
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
File: NHTJTDbo-aDToNIuHdoQjNNAqyg.mft (raw, json)
Hash identifier: XuCOW2f39bNf27nyzo2VlhkmwF9cBozcQlxx5nuHTWw=
Subject key identifier: 4F:2C:47:C4:8A:F9:80:A4:C4:6D:AA:CA:B2:07:D2:BC:BE:0B:70:9F
Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
Certificate issuer: /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Certificate serial: 1095
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
Manifest number: 105A
Signing time: Sun 26 Jul 2026 17:35:57 +0000
Manifest this update: Sun 26 Jul 2026 17:35:56 +0000
Manifest next update: Sun 02 Aug 2026 17:35:56 +0000
Files and hashes: 1: NHTJTDbo-aDToNIuHdoQjNNAqyg.crl (hash: vigoT2ggpoS+ffkfsabdXlt6n11XPIWX5nfbPl0N7TY=)
2: B2B24A4221D711EB9CFAC46EC4F9AE02.roa (hash: UFtgLJp8H69yZx4HPXt6+xleZLi+o5QDWEezYOkAgV8=)
3: A7BDC50C7A4811EBA907BB5BC4F9AE02.roa (hash: C6eN/HRJOvECjn0iUsrFGGsR84yYAYigU79dZHsh6MA=)
4: B47C278021D711EB9CFAC46EC4F9AE02.roa (hash: YAVJ3KSJGZy5BW+wsOCfkHC/9utYf+L5rdo1d3HvAbs=)
5: B3682FEC21D711EB9CFAC46EC4F9AE02.roa (hash: WYFWGdkdelXl0XhClCR56TxX5kk6w/e/4RLmS9XXch4=)
6: 08CD1510027011EB98FEC44BC4F9AE02.roa (hash: +IMdgWTdcA1g1fqND4+7nCJIPD1lLydbWWaRQ1akOWM=)
7: 5E0253B6232111EB9896B783C4F9AE02.roa (hash: hR7qWV21WghiAL874Cg5BXLrN5Vzk7yXJRBqbiJ44Rg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl
rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 17:35:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4245 (0x1095)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131690, serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Validity
Not Before: Jul 26 17:35:56 2026 GMT
Not After : Aug 2 17:35:56 2026 GMT
Subject: CN=6a66457d-e12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d9:67:eb:9e:81:68:ad:5e:fd:a8:d7:2e:b2:
b4:da:11:1c:39:2b:ca:82:6a:f3:60:13:be:a9:12:
99:e6:f4:c9:1b:7b:7d:38:e0:aa:b4:b9:82:fc:41:
be:26:c3:e2:46:2e:5c:c8:4b:84:30:e7:06:ac:8b:
0d:01:4a:d2:d1:13:84:2a:af:c9:f9:46:7b:ad:82:
15:fc:e4:8e:11:6c:87:c2:94:13:cd:02:91:b0:03:
31:f9:02:81:89:af:c3:3f:2c:57:67:7f:a7:b2:54:
d0:06:ef:ac:2a:88:cf:be:41:81:2c:3c:2d:1d:e1:
e7:e2:ac:9b:14:27:6f:57:0a:c7:f6:fb:53:a7:a5:
50:e5:f0:09:b5:72:44:4d:ea:9c:30:e0:d9:24:0a:
88:f6:12:c2:74:2e:85:80:fc:42:cb:60:38:c6:0e:
f6:cd:aa:e0:71:4b:cb:6d:6e:30:9a:b7:f8:62:03:
5f:8e:16:9d:a9:ee:30:4c:59:de:e1:d6:ab:18:d5:
cc:9f:3f:42:e3:4d:a4:1a:2e:b1:f3:7b:a7:48:6b:
65:92:df:a6:b5:55:ae:be:c4:2c:d1:6b:ca:25:af:
1c:7f:6b:4e:2c:1a:f9:d4:df:82:a1:e7:b2:8e:3d:
4e:98:cf:a6:d1:27:15:19:75:9a:c5:95:1e:e2:ec:
fe:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2C:47:C4:8A:F9:80:A4:C4:6D:AA:CA:B2:07:D2:BC:BE:0B:70:9F
X509v3 Authority Key Identifier:
keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:5b:bc:09:d8:0f:30:ab:3f:e2:88:ea:61:51:3d:1c:26:3f:
bc:3a:09:49:e6:3b:fb:e2:9d:12:b8:b3:6f:cb:3d:ed:78:56:
ef:f9:aa:28:0c:12:e6:27:6b:4d:97:a1:45:a5:2e:6c:4e:71:
39:c4:ac:d5:a1:cf:00:08:7c:c0:28:05:3e:f7:b7:be:64:45:
53:59:32:8a:7a:e0:50:e5:91:26:3f:7a:a0:d1:d0:28:3b:68:
b8:83:7f:c2:64:c5:2f:0a:dc:21:a8:6f:e8:12:99:3c:2c:dc:
79:f4:ed:bc:5c:44:10:0d:f2:1f:00:24:71:5a:d0:44:62:63:
e4:59:f0:ef:61:c5:d0:98:b4:47:fb:79:a6:21:47:bc:a1:7c:
82:01:ad:7c:76:8a:75:cd:5d:5a:0b:1c:f5:5a:ad:36:9c:00:
59:23:7c:91:8b:2e:36:eb:e5:d7:5b:9e:3d:a5:3b:b4:ee:82:
7f:55:f4:f4:0f:4b:7b:54:09:00:a5:ec:43:98:72:27:54:f6:
0b:8d:dd:0c:9e:5a:a5:6c:2f:36:23:4f:8f:b2:43:51:08:58:
a9:45:4a:25:46:4d:4f:ba:d9:4d:43:b1:e5:cd:4e:c2:3f:a1:
4d:02:4d:d8:54:99:8b:dd:48:65:2c:fb:64:21:6d:16:70:1f:
82:f8:4d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:15:25 2026 by rpki-client