
$ rpki-client -vvf rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
File: Ntd-kkOrui_VSWopGDC304sLy8Q.mft (raw, json)
Hash identifier: KHGoWjZLcZmiRmY9TGGgWgvAkk7Ub5xq2qAezgWDKQ8=
Subject key identifier: E0:6B:A3:E4:26:84:33:87:87:B4:66:80:3A:78:1E:E7:15:73:A2:DE
Authority key identifier: 36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4
Certificate issuer: /CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
Certificate serial: 09C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
Manifest number: 0999
Signing time: Tue 18 Aug 2026 20:20:44 +0000
Manifest this update: Tue 18 Aug 2026 20:20:44 +0000
Manifest next update: Tue 25 Aug 2026 20:20:44 +0000
Files and hashes: 1: Ntd-kkOrui_VSWopGDC304sLy8Q.crl (hash: 2hSGAVN3gEnGRn9u7S9weRZBJbkeULZv6Nu+str15Zg=)
2: 0F91DE9EAD4C11EB903C150DC4F9AE02.roa (hash: 2MWq2gYgL8Z2r2vMKeBL4wxSZIjEodsX3g/1Rc+PbcA=)
3: B453EBC4BB4011EAAF70B028C4F9AE02.roa (hash: lT94xNEkm0/RuJcMLykdff4mRseMOoMW/OqsJc8kVvg=)
4: A58B9338AD4A11EBA6B48687C4F9AE02.roa (hash: JFLo1Ja1paalAQ9cRjNBAw9+CXjqmX6hCmHw3VDuOWQ=)
5: 72E60DEA3CC911EDA5EBD21DC4F9AE02.roa (hash: z5nXpQYggF7FtxvjRhPO50T8ACMAQ3fNgZEPR5O1d4k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl
rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2497 (0x9c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91452AC, serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
Validity
Not Before: Aug 18 20:20:44 2026 GMT
Not After : Aug 25 20:20:44 2026 GMT
Subject: CN=6a84be9c-9e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:51:e5:06:5d:af:19:92:52:1b:9d:7a:b5:f9:
78:fb:80:d7:aa:75:7e:71:9d:9d:07:d8:2e:88:0e:
93:c0:8c:d3:c2:01:7a:62:d2:89:96:fd:4c:fd:a4:
98:61:e1:99:70:5b:93:06:06:53:ca:d0:14:cb:90:
7c:cf:fd:c9:62:32:4a:67:39:a2:cc:b6:e3:53:fa:
01:cb:8a:55:2f:3e:1d:c6:11:33:d7:1f:2d:4b:30:
1d:59:9a:98:d6:97:ca:b7:c9:80:63:59:6f:cf:98:
1a:a5:6b:5a:9a:11:e6:0c:46:8e:4e:f7:d3:94:42:
91:a6:bb:49:8e:ee:00:dc:c1:ca:11:d6:9e:9b:2b:
22:16:58:a6:88:75:87:a4:c7:a0:88:1d:b9:19:ab:
e5:b7:af:e6:06:e6:41:71:67:53:55:fd:ef:71:47:
d8:e0:9f:3b:54:bb:ec:ff:85:4b:23:86:c6:ed:e8:
ca:e6:e8:e6:97:89:c3:bd:85:ce:f5:cf:d4:8c:28:
7e:a3:4f:d1:93:b0:7b:b7:79:6f:64:b3:52:36:ae:
0d:e8:53:2f:ba:04:30:ce:cd:4c:4c:f3:68:e0:47:
4b:67:84:06:f6:4d:bf:c7:44:a8:92:4f:22:00:1a:
1b:ae:42:78:d1:bc:b4:2b:e5:12:fa:f3:8c:fb:31:
b2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6B:A3:E4:26:84:33:87:87:B4:66:80:3A:78:1E:E7:15:73:A2:DE
X509v3 Authority Key Identifier:
keyid:36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:82:60:a0:58:2b:2f:b5:ea:15:69:2e:d8:ce:db:78:77:62:
99:31:11:6d:49:7d:b6:32:9a:a4:2e:bf:8b:79:75:74:04:05:
5a:47:d3:b1:2b:f4:72:a8:6a:4c:61:24:9a:ef:bf:f5:e0:e4:
ab:72:84:7f:2c:3c:7a:0a:53:87:1d:db:49:c6:d3:ca:c8:7f:
de:8b:ae:91:11:83:9f:71:16:a6:a5:ed:ee:d1:7c:93:8a:1d:
4b:38:36:34:bd:96:36:f1:6f:a0:2d:a4:fa:c2:82:9b:b4:52:
e4:e1:ab:25:dc:98:e4:9c:3b:44:02:15:a4:0f:3b:a1:8b:b1:
87:f6:d6:cc:eb:c9:28:8f:f3:37:79:9d:be:fe:cf:1f:8d:46:
b0:33:5b:39:b9:88:ae:16:d5:d1:46:9b:73:e9:b8:88:ff:0b:
61:34:5d:fd:c6:6e:7b:d1:15:b0:e6:5f:df:f7:dd:b2:a8:87:
a5:d5:a1:3e:57:e7:d9:eb:95:df:c7:82:92:23:3b:f7:24:5e:
a4:d4:4f:14:fa:1a:74:8a:57:af:07:ab:09:d8:a0:3e:94:4e:
59:5a:5b:60:de:3a:04:c7:25:44:13:61:93:2f:14:2b:1d:08:
41:f4:c8:e5:b2:e2:76:1a:8f:15:25:80:06:3b:8e:d2:2c:80:
34:5f:4a:03
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDUyQUMxMTAvBgNVBAUTKDM2RDc3RTkyNDNBQkJBMkZENTQ5NkEyOTE4MzBCN0Qz
OEIwQkNCQzQwHhcNMjYwODE4MjAyMDQ0WhcNMjYwODI1MjAyMDQ0WjAYMRYwFAYD
VQQDEw02YTg0YmU5Yy05ZTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1VHlBl2vGZJSG516tfl4+4DXqnV+cZ2dB9guiA6TwIzTwgF6YtKJlv1M/aSY
YeGZcFuTBgZTytAUy5B8z/3JYjJKZzmizLbjU/oBy4pVLz4dxhEz1x8tSzAdWZqY
1pfKt8mAY1lvz5gapWtamhHmDEaOTvfTlEKRprtJju4A3MHKEdaemysiFlimiHWH
pMegiB25Gavlt6/mBuZBcWdTVf3vcUfY4J87VLvs/4VLI4bG7ejK5ujml4nDvYXO
9c/UjCh+o0/Rk7B7t3lvZLNSNq4N6FMvugQwzs1MTPNo4EdLZ4QG9k2/x0Sokk8i
ABobrkJ40by0K+US+vOM+zGyowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOBro+Qm
hDOHh7RmgDp4HucVc6LeMB8GA1UdIwQYMBaAFDbXfpJDq7ov1UlqKRgwt9OLC8vE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTJBQy9BNDhENTk2NkJC
M0UxMUVBQTI5RUUzMjFDNEY5QUUwMi9OdGQta2tPcnVpX1ZTV29wR0RDMzA0c0x5
OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL050ZC1ra09ydWlfVlNXb3BHREMzMDRzTHk4US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTJBQy9BNDhENTk2NkJCM0UxMUVBQTI5RUUzMjFDNEY5QUUwMi9OdGQta2tPcnVp
X1ZTV29wR0RDMzA0c0x5OFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaoJgoFgrL7XqFWku2M7beHdimTERbUl9tjKapC6/i3l1dAQFWkfTsSv0cqhq
TGEkmu+/9eDkq3KEfyw8egpThx3bScbTysh/3ouukRGDn3EWpqXt7tF8k4odSzg2
NL2WNvFvoC2k+sKCm7RS5OGrJdyY5Jw7RAIVpA87oYuxh/bWzOvJKI/zN3mdvv7P
H41GsDNbObmIrhbV0Uabc+m4iP8LYTRd/cZue9EVsOZf3/fdsqiHpdWhPlfn2euV
38eCkiM79yRepNRPFPoadIpXrwerCdigPpROWVpbYN46BMclRBNhky8UKx0IQfTI
5bLidhqPFSWABjuO0iyANF9KAw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:58 2026 by rpki-client