
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
File: Ngra_oYcSDq21UqjQPuE0kur8hs.mft (raw, json)
Hash identifier: 1Hf5bkNiebTJQaA2M7jnOhOeaXvOm83RpDq/0RAPCXw=
Subject key identifier: 25:E9:84:65:94:BF:2E:4D:D2:3C:80:E9:06:C2:9E:43:83:AB:A5:D2
Authority key identifier: 36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B
Certificate issuer: /CN=A914E4C3/serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B
Certificate serial: 27E7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
Manifest number: 27E7
Signing time: Sat 18 Apr 2026 15:34:43 +0000
Manifest this update: Sat 18 Apr 2026 15:34:42 +0000
Manifest next update: Sat 25 Apr 2026 15:34:42 +0000
Files and hashes: 1: Ngra_oYcSDq21UqjQPuE0kur8hs.crl (hash: gbLMMSFSUNZ3xLjSpCSPPhKlsTZUqMX++WSLhHcoR0Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl
rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10215 (0x27e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E4C3, serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B
Validity
Not Before: Apr 18 15:34:42 2026 GMT
Not After : Apr 25 15:34:42 2026 GMT
Subject: CN=69e3a492-d9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:55:6a:0c:4a:f2:e4:5d:bc:21:f3:66:2f:ec:
cc:8c:58:23:2e:39:ec:c1:45:b2:49:02:c7:bb:0d:
67:7d:db:a4:f8:74:8c:59:56:5a:76:e3:71:d0:6a:
b8:8f:66:8c:92:66:6c:a4:38:45:3f:27:32:85:03:
95:a9:89:f4:96:c7:6c:eb:26:f7:62:26:2a:01:f3:
4f:36:8d:63:cb:04:71:38:18:84:8c:b0:48:0f:36:
15:66:44:96:b2:3d:d6:32:3f:5c:4d:79:f0:08:11:
6e:1b:7f:36:8c:bb:5f:b7:a9:45:52:b7:60:90:92:
f6:c6:5d:33:2e:63:97:fa:01:26:8a:da:89:2a:80:
3c:3e:73:e5:6a:a3:15:0f:41:64:7e:2e:24:6c:79:
52:5c:3f:94:b5:0e:1b:22:a0:26:7e:14:f6:3b:09:
0a:ce:c6:85:b9:fc:0d:6c:cb:b8:f3:9b:11:9e:ef:
8c:96:0f:12:d5:5a:4b:02:be:b0:07:90:6d:c4:8f:
52:17:9e:6a:5e:a3:d5:18:b0:66:06:b5:66:74:b8:
db:15:4a:79:6a:91:54:67:5a:1f:a8:84:8c:b3:19:
33:00:00:59:83:26:b0:bc:6a:44:27:f2:76:0e:cb:
80:15:9b:2c:6d:86:90:02:e5:6f:fa:e2:c6:67:b3:
28:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E9:84:65:94:BF:2E:4D:D2:3C:80:E9:06:C2:9E:43:83:AB:A5:D2
X509v3 Authority Key Identifier:
keyid:36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f3:e7:5b:4c:3f:70:c1:6a:b4:6f:69:94:cd:66:23:e1:ae:
94:d9:23:56:bd:c0:9b:fc:74:6b:b4:b3:f3:6a:36:96:7e:f7:
c3:ff:80:b1:9f:e7:49:ae:26:9f:b0:18:26:18:a1:21:7a:e2:
a9:47:81:f4:29:12:1b:15:f5:21:7c:56:b6:79:43:d8:69:75:
41:4b:5b:5f:7c:c1:a6:91:18:d6:d8:af:b6:1b:e3:77:d5:c6:
89:50:20:53:18:39:6b:99:48:a1:2b:88:77:b2:a9:cf:5e:6d:
93:6d:41:3d:0f:0a:6e:08:38:f0:a3:d4:81:89:ca:14:6d:a8:
79:b9:3b:71:f6:14:3a:9c:fe:35:f0:de:88:eb:a7:ae:df:a8:
75:d7:dc:17:ee:01:9f:93:bc:bc:c4:7c:e9:9f:34:72:16:6b:
25:4e:04:5d:9f:ef:aa:ba:c6:8d:a2:61:3a:dd:2c:78:e9:44:
92:42:d4:50:be:26:79:20:5b:91:53:b6:75:98:2b:d8:2b:05:
a4:8b:ce:53:98:9d:43:fb:95:58:41:3d:b0:a4:83:50:ce:70:
df:d8:68:42:99:6e:fc:9c:17:70:86:b0:41:98:ec:70:cb:55:
0b:b4:80:3d:cd:49:96:82:bb:a8:74:27:6e:60:36:d7:c8:7d:
8d:f4:5d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:07:50 2026 by rpki-client