
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
File: Ngra_oYcSDq21UqjQPuE0kur8hs.mft (raw, json)
Hash identifier: xxfV4OIgGEYANFG81wR6PKAmSN71Rt7z3DooUvI0HOw=
Subject key identifier: 11:EF:3B:E6:DD:AA:A3:82:7B:0D:43:54:DB:CF:4C:57:3D:31:B5:B9
Authority key identifier: 36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B
Certificate issuer: /CN=A914E4C3/serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B
Certificate serial: 27CF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
Manifest number: 27CF
Signing time: Mon 02 Mar 2026 15:42:52 +0000
Manifest this update: Mon 02 Mar 2026 15:42:52 +0000
Manifest next update: Mon 09 Mar 2026 15:42:52 +0000
Files and hashes: 1: Ngra_oYcSDq21UqjQPuE0kur8hs.crl (hash: ftgsyM53WyVgP9DaRLNlzdBI7TlpbygkqbeLm5mNncg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl
rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:42:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10191 (0x27cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E4C3, serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B
Validity
Not Before: Mar 2 15:42:52 2026 GMT
Not After : Mar 9 15:42:52 2026 GMT
Subject: CN=69a5affc-8467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:c2:bb:e8:fc:82:ee:6a:5a:74:bc:f5:e1:
ee:fb:bb:d1:d9:07:0d:e3:d9:87:7e:42:b5:b4:05:
33:29:ac:2f:b1:9e:a0:3b:42:1f:df:e4:79:e0:ce:
92:7f:ba:d9:dd:27:11:0a:0b:75:ca:87:ca:d1:eb:
bf:61:e0:13:15:9f:a8:74:51:b0:83:5a:00:0b:47:
a1:a0:65:db:75:1b:7f:6a:bb:37:33:da:19:44:cc:
00:aa:60:5e:2c:31:21:ec:8c:1c:c6:1c:6c:eb:87:
fc:ed:77:99:d6:57:0b:24:0f:ec:51:c9:aa:e5:e0:
9e:e3:0c:4c:ec:f7:ea:8d:1d:38:46:7d:c0:77:d3:
40:f4:f3:49:c0:1d:8f:59:1d:c0:c0:f7:bd:05:29:
0c:0f:f1:5f:82:99:ef:89:df:94:2f:19:95:2a:a5:
00:94:9f:aa:18:34:63:cf:41:c2:f3:1f:00:c1:56:
f9:e8:fb:c2:b2:52:66:6e:48:d2:86:4d:5b:2a:eb:
fc:95:2e:5b:a0:0f:2b:61:c7:a3:7e:74:78:9c:bb:
ab:d7:46:f0:95:4a:bc:37:47:8a:00:f3:96:2b:15:
48:50:a6:1c:61:7f:b3:33:77:2b:ad:aa:b6:a7:2f:
59:8e:b8:50:fb:36:03:12:97:5a:5c:57:3c:d3:e3:
fa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EF:3B:E6:DD:AA:A3:82:7B:0D:43:54:DB:CF:4C:57:3D:31:B5:B9
X509v3 Authority Key Identifier:
keyid:36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:b8:d8:34:bf:08:dd:26:40:52:d5:41:a8:67:e5:f2:fc:ba:
f1:4c:d6:8f:a6:1d:5d:28:6a:6f:a3:95:b1:6c:51:0e:8a:8b:
ae:3d:8c:cd:1d:37:ec:9e:e1:81:c8:5e:56:b6:d1:44:3f:3b:
f5:7a:25:04:be:81:f8:da:42:a4:45:8d:1e:c5:f4:ac:d2:2b:
5b:ec:9b:48:34:32:73:ab:90:57:a2:90:35:bc:dc:da:34:db:
4f:43:e3:0c:10:23:a4:77:f6:28:ae:54:07:99:55:0e:13:ba:
7f:82:c1:d6:9a:c5:d0:a7:74:ac:53:27:f7:bf:1c:da:d2:0d:
5a:1d:ce:9a:0e:0b:76:37:91:1e:b2:4e:0c:97:98:ba:89:0c:
47:d3:67:bd:a1:0f:bb:f5:a2:80:59:60:29:da:c3:8f:d8:60:
1d:8c:1e:e7:25:ac:0b:d6:60:08:b2:f4:26:88:9b:3c:72:96:
a4:cd:a7:53:59:a5:0b:6c:08:32:0a:21:cd:63:b6:e3:e9:ef:
f8:f7:34:8c:8e:d7:b0:ad:ab:ba:15:d5:a9:4d:7f:4a:f2:da:
0c:10:c5:88:54:8e:dc:c4:a1:ec:72:2a:03:16:8e:3f:8d:f5:
ab:e7:e2:c2:2e:20:49:2c:dd:7f:20:41:79:a9:4a:79:b4:86:
5d:0b:5c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:57 2026 by rpki-client