
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
File: NHTJTDbo-aDToNIuHdoQjNNAqyg.mft (raw, json)
Hash identifier: Luq6ujP8z6sc4KLIwjaBkn4PXgjp2OSIXshAHTeb8nE=
Subject key identifier: EC:B9:30:9E:D1:4C:D4:3A:EC:B6:61:A7:65:5D:1A:7B:B2:95:C2:C6
Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
Certificate issuer: /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Certificate serial: 107E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
Manifest number: 1043
Signing time: Wed 10 Jun 2026 17:25:18 +0000
Manifest this update: Wed 10 Jun 2026 17:25:18 +0000
Manifest next update: Wed 17 Jun 2026 17:25:18 +0000
Files and hashes: 1: NHTJTDbo-aDToNIuHdoQjNNAqyg.crl (hash: 05jwfhTXwNczd4qU3TUqxvJKz1Twzu3+yCUSrWCPQMk=)
2: 5E0253B6232111EB9896B783C4F9AE02.roa (hash: hR7qWV21WghiAL874Cg5BXLrN5Vzk7yXJRBqbiJ44Rg=)
3: B47C278021D711EB9CFAC46EC4F9AE02.roa (hash: YAVJ3KSJGZy5BW+wsOCfkHC/9utYf+L5rdo1d3HvAbs=)
4: B2B24A4221D711EB9CFAC46EC4F9AE02.roa (hash: UFtgLJp8H69yZx4HPXt6+xleZLi+o5QDWEezYOkAgV8=)
5: B3682FEC21D711EB9CFAC46EC4F9AE02.roa (hash: WYFWGdkdelXl0XhClCR56TxX5kk6w/e/4RLmS9XXch4=)
6: A7BDC50C7A4811EBA907BB5BC4F9AE02.roa (hash: C6eN/HRJOvECjn0iUsrFGGsR84yYAYigU79dZHsh6MA=)
7: 08CD1510027011EB98FEC44BC4F9AE02.roa (hash: +IMdgWTdcA1g1fqND4+7nCJIPD1lLydbWWaRQ1akOWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl
rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 17:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4222 (0x107e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131690, serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Validity
Not Before: Jun 10 17:25:18 2026 GMT
Not After : Jun 17 17:25:18 2026 GMT
Subject: CN=6a299dfe-a11c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:02:6d:63:4b:ba:d6:b8:03:57:86:4b:2a:a3:
f0:66:21:ee:f0:68:bc:8c:3d:87:1e:a6:68:49:0c:
cf:a9:e2:30:6a:ab:4f:91:f7:b0:5a:7e:cf:13:af:
5f:fd:90:94:fd:98:27:d9:28:5c:8a:82:83:87:ca:
d4:52:a7:bc:10:da:86:a5:e8:d7:84:ad:b8:71:fe:
7a:1f:b5:3e:b6:ee:9d:aa:57:ad:1e:61:29:5e:d9:
e0:c0:db:87:47:5d:82:9d:c3:d8:23:70:4c:f0:7a:
cc:5f:fe:bd:e1:b4:46:9e:ad:57:4a:ae:f7:a9:d4:
dc:86:ec:d8:86:88:81:7e:01:eb:ff:c2:15:fa:fc:
71:e1:aa:a1:8b:e4:6a:1a:7b:3e:3a:8d:89:ee:8c:
6c:0c:2b:50:0f:74:b8:79:42:da:e0:55:de:89:2b:
4d:5c:29:7e:08:04:8f:4c:05:ee:ba:8b:f3:fd:82:
67:2d:e4:81:99:b3:44:64:26:81:4f:15:65:73:e1:
75:b5:9b:23:f6:42:0e:a7:90:41:96:3d:7c:3f:91:
44:be:16:4d:1a:4d:e3:54:51:ae:46:68:d0:ef:06:
5b:85:3f:c3:7a:0e:a6:e8:3f:3f:13:0e:45:35:40:
01:ac:15:79:46:48:b0:7a:0e:0c:b2:b5:45:2d:02:
51:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B9:30:9E:D1:4C:D4:3A:EC:B6:61:A7:65:5D:1A:7B:B2:95:C2:C6
X509v3 Authority Key Identifier:
keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:7e:f8:82:29:4b:af:6d:ce:1e:26:85:90:4f:7c:f0:d3:7e:
b5:62:aa:db:23:80:cb:dc:dc:12:eb:8b:8f:ed:a0:f1:3c:91:
f5:93:32:56:88:90:2c:00:8d:27:d2:4a:61:76:3c:6a:83:b7:
06:7e:f1:43:54:49:06:7f:c1:5a:d5:06:63:ad:e1:a2:b6:4c:
02:ce:e5:b2:8a:84:ee:1d:3e:be:8e:3b:b6:08:65:1c:97:06:
e1:2d:51:7e:c5:7c:25:fc:e3:08:e1:a4:02:f1:72:3d:04:8d:
ae:8a:62:f7:a6:dd:aa:97:96:a0:d4:24:48:35:a6:be:62:5c:
c0:fd:82:a3:9c:ec:ec:1b:09:7e:41:b9:b1:8b:22:99:3b:e5:
59:16:da:89:09:59:2b:58:dc:4a:2b:bc:24:c1:84:dd:5a:57:
27:ad:d3:5a:54:b7:a9:90:5a:e5:80:ed:07:e3:ea:60:52:89:
f3:a9:b5:86:19:67:a8:2d:78:ff:4d:9e:98:85:a8:fc:ac:2f:
99:ba:c1:a2:a4:11:06:da:c0:d1:2e:a4:df:7c:59:ae:b4:1d:
5a:89:f4:c6:53:53:d5:ee:6d:a7:76:d1:bf:92:3a:4f:db:3a:
19:de:9f:0c:34:7a:cc:03:08:77:b3:8b:72:48:ba:77:84:b4:
7a:c7:f9:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE2OTAxMTAvBgNVBAUTKDM0NzRDOTRDMzZFOEY5QTBEM0EwRDIyRTFEREExMDhD
RDM0MEFCMjgwHhcNMjYwNjEwMTcyNTE4WhcNMjYwNjE3MTcyNTE4WjAYMRYwFAYD
VQQDEw02YTI5OWRmZS1hMTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3wJtY0u61rgDV4ZLKqPwZiHu8Gi8jD2HHqZoSQzPqeIwaqtPkfewWn7PE69f
/ZCU/Zgn2ShcioKDh8rUUqe8ENqGpejXhK24cf56H7U+tu6dqletHmEpXtngwNuH
R12CncPYI3BM8HrMX/694bRGnq1XSq73qdTchuzYhoiBfgHr/8IV+vxx4aqhi+Rq
Gns+Oo2J7oxsDCtQD3S4eULa4FXeiStNXCl+CASPTAXuuovz/YJnLeSBmbNEZCaB
TxVlc+F1tZsj9kIOp5BBlj18P5FEvhZNGk3jVFGuRmjQ7wZbhT/Deg6m6D8/Ew5F
NUABrBV5Rkiweg4MsrVFLQJR8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOy5MJ7R
TNQ67LZhp2VdGnuylcLGMB8GA1UdIwQYMBaAFDR0yUw26Pmg06DSLh3aEIzTQKso
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTY5MC8xNUI0MUI4ODYz
RjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1hRFRvTkl1SGRvUWpOTkFx
eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05IVEpURGJvLWFEVG9OSXVIZG9Rak5OQXF5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTY5MC8xNUI0MUI4ODYzRjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1h
RFRvTkl1SGRvUWpOTkFxeWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAd374gilLr23OHiaFkE988NN+tWKq2yOAy9zcEuuLj+2g8TyR9ZMyVoiQLACN
J9JKYXY8aoO3Bn7xQ1RJBn/BWtUGY63horZMAs7lsoqE7h0+vo47tghlHJcG4S1R
fsV8JfzjCOGkAvFyPQSNropi96bdqpeWoNQkSDWmvmJcwP2Co5zs7BsJfkG5sYsi
mTvlWRbaiQlZK1jcSiu8JMGE3VpXJ63TWlS3qZBa5YDtB+PqYFKJ86m1hhlnqC14
/02emIWo/KwvmbrBoqQRBtrA0S6k33xZrrQdWon0xlNT1e5tp3bRv5I6T9s6Gd6f
DDR6zAMId7OLcki6d4S0esf5EA==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:21 2026 by rpki-client