
$ rpki-client -vvf rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft
File: 1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft (raw, json)
Hash identifier: /n9HpcF1JPsFx5+r80gUvGcMV76d/jUm0QwYmA2y5bs=
Subject key identifier: E0:1B:6E:E6:65:19:B8:F9:D7:DA:CF:62:D0:28:50:AE:27:53:73:AE
Authority key identifier: D4:D1:8E:F1:C4:2B:04:99:5C:B1:A1:8F:57:64:BA:49:EF:B9:5B:E5
Certificate issuer: /CN=A91689B9/serialNumber=D4D18EF1C42B04995CB1A18F5764BA49EFB95BE5
Certificate serial: 0B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft
Manifest number: 0A
Signing time: Tue 21 Jul 2026 11:03:33 +0000
Manifest this update: Tue 21 Jul 2026 11:03:32 +0000
Manifest next update: Tue 28 Jul 2026 11:03:32 +0000
Files and hashes: 1: 1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl (hash: DgHrHe8Tsxi76HMZgqYfSiN+2izYVAx10MDS9lt651Y=)
2: C0D1BBF079BD11F1BB8B39355BA30FBC.roa (hash: gGu0FmVRoRjPupu9uKCq5cNV44H2mLC6217rmSNSokI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl
rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 11:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91689B9, serialNumber=D4D18EF1C42B04995CB1A18F5764BA49EFB95BE5
Validity
Not Before: Jul 21 11:03:32 2026 GMT
Not After : Jul 28 11:03:32 2026 GMT
Subject: CN=6a5f5204-7691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e7:88:88:c1:2a:63:37:e9:28:54:75:7e:e9:
f2:86:91:5c:11:c8:f9:bc:a7:0e:13:b2:1e:df:29:
3b:42:6a:58:f1:58:f5:53:c8:a1:0a:89:51:91:bf:
45:34:e7:19:60:21:a7:82:1e:ef:c9:f0:11:26:c6:
c0:0f:e0:25:a7:09:5d:e1:87:d0:39:d7:18:0b:9d:
27:8b:1c:60:c0:da:35:1d:3b:c5:3f:88:18:6c:e7:
d9:6e:95:b5:7d:63:c9:c0:d7:4b:15:5c:ad:43:bc:
09:d3:61:36:fd:7d:e8:0b:21:37:07:d2:20:ae:9a:
1e:9d:e2:52:4f:6c:2a:64:85:64:ed:c6:5d:ed:d4:
98:78:6a:ab:92:f3:4d:ef:8e:ea:f7:11:24:fb:82:
f7:10:d1:7f:28:c5:43:91:04:f3:16:37:4b:d8:b4:
ab:6b:a7:2b:28:0f:fc:8b:b9:8b:57:f6:23:3b:7e:
33:cc:96:99:cf:4a:7b:47:8a:86:f6:3c:ba:88:f0:
18:12:05:80:d9:d9:0d:19:b4:5c:30:32:64:81:cc:
2a:ce:88:59:9c:8e:7f:0a:8f:ef:8f:f4:1a:d7:aa:
6e:86:66:33:86:ed:5f:c9:a6:68:15:3e:6b:f2:6e:
cc:bc:25:09:6b:60:dc:90:86:7b:f6:15:d3:e6:8e:
53:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1B:6E:E6:65:19:B8:F9:D7:DA:CF:62:D0:28:50:AE:27:53:73:AE
X509v3 Authority Key Identifier:
keyid:D4:D1:8E:F1:C4:2B:04:99:5C:B1:A1:8F:57:64:BA:49:EF:B9:5B:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:28:65:9a:59:a8:61:2a:4f:1f:7b:0e:91:9a:f6:f8:ac:09:
80:f8:a0:90:ed:74:2c:9a:39:91:63:17:f9:6c:c7:a0:e9:a6:
7b:35:d4:c2:d0:97:20:8e:0b:19:f8:3a:8d:87:c1:9b:1e:09:
74:a1:87:2f:ff:d6:20:57:78:79:b3:c9:74:68:9b:c8:e5:d5:
c7:95:46:c5:fd:14:59:c9:3f:2b:fd:96:c6:64:ff:2b:8b:fb:
78:63:22:16:35:b4:91:8a:42:d7:eb:55:a2:dc:83:ea:84:ef:
4f:09:93:39:9a:8d:88:dc:b7:46:70:1c:0e:f9:81:8f:ed:b4:
ae:34:d4:d4:09:d1:6e:48:0b:95:a5:d8:af:b2:58:ef:1c:f1:
9d:12:70:ea:6d:b1:1b:f9:60:94:56:3d:0c:26:43:d9:6f:2e:
ef:3b:ad:4b:80:dc:45:84:30:2b:82:c4:3d:f4:dd:bd:af:92:
b3:4c:cf:e5:ad:d1:24:fa:67:d3:98:73:a7:8e:08:14:73:c2:
4f:fe:e5:20:71:41:2b:f2:91:b2:44:d3:1b:93:c7:f6:ea:49:
90:5c:e2:ab:14:0d:cb:33:e6:37:98:df:eb:a9:81:6c:bf:fa:
73:43:d8:3f:81:5c:14:e4:f8:00:30:1f:ec:1f:20:be:dd:de:
c8:6f:a8:2e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
ODlCOTExMC8GA1UEBRMoRDREMThFRjFDNDJCMDQ5OTVDQjFBMThGNTc2NEJBNDlF
RkI5NUJFNTAeFw0yNjA3MjExMTAzMzJaFw0yNjA3MjgxMTAzMzJaMBgxFjAUBgNV
BAMTDTZhNWY1MjA0LTc2OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDA54iIwSpjN+koVHV+6fKGkVwRyPm8pw4Tsh7fKTtCaljxWPVTyKEKiVGRv0U0
5xlgIaeCHu/J8BEmxsAP4CWnCV3hh9A51xgLnSeLHGDA2jUdO8U/iBhs59lulbV9
Y8nA10sVXK1DvAnTYTb9fegLITcH0iCumh6d4lJPbCpkhWTtxl3t1Jh4aquS803v
jur3EST7gvcQ0X8oxUORBPMWN0vYtKtrpysoD/yLuYtX9iM7fjPMlpnPSntHiob2
PLqI8BgSBYDZ2Q0ZtFwwMmSBzCrOiFmcjn8Kj++P9BrXqm6GZjOG7V/JpmgVPmvy
bsy8JQlrYNyQhnv2FdPmjlN3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4Btu5mUZ
uPnX2s9i0ChQridTc64wHwYDVR0jBBgwFoAU1NGO8cQrBJlcsaGPV2S6Se+5W+Uw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4OUI5LzFEMkQwNzA2Nzky
RDExRjFCQzg4OTA5MDZGQTMwRkJDLzFOR084Y1FyQkpsY3NhR1BWMlM2U2UtNVct
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvMU5HTzhjUXJCSmxjc2FHUFYyUzZTZS01Vy1VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4
OUI5LzFEMkQwNzA2NzkyRDExRjFCQzg4OTA5MDZGQTMwRkJDLzFOR084Y1FyQkps
Y3NhR1BWMlM2U2UtNVctVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBlKGWaWahhKk8few6Rmvb4rAmA+KCQ7XQsmjmRYxf5bMeg6aZ7NdTC0JcgjgsZ
+DqNh8GbHgl0oYcv/9YgV3h5s8l0aJvI5dXHlUbF/RRZyT8r/ZbGZP8ri/t4YyIW
NbSRikLX61Wi3IPqhO9PCZM5mo2I3LdGcBwO+YGP7bSuNNTUCdFuSAuVpdivsljv
HPGdEnDqbbEb+WCUVj0MJkPZby7vO61LgNxFhDArgsQ99N29r5KzTM/lrdEk+mfT
mHOnjggUc8JP/uUgcUEr8pGyRNMbk8f26kmQXOKrFA3LM+Y3mN/rqYFsv/pzQ9g/
gVwU5PgAMB/sHyC+3d7Ib6gu
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:44:12 2026 by rpki-client