ce:08:2e:10:1c:77:fa:
0b:37:36:0b:2f:f2:7e:52:3a:84:12:c9:e9:06:45:
79:07:f1:f2:c8:19:0e:3a:63:26:29:89:2c:ac:58:
c6:d4:9e:c8:71:a5:77:a0:3b:b5:cb:33:5e:43:b7:
13:02:2b:22:f9:b5:22:de:30:53:48:3d:06:49:8e:
ca:b8:88:34:9b:79:6a:48:34:2e:61:e2:53:00:fe:
69:e1:58:ee:7b:c2:ea:df:af:2c:0f:79:66:8e:38:
fa:3f:65:78:2f:21:36:42:12:4f:a0:59:c5:f3:eb:
fa:62:79:1e:cc:13:eb:7c:c7:3a:89:0c:4e:ed:d8:
96:99:a5:7f:3a:58:36:d6:5e:1d:7f:cd:d3:36:8c:
7c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F4:F5:58:BE:85:F9:1D:13:7F:A2:C8:1E:F5:68:FC:77:61:69:58
X509v3 Authority Key Identifier:
keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:da:58:fe:09:98:89:af:a9:4f:1d:05:62:7e:4f:84:28:f7:
98:af:db:eb:92:5a:5c:38:60:7e:cf:4c:5f:d7:44:b6:18:36:
b1:98:a2:aa:a5:05:00:a5:0a:a1:af:40:a0:41:3c:3c:5b:5f:
9f:51:c2:20:d0:35:4f:26:4d:46:cf:f7:7e:da:a8:53:d0:e5:
a4:7d:17:98:10:0d:66:36:6a:f5:06:22:0b:93:8c:94:38:4f:
04:41:b6:47:1d:c5:2a:72:f8:87:91:e9:13:17:7d:22:d5:05:
cb:d6:6d:e3:05:d8:69:bc:e6:50:12:8d:f3:30:fe:2d:8c:a7:
00:a3:84:c3:74:74:1f:cc:6e:d7:cb:15:8a:12:68:27:9d:9f:
09:b9:b0:b3:08:dc:56:65:e9:a7:6b:28:cc:d5:fd:2a:97:ad:
44:17:10:c8:5f:45:08:f2:c5:c2:90:21:21:df:80:cd:7c:5e:
a3:2b:d6:49:20:3f:20:d8:0a:d0:72:83:a6:07:2a:10:a7:d9:
13:14:dc:ac:b9:35:b0:c8:76:15:e9:cb:05:ba:b3:64:5c:97:
76:63:32:85:93:63:ef:89:0e:08:ba:81:74:9d:7e:5c:92:3c:
3a:00:e0:45:b1:b9:83:67:ee:63:e1:5a:52:60:3b:f6:80:51:
95:e9:cb:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1RjJBQ0RCNDND
REU5RTREMTIwHhcNMjYwODA3MDMwNjM4WhcNMjYwODE0MDMwNjM4WjAYMRYwFAYD
VQQDEw02YTc1NGJiZS1lNjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAgmIxQx0Fny38JOnEmRxCRU+CZ6isFyhZh/8cT0bp8VHXQNqodi9bSoPASUtR
oJ+WIIEqS7ViqVeC22YO64cYWaCNXYZRRd4DiMVJwiFaHr0MowM50fl1j3rWwH/A
zs7Pd7rv0H3+W8sQz5a9LbA8N84ILhAcd/oLNzYLL/J+UjqEEsnpBkV5B/HyyBkO
OmMmKYksrFjG1J7IcaV3oDu1yzNeQ7cTAisi+bUi3jBTSD0GSY7KuIg0m3lqSDQu
YeJTAP5p4Vjue8Lq368sD3lmjjj6P2V4LyE2QhJPoFnF8+v6YnkezBPrfMc6iQxO
7diWmaV/Olg21l4df83TNox8/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDj09Vi+
hfkdE3+iyB71aPx3YWlYMB8GA1UdIwQYMBaAFJ00FCg7InuPUS8wXyrNtDzenk0S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUQyQy8wMDM3M0M2QzlC
QkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0OVJMekJmS3MyMFBONmVU
UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRSSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RUQyQy8wMDM3M0M2QzlCQkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0
OVJMekJmS3MyMFBONmVUUkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbNpY/gmYia+pTx0FYn5PhCj3mK/b65JaXDhgfs9MX9dEthg2sZiiqqUFAKUK
oa9AoEE8PFtfn1HCINA1TyZNRs/3ftqoU9DlpH0XmBANZjZq9QYiC5OMlDhPBEG2
Rx3FKnL4h5HpExd9ItUFy9Zt4wXYabzmUBKN8zD+LYynAKOEw3R0H8xu18sVihJo
J52fCbmwswjcVmXpp2sozNX9KpetRBcQyF9FCPLFwpAhId+AzXxeoyvWSSA/INgK
0HKDpgcqEKfZExTcrLk1sMh2FenLBbqzZFyXdmMyhZNj74kOCLqBdJ1+XJI8OgDg
RbG5g2fuY+FaUmA79oBRlenLIA==
-----END CERTIFICATE-----
Generated at Sat Aug 8 10:29:02 2026 by rpki-client