
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft
File: 1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft (raw, json)
Hash identifier: 4bGxT+OKEVaiIONqCrL15ty3n49NfjFDqX8zF/Fp/zM=
Subject key identifier: B2:CC:EC:21:32:CF:49:A2:4E:1F:40:C1:4E:0E:17:C8:4F:68:50:53
Authority key identifier: D4:D1:8E:F1:C4:2B:04:99:5C:B1:A1:8F:57:64:BA:49:EF:B9:5B:E5
Certificate issuer: /CN=A91689B9/serialNumber=D4D18EF1C42B04995CB1A18F5764BA49EFB95BE5
Certificate serial: 22
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft
Manifest number: 21
Signing time: Thu 03 Sep 2026 09:06:30 +0000
Manifest this update: Thu 03 Sep 2026 09:06:30 +0000
Manifest next update: Thu 10 Sep 2026 09:06:30 +0000
Files and hashes: 1: 1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl (hash: 6m2dIKDZEwayuBPRI5S6NyWrD486/VRTywA25hObOhk=)
2: C0D1BBF079BD11F1BB8B39355BA30FBC.roa (hash: gGu0FmVRoRjPupu9uKCq5cNV44H2mLC6217rmSNSokI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl
rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 09:06:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91689B9, serialNumber=D4D18EF1C42B04995CB1A18F5764BA49EFB95BE5
Validity
Not Before: Sep 3 09:06:30 2026 GMT
Not After : Sep 10 09:06:30 2026 GMT
Subject: CN=6a993896-1bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:48:5d:69:dc:88:e5:a6:26:9e:3e:90:7b:d1:
40:51:cf:69:b9:b9:22:bc:f0:7f:62:1e:e6:ca:99:
ec:02:42:10:2f:c6:65:de:7b:24:5d:9c:5a:09:8c:
04:2f:ee:72:b8:ca:f1:81:63:4d:7a:97:8d:23:75:
bb:53:38:99:33:ad:05:c1:20:f4:9f:d3:88:c0:a4:
33:99:11:28:13:19:3b:ca:48:c5:34:85:ad:05:1c:
88:f4:11:34:90:19:65:57:55:b5:cc:1c:70:44:f2:
ed:0a:fc:8c:80:0e:67:75:5e:61:5e:79:f7:ea:fa:
ae:0f:c6:03:3c:f1:24:8c:90:de:f9:98:f0:41:ac:
6d:3f:98:40:65:59:d3:08:50:08:83:47:8c:75:68:
13:4e:61:2d:7c:ad:70:05:60:ee:0e:7b:04:62:8c:
50:32:e7:aa:14:22:f4:bd:2c:f1:7e:f4:13:4c:5a:
cd:64:1d:09:c4:11:99:88:ea:fa:47:4e:2a:b4:f1:
60:1f:9e:33:49:9c:59:fc:e7:a3:41:91:21:c0:55:
02:98:f4:d5:04:ee:dc:e3:45:7d:ce:b0:b7:77:fd:
80:5e:34:4e:be:4d:e3:b7:c8:e7:ad:73:29:7f:20:
16:a8:78:b4:b0:e4:b6:11:c4:4d:06:4e:66:9e:58:
5a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CC:EC:21:32:CF:49:A2:4E:1F:40:C1:4E:0E:17:C8:4F:68:50:53
X509v3 Authority Key Identifier:
keyid:D4:D1:8E:F1:C4:2B:04:99:5C:B1:A1:8F:57:64:BA:49:EF:B9:5B:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:bc:bf:a3:a2:e8:4c:26:4c:b2:4c:bd:08:cf:88:3d:f0:48:
b6:1b:7e:c2:59:18:64:ae:56:6e:96:5e:b3:1c:42:40:53:be:
10:d1:66:f4:c1:e0:9d:80:d5:04:c4:36:f6:21:9e:96:4f:e2:
3c:28:56:1e:68:be:11:b4:3a:5c:7b:b1:a5:08:19:7b:55:8b:
d2:b8:66:4c:af:92:99:4a:9a:71:8a:04:b9:7f:68:ec:53:fc:
8e:56:71:92:ae:39:f5:e7:4c:10:eb:ed:93:7f:54:a4:d9:46:
e8:77:b2:f6:d6:b7:4c:d1:50:64:3c:c5:e8:c4:07:e4:6d:34:
69:69:b0:3d:ce:a4:0c:9e:03:4d:21:de:ff:b0:a3:3a:77:cb:
c7:b1:f4:94:42:86:3c:f2:6f:35:e2:fc:06:da:e3:61:6f:45:
84:f3:5e:18:01:37:f7:eb:09:5f:49:1c:f3:36:2d:ef:ac:d1:
af:7c:91:b8:a2:32:12:a3:8c:26:7a:1b:2f:0a:52:9b:4c:a0:
5a:8a:86:e0:c7:e5:10:31:2d:a6:98:74:2c:e8:59:b5:45:68:
6b:cc:52:2e:a1:71:fd:4f:a5:a9:26:69:2d:76:cc:94:aa:ad:
26:f9:cb:bb:3b:2a:f0:e4:8a:93:79:49:73:99:e7:92:72:f5:
a4:2e:29:95
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
ODlCOTExMC8GA1UEBRMoRDREMThFRjFDNDJCMDQ5OTVDQjFBMThGNTc2NEJBNDlF
RkI5NUJFNTAeFw0yNjA5MDMwOTA2MzBaFw0yNjA5MTAwOTA2MzBaMBgxFjAUBgNV
BAMTDTZhOTkzODk2LTFiZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD2SF1p3IjlpiaePpB70UBRz2m5uSK88H9iHubKmewCQhAvxmXeeyRdnFoJjAQv
7nK4yvGBY016l40jdbtTOJkzrQXBIPSf04jApDOZESgTGTvKSMU0ha0FHIj0ETSQ
GWVXVbXMHHBE8u0K/IyADmd1XmFeeffq+q4PxgM88SSMkN75mPBBrG0/mEBlWdMI
UAiDR4x1aBNOYS18rXAFYO4OewRijFAy56oUIvS9LPF+9BNMWs1kHQnEEZmI6vpH
Tiq08WAfnjNJnFn856NBkSHAVQKY9NUE7tzjRX3OsLd3/YBeNE6+TeO3yOetcyl/
IBaoeLSw5LYRxE0GTmaeWFr7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsszsITLP
SaJOH0DBTg4XyE9oUFMwHwYDVR0jBBgwFoAU1NGO8cQrBJlcsaGPV2S6Se+5W+Uw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4OUI5LzFEMkQwNzA2Nzky
RDExRjFCQzg4OTA5MDZGQTMwRkJDLzFOR084Y1FyQkpsY3NhR1BWMlM2U2UtNVct
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvMU5HTzhjUXJCSmxjc2FHUFYyUzZTZS01Vy1VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4
OUI5LzFEMkQwNzA2NzkyRDExRjFCQzg4OTA5MDZGQTMwRkJDLzFOR084Y1FyQkps
Y3NhR1BWMlM2U2UtNVctVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBJvL+jouhMJkyyTL0Iz4g98Ei2G37CWRhkrlZull6zHEJAU74Q0Wb0weCdgNUE
xDb2IZ6WT+I8KFYeaL4RtDpce7GlCBl7VYvSuGZMr5KZSppxigS5f2jsU/yOVnGS
rjn150wQ6+2Tf1Sk2Ubod7L21rdM0VBkPMXoxAfkbTRpabA9zqQMngNNId7/sKM6
d8vHsfSUQoY88m814vwG2uNhb0WE814YATf36wlfSRzzNi3vrNGvfJG4ojISo4wm
ehsvClKbTKBaiobgx+UQMS2mmHQs6Fm1RWhrzFIuoXH9T6WpJmktdsyUqq0m+cu7
Oyrw5IqTeUlzmeeScvWkLimV
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:23:41 2026 by rpki-client