
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
File: nTQUKDsie49RLzBfKs20PN6eTRI.mft (raw, json)
Hash identifier: g9UD24DjdtZ7PHEAQlko0iYTkMoekaXNurCwkj2wxCs=
Subject key identifier: DA:45:4F:98:A7:69:E3:F4:C0:E2:E3:3F:3F:A2:85:9F:ED:F8:6B:76
Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12
Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
Certificate serial: 0210
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
Manifest number: 01D1
Signing time: Tue 17 Mar 2026 03:05:17 +0000
Manifest this update: Tue 17 Mar 2026 03:05:16 +0000
Manifest next update: Tue 24 Mar 2026 03:05:16 +0000
Files and hashes: 1: nTQUKDsie49RLzBfKs20PN6eTRI.crl (hash: hmPcdbhrUWnb+qLpJ5HtsO/TRyqbW8m6+CBb5wTRdko=)
2: EC985F92AD6D11EE83DA6253C4F9AE02.roa (hash: BmXwbaUB2PnwCtWWwqTCrL/Z4ZUCXb6in34aW4SAhII=)
3: 908E69B20D4311F0B83AB36BC4F9AE02.roa (hash: 0rCihLa1R/JwK4jlGINRooaKzW7UBmX+YQfpTQsJlgY=)
4: 551036FCF1CA11EFA1495230C4F9AE02.roa (hash: ph9mjxQXcLl4fEECl4pEGWMTp7mLbB/lR7kFkW96rzY=)
5: 3C880EBABEEF11EF9178186BC4F9AE02.roa (hash: gDBNV8FCQoQRlF4+Z0of3x2gK+wLXaHl7XFSFbaKadM=)
6: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (hash: RuIzPpPmU5SYBxbzVmTPm1exsa1irL+SD8QrPzFj6WU=)
7: CA364B681A1711F0A1D93523C4F9AE02.roa (hash: VMXxFIYcOcmwdzE0TfKotJbGv4ASOkRQEsgw2BaIwTw=)
8: C75B642268F211EFB7A6A06EC4F9AE02.roa (hash: cMO5zU9AD/RoFLcnPT+DXNczqdbBJpb9yT+lZHAEick=)
9: 31C9441E68ED11F0BA447B41C4F9AE02.roa (hash: Tw/mmccci9TsCg4wjjeIfCh0v/cTONBZG05kzKfAujc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl
rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 24 Mar 2026 03:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528 (0x210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
Validity
Not Before: Mar 17 03:05:16 2026 GMT
Not After : Mar 24 03:05:16 2026 GMT
Subject: CN=69b8c4ed-02f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e1:d4:1c:bf:b0:59:ed:d7:0f:ce:32:f1:46:
78:ac:57:2c:8e:3e:06:49:cc:f8:1f:9d:3f:f3:a8:
30:c8:86:ce:61:50:07:47:6f:d9:c5:6d:e5:8d:bc:
a5:46:e8:eb:e8:1f:80:48:fb:48:e8:eb:10:09:39:
07:a6:96:f3:79:e5:d6:5d:d4:51:6c:1d:d4:8f:8d:
65:12:f1:8a:eb:a4:35:7a:44:7e:7b:11:d6:f5:1c:
51:e7:b6:69:16:40:91:43:21:67:8a:fe:14:f6:ce:
fb:5d:de:32:c2:2a:43:44:5d:6e:28:26:99:6e:52:
c0:cd:18:16:ce:ca:5b:25:11:b7:fa:2f:d6:d0:1d:
a3:14:8e:21:72:9f:8d:8a:b2:90:ce:f8:0f:b1:2f:
a2:17:81:36:88:01:20:fc:4f:6d:f9:fe:ca:96:3c:
9d:6a:88:66:56:6d:fc:9e:02:a1:97:6f:2e:b8:51:
3e:66:6d:79:ec:c9:fc:1f:85:ee:e7:b0:32:36:6d:
2e:55:ca:e0:a4:da:51:4d:85:24:e2:0a:75:66:da:
a6:2b:1e:b4:5f:46:44:37:73:3d:d3:e1:c0:dc:d2:
ea:b5:5b:3d:dd:fa:b1:da:bb:83:fe:ef:06:8f:65:
1d:08:16:af:d4:79:e0:05:01:c5:94:0a:99:13:fd:
fe:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:45:4F:98:A7:69:E3:F4:C0:E2:E3:3F:3F:A2:85:9F:ED:F8:6B:76
X509v3 Authority Key Identifier:
keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:75:68:3f:ec:0b:fd:3a:89:8e:c7:2d:cb:ab:56:84:bb:99:
1a:d5:83:f7:af:ac:5a:d4:c0:01:36:80:bc:6e:af:6b:ea:53:
d4:42:d5:60:c1:b4:7d:b6:a0:d8:fc:af:0a:b3:26:e2:41:e7:
c7:5d:ab:57:4f:65:30:cb:6e:eb:bc:57:c7:08:10:d0:2a:f4:
8b:f9:6a:3d:a6:dc:1e:fb:0c:14:c0:ed:c3:dd:7b:87:28:66:
b6:f7:73:a6:78:14:b7:03:76:47:de:92:b0:ee:e4:a7:db:9b:
00:ec:7b:05:2b:00:e7:f1:bf:3e:6a:d8:d8:2b:f6:a4:66:b0:
f7:10:c4:e1:7b:61:38:03:af:9f:35:70:9f:ed:65:7f:12:33:
6a:33:65:ea:cc:c7:b3:fe:47:b5:f9:3e:60:c3:bc:01:c6:fc:
d8:d0:a5:1e:b3:34:34:f5:5c:c8:f6:5d:17:ee:ce:0d:d0:db:
cf:77:a5:69:3e:5b:b4:1e:da:f7:54:7e:07:7d:86:73:38:a1:
ec:4a:54:63:f0:ba:e3:a1:12:8d:44:3b:65:e2:ca:f0:c2:8c:
ed:5a:6c:f4:41:8a:30:13:0e:8e:c8:60:b4:cb:be:aa:2a:96:
7a:4e:c0:fe:5e:6c:c3:f9:c1:39:78:68:81:9b:d3:79:7c:e5:
27:84:3b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 19:15:01 2026 by rpki-client