
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
File: NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft (raw, json)
Hash identifier: OVj+wbgoXJLyJhI3m/bi5QKr3ZfsRy+WD1nlkTLqqOs=
Subject key identifier: F3:26:59:F8:0B:7A:EC:48:E3:36:A2:89:25:D3:AD:E8:C3:58:47:81
Authority key identifier: 35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77
Certificate issuer: /CN=A916714C/serialNumber=353E48875376C6DB97E3426365CC7F18C9456877
Certificate serial: 067E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
Manifest number: 0674
Signing time: Fri 02 Oct 2026 22:53:01 +0000
Manifest this update: Fri 02 Oct 2026 22:53:00 +0000
Manifest next update: Fri 09 Oct 2026 22:53:00 +0000
Files and hashes: 1: NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl (hash: 20FcaOAyV8snWsffI0wBkVvpZL4kS9gjwp68eJ1zyvw=)
2: E50353FEDFED11EBA155C712C4F9AE02.roa (hash: DljMvLKa4sQ9wA9+ruYYv4Wx13hc9+MtmACdvX5LCjs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl
rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 22:52:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1662 (0x67e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916714C, serialNumber=353E48875376C6DB97E3426365CC7F18C9456877
Validity
Not Before: Oct 2 22:53:00 2026 GMT
Not After : Oct 9 22:53:00 2026 GMT
Subject: CN=6ac035cd-a504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:04:b8:7b:ff:94:10:ae:97:5c:82:64:14:ce:
9e:d5:e2:36:ec:b4:a8:94:11:bd:fa:51:ce:73:ef:
89:12:c8:7b:25:ab:b7:02:22:5f:2c:23:4d:a1:cc:
7d:1a:6b:d6:f7:70:7e:d7:62:b9:52:19:ae:34:08:
62:91:23:98:da:98:56:12:99:ef:23:3d:5b:0c:4d:
1e:a2:08:e4:b7:52:9b:17:fd:55:8f:3c:b5:40:93:
56:f2:0e:7c:bf:ec:65:68:05:76:23:8e:4a:5c:d7:
e2:aa:87:ff:fe:a6:55:21:98:39:e7:be:36:2e:84:
ab:1b:91:df:3e:2f:b9:12:8a:dd:72:2e:fa:fc:d3:
a9:f1:dd:29:fd:94:cf:a3:a4:40:87:50:5e:01:11:
5e:08:2c:46:87:0f:01:56:9e:07:9a:6d:50:72:e5:
c9:b8:af:14:a2:70:e2:2f:31:3f:e9:2e:ff:68:4b:
16:28:3a:45:6f:5d:c4:2b:29:3d:51:34:06:dc:63:
f3:75:b0:ba:40:44:46:82:47:24:5a:eb:50:40:1e:
65:58:f4:ce:cc:88:93:65:6f:0e:2b:47:80:a9:1e:
be:5f:ae:37:56:29:07:dd:ca:a6:41:3d:33:ab:58:
af:41:d9:8a:ca:5a:5b:95:1b:9d:f5:d3:5c:19:bb:
b1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:26:59:F8:0B:7A:EC:48:E3:36:A2:89:25:D3:AD:E8:C3:58:47:81
X509v3 Authority Key Identifier:
keyid:35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:4d:6d:e4:84:4e:1f:cc:39:4d:cb:b6:da:c8:ab:66:f4:67:
80:cb:7a:f2:3e:4c:ab:2a:d9:54:c5:d1:9c:7a:8a:ea:81:63:
d1:62:da:c5:e2:7a:b9:37:df:40:01:c2:80:64:c4:86:fc:73:
2c:1d:e0:5b:9a:4d:a2:05:ac:b7:73:66:6a:97:23:d3:cf:2d:
77:58:5b:27:e3:95:3b:11:32:88:45:ee:f5:75:1d:aa:92:7a:
76:9f:b8:00:53:14:94:7b:5e:ed:52:ad:34:3e:f2:aa:6f:8f:
e9:11:a9:9b:4f:32:64:30:d8:54:3a:18:1a:c8:88:ac:ee:c3:
18:02:d7:55:34:e2:9f:61:c8:8e:ea:30:9b:36:6b:17:d3:76:
dc:c4:13:fa:59:bf:7b:d0:2d:0b:92:62:14:5d:18:c1:5e:0e:
d6:8d:01:2e:89:e3:cc:4e:ed:2b:e8:fc:e8:fa:d8:a5:ad:44:
b4:86:92:82:09:f3:4f:e9:40:d2:36:12:a9:c7:2e:99:ab:10:
7d:6d:99:e2:a7:9e:af:60:15:06:eb:60:95:0a:db:45:3b:1b:
fa:d8:e7:fb:e0:2c:53:72:33:b1:7a:69:6e:72:5e:66:81:79:
79:e1:fa:13:3f:f0:84:2a:62:d4:b2:83:01:86:a6:67:be:90:
e0:4a:e1:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjcxNEMxMTAvBgNVBAUTKDM1M0U0ODg3NTM3NkM2REI5N0UzNDI2MzY1Q0M3RjE4
Qzk0NTY4NzcwHhcNMjYxMDAyMjI1MzAwWhcNMjYxMDA5MjI1MzAwWjAYMRYwFAYD
VQQDEw02YWMwMzVjZC1hNTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4gS4e/+UEK6XXIJkFM6e1eI27LSolBG9+lHOc++JEsh7Jau3AiJfLCNNocx9
GmvW93B+12K5UhmuNAhikSOY2phWEpnvIz1bDE0eogjkt1KbF/1Vjzy1QJNW8g58
v+xlaAV2I45KXNfiqof//qZVIZg55742LoSrG5HfPi+5Eordci76/NOp8d0p/ZTP
o6RAh1BeARFeCCxGhw8BVp4Hmm1QcuXJuK8UonDiLzE/6S7/aEsWKDpFb13EKyk9
UTQG3GPzdbC6QERGgkckWutQQB5lWPTOzIiTZW8OK0eAqR6+X643VikH3cqmQT0z
q1ivQdmKylpblRud9dNcGbux+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPMmWfgL
euxI4zaiiSXTrejDWEeBMB8GA1UdIwQYMBaAFDU+SIdTdsbbl+NCY2XMfxjJRWh3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzE0Qy8zRkVENjYwOERG
RUMxMUVCOEY3MDREMTJDNEY5QUUwMi9OVDVJaDFOMnh0dVg0MEpqWmN4X0dNbEZh
SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05UNUloMU4yeHR1WDQwSmpaY3hfR01sRmFIYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzE0Qy8zRkVENjYwOERGRUMxMUVCOEY3MDREMTJDNEY5QUUwMi9OVDVJaDFOMnh0
dVg0MEpqWmN4X0dNbEZhSGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAw01t5IROH8w5Tcu22sirZvRngMt68j5MqyrZVMXRnHqK6oFj0WLaxeJ6uTff
QAHCgGTEhvxzLB3gW5pNogWst3Nmapcj088td1hbJ+OVOxEyiEXu9XUdqpJ6dp+4
AFMUlHte7VKtND7yqm+P6RGpm08yZDDYVDoYGsiIrO7DGALXVTTin2HIjuowmzZr
F9N23MQT+lm/e9AtC5JiFF0YwV4O1o0BLonjzE7tK+j86PrYpa1EtIaSggnzT+lA
0jYSqccumasQfW2Z4qeer2AVButglQrbRTsb+tjn++AsU3IzsXppbnJeZoF5eeH6
Ez/whCpi1LKDAYamZ76Q4Erhow==
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:38:43 2026 by rpki-client