
$ rpki-client -vvf rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
File: Ntd-kkOrui_VSWopGDC304sLy8Q.mft (raw, json)
Hash identifier: 6He9ycIM1O9n++IUudJvcNWj3DB6Cz+CQj3KoA/yECU=
Subject key identifier: 14:7B:38:6A:83:3E:30:C7:CB:A8:97:75:49:26:D3:3B:5D:F6:99:15
Authority key identifier: 36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4
Certificate issuer: /CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
Certificate serial: 0916
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
Manifest number: 08FA
Signing time: Fri 24 Oct 2025 21:10:03 +0000
Manifest this update: Fri 24 Oct 2025 21:10:02 +0000
Manifest next update: Fri 31 Oct 2025 21:10:02 +0000
Files and hashes: 1: Ntd-kkOrui_VSWopGDC304sLy8Q.crl (hash: 6lxeruOMQCfnhhk8xTidJZ00sC4Zoi4vJ2rU7QvJac8=)
2: B453EBC4BB4011EAAF70B028C4F9AE02.roa (hash: Nz/7xCUgKfmqkXApuxeo5myCUO+mgajFtNE4r7Ggzao=)
3: A58B9338AD4A11EBA6B48687C4F9AE02.roa (hash: 9S3WJERMTtwQwqkFdyQh2FAfBQXuWIoDgdAQjyhftzk=)
4: 72E60DEA3CC911EDA5EBD21DC4F9AE02.roa (hash: zq2Qkn/Tk6HTf9mmAUUEV4eovm/AM6TvEoGB/VFCywQ=)
5: 0F91DE9EAD4C11EB903C150DC4F9AE02.roa (hash: KYXdBuY8eVoROAmSDw7JnT54RB6WWf5lcCmMUouYwzY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl
rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 21:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2326 (0x916)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91452AC, serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
Validity
Not Before: Oct 24 21:10:02 2025 GMT
Not After : Oct 31 21:10:02 2025 GMT
Subject: CN=68fbeb2b-ad64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9a:e9:56:90:99:46:cd:19:1f:83:53:a1:08:
6d:e9:3c:19:ae:4f:d0:72:70:b2:88:df:10:26:54:
00:66:9c:c3:c0:ea:de:a7:ee:56:22:69:b6:9b:2e:
f0:9e:4b:b2:55:db:c9:57:45:6b:fc:b9:c2:e9:af:
4d:4d:73:ad:e2:69:8d:de:5f:91:62:e9:45:75:b4:
5e:0b:df:5c:c1:55:96:73:85:12:c0:6e:00:8c:24:
07:7e:e2:a5:3b:cb:6d:9f:3f:cd:11:c6:06:cc:4c:
bc:09:7a:3f:16:89:a9:54:ca:66:f9:21:43:1a:f3:
ba:6e:e0:d7:42:a2:5e:7e:fa:3f:4e:23:5b:1c:95:
c1:15:57:27:9f:21:3b:02:ae:fc:2f:a8:93:6b:7d:
ce:b0:ef:22:d4:6c:fc:c0:0c:6a:5f:33:53:de:c5:
fe:a2:7b:d8:31:38:b3:62:94:8d:cd:3d:d8:38:25:
25:24:9a:f0:d2:12:a2:ff:a0:e8:07:c8:78:37:17:
f8:47:a8:a9:b6:9c:9b:08:85:16:eb:b0:25:7d:b5:
90:e4:0e:48:5b:84:a7:e8:6b:09:ab:bb:72:b2:03:
cf:8d:d6:a3:12:9f:09:55:34:96:6f:e2:cf:de:37:
5d:d6:ae:b3:c9:7a:96:d0:89:e3:c2:4b:24:79:90:
08:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7B:38:6A:83:3E:30:C7:CB:A8:97:75:49:26:D3:3B:5D:F6:99:15
X509v3 Authority Key Identifier:
keyid:36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:f4:a6:14:b7:be:ba:12:bd:3e:5e:4f:54:44:7f:bd:bd:30:
b1:97:80:7e:53:f1:79:bc:4b:d7:62:2a:82:66:19:bb:20:9b:
37:1a:00:71:ed:a3:6d:6a:cc:c2:6c:f0:25:28:55:66:f0:c4:
8f:fb:b0:8e:cc:5b:f1:28:7d:29:96:b8:0a:a2:30:57:68:ad:
7a:db:a8:63:5b:18:f0:8c:ba:3e:5d:a2:dd:9b:43:15:c2:d2:
a5:66:c5:d3:42:2f:9b:03:40:17:27:6c:0b:e1:36:1d:cc:71:
7e:4b:e5:a8:6e:ce:bc:3a:1b:46:82:b0:4c:b6:7c:fe:c0:48:
2f:b1:30:69:c9:4a:af:36:4a:b2:7c:42:7e:3d:b2:35:96:59:
fa:e3:c8:44:8e:12:e2:bd:a3:e7:08:bc:2a:9c:26:9f:c3:e4:
e3:e6:f4:f6:b4:a7:34:52:04:89:5f:02:98:55:57:75:7d:40:
53:bc:63:bf:5a:79:3d:ed:07:f6:e8:9a:25:23:63:1b:d7:b2:
df:b6:14:01:64:6c:c6:0a:a9:43:0e:9f:c5:2b:dc:27:d2:77:
84:31:23:cf:0b:a4:0c:d7:d0:57:3b:6d:1c:ce:5e:78:91:8b:
49:af:8d:b3:69:18:5e:5e:5e:ff:e7:70:14:4a:51:d2:e6:ed:
b5:48:2f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 17:42:02 2025 by rpki-client