
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
File: ntkFUQfHD4W7kajaAnC1ynYK61Q.mft (raw, json)
Hash identifier: J7yRYlkYYkrQYG85en9WncEjpFK6AVfXG4y/Rwxe7Yg=
Subject key identifier: 1E:4C:F4:82:75:80:7D:E9:94:97:03:55:26:7D:F5:90:28:58:DF:74
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Certificate issuer: /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial: 3805
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
Manifest number: 3647
Signing time: Sat 06 Jun 2026 14:48:05 +0000
Manifest this update: Sat 06 Jun 2026 14:48:05 +0000
Manifest next update: Sat 13 Jun 2026 14:48:05 +0000
Files and hashes: 1: ntkFUQfHD4W7kajaAnC1ynYK61Q.crl (hash: DG8WtXWcxTvLUNVT6rxmzV9Vs/ZvNDsxmP32m9qg7eA=)
2: 7D745B8C800411EB9398C63EC4F9AE02.roa (hash: E1QXwlpofWnOF885wZs0H95ShVhWhWqMPlBNA/xt/8E=)
3: 9F2B1EB0892C11EBB29AFF50C4F9AE02.roa (hash: TsQLO8q3V0PEg/QW2TxOwdlP9q86F7sKiMzK79eK+rc=)
4: D9E23E4A6D4C11EB938EC44DC4F9AE02.roa (hash: zMHfwZgdZ0ZZwpzwsqGwEeST/OYG6+IfNinxg8TADiQ=)
5: 160E2D60FF0D11EF8B23C73AC4F9AE02.roa (hash: CibYJCUHvHBiEsONaOuEaboyfL1MZkFD3r43dOhTl94=)
6: 9D67280A844911EAA528AD63C4F9AE02.roa (hash: 1Gd0ADieLGVXYOgTjle7Xb85lx7mYyYRHSn9/35nibo=)
7: DED04A561D4111EB89535E1EC4F9AE02.roa (hash: gjmCrERX6bDJqRAovORADO2jmeMnvAozOWLBNvCikGQ=)
8: 150DA58AFF0D11EF8B23C73AC4F9AE02.roa (hash: JcO6trXLtvvUIcWDaB6FNojH0pyL3WBhWKZ1pW7Jr/U=)
9: 35E95924844811EAB301615FC4F9AE02.roa (hash: +xVk+rs8Sk3ot4BG/sDDsstuP19HaQF04qYw2FT/AjU=)
10: D9D185C6D27A11F092DEA24AC4F9AE02.roa (hash: hAsd4MgKrzzFojSm6DEKyVq+itBFW1idmKj+K2KrQmQ=)
11: 7418230A6D4B11EBB1805C0DC4F9AE02.roa (hash: DvMc+C7ydaggndrUk3IDkyvlx9FwffySugOxDXp6bws=)
12: 35575C68844811EAB301615FC4F9AE02.roa (hash: p84kXPlD9gr0uNcPrMPIN+YNKnf8ICmyXIZyV2BXrVg=)
13: 7A58C8D6BBEA11EA8DF46778C4F9AE02.roa (hash: BCO4TPbsUTXKr6VORkWLBBWoboETmiJ75sR3vzGBSvE=)
14: FBCDF210490B11EC8E4D1136C4F9AE02.roa (hash: 47wblHNUHR8QOKJUoT7iYPHs3BqPfi5JcNUXRdRFnRQ=)
15: EF5779B09DD611F0BB1A500DC4F9AE02.roa (hash: xtJKVVrh02G9dTMpH4EO7nBEDufcmTJ1uO4G5ShnUy4=)
16: DF6E9324D08D11EA9010E72EC4F9AE02.roa (hash: GDlrFsOMkk+fcO+QcoEg0Xz8k+lsBwDQwOJ1oO6ZWm8=)
17: 9604F4A6899911EBA32C6224C4F9AE02.roa (hash: V/SzYzu69tmbsxP6bWvkiUxUMh2sV1e0ifoqU8Ehrhk=)
18: 167FCE12844B11EA91F6956BC4F9AE02.roa (hash: PzpE7MwYfVRawzIKsbVX370mNdsLgW2Qm+aakZFWhao=)
19: 443470FC7C1511EBB779C03EC4F9AE02.roa (hash: 59AdWYDXv0qwi7Gjxa16HkdQksWMmrXabTThvXIKiK4=)
20: 0F3F5C24FF0E11EFB7B9A13CC4F9AE02.roa (hash: ucJyYp7huPxH4sc4/W12ODnA6Tm7XkeTQYPE1/uB3U4=)
21: 9E1F70A4844911EAA528AD63C4F9AE02.roa (hash: Gw6eqkoI9GjMAfax+Sy6LiS1Q6bEsJsUys7tDAvsHp8=)
22: B89BA72097D711EBA8B8BA2AC4F9AE02.roa (hash: 48+6uM5fDnTMnACjVi51hR8ImGiaIPMtb2QsEfmcA9U=)
23: B34368F8BA9311EEB0A64B2AC4F9AE02.roa (hash: An3BggKdBYLbEgb3Hrkj33h4yocMp14OUbjX/d9n+NU=)
24: D10DBCB2475C11EEBF5FB180C4F9AE02.roa (hash: BRxvYL/f6CA3SKIVGbpzXkGKWWs47DxZMHo2MAWlkko=)
25: B1A0E8244BA311F19791B23AC5833773.roa (hash: hHBYBN5yWoN6LtekKpNRZMeXhczEHm/cKfEFTCq+ZHM=)
26: 691D0462E6FD11F09102F531686F56BC.roa (hash: 0XyfDO8it6I75D9n0w3xE9lzsxnoVx1g4ZUiUe/hMW0=)
27: D6672BEE0BD111ECB2E9C868C4F9AE02.roa (hash: VroGJygKLBjQNkDiUE3DzWiyxIeS84Ur+QvbCD7WMn0=)
28: FAF25932427711EEBEA02D22C4F9AE02.roa (hash: 8hMby2QMc40C7Gl3ib11u7r8k7MSe+ayZqt3WE3eTlM=)
29: 32CF326ECA2E11EA80305F0DC4F9AE02.roa (hash: 72prmaxV5I+nRCKgiCmBCuBxHjAnd2zDB9Kx7IAuER8=)
30: 9B4B6C82904911EABE5F0C63C4F9AE02.roa (hash: MLGHYtNGkC756TmJuWFDWX+q6uSK7D/1Efdl7Recbww=)
31: BB7CEA8CEF3B11ECABCC5E3EC4F9AE02.roa (hash: 4+fNNlvJO8/zUbQ29LqDl04P63xI45pAflNJ0VsGVsA=)
32: 13C828C62D8911EBA7D22C3EC4F9AE02.roa (hash: LWvz30J7nqbhh5taPr7hBquNOGwN6yl//Q6amBLA2ko=)
33: F33CEFA6FF0C11EFAFAF7D3AC4F9AE02.roa (hash: jxx1XBKpE1GYRswhAFy+kqaQe8OpWmhnWRQ7YcGhwgA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 14:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14341 (0x3805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Validity
Not Before: Jun 6 14:48:05 2026 GMT
Not After : Jun 13 14:48:05 2026 GMT
Subject: CN=6a243325-0513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:27:29:5c:69:a0:1d:27:a5:f8:a8:f9:0d:b7:
e0:28:fb:97:14:60:af:25:10:67:52:95:09:e8:0b:
ce:f1:8a:b8:f4:6f:6e:80:f1:b9:d6:2f:38:3f:71:
c6:4c:cb:23:87:5a:a1:61:22:05:96:cc:20:96:ab:
db:f7:30:00:3b:db:6f:38:8e:4b:21:d7:03:a4:7a:
df:60:39:46:c4:40:7c:09:55:7c:e7:29:40:5d:29:
dd:41:92:2f:ee:83:02:de:70:2b:34:b4:4b:6d:64:
4f:e9:af:b1:b9:98:1d:4a:07:45:9a:87:38:b9:fe:
c6:d4:19:11:73:dc:99:4a:68:46:0c:ca:16:5b:4a:
b2:fb:84:2c:d6:15:13:df:88:16:39:a6:b9:2f:80:
fd:94:86:89:39:11:2f:cf:78:a5:62:1d:24:c3:d0:
87:14:20:f4:57:bb:84:c4:c8:53:34:77:c5:1a:23:
c0:e0:15:36:30:d3:b3:50:39:99:5b:5e:32:b2:77:
ca:06:23:1b:00:c8:37:2b:fd:f4:1a:51:1d:0f:d2:
70:bf:cc:74:d8:79:34:15:09:2c:b1:01:52:62:24:
23:af:c0:4b:00:1f:68:02:ee:3a:4f:2d:7f:b8:0b:
0a:97:94:c9:35:63:2a:a4:5b:d3:4d:92:e0:bf:c7:
58:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4C:F4:82:75:80:7D:E9:94:97:03:55:26:7D:F5:90:28:58:DF:74
X509v3 Authority Key Identifier:
keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:13:2d:bc:63:85:6b:72:19:4b:0b:39:df:a2:a3:24:09:72:
70:7a:df:08:a6:57:f6:bf:5c:cf:7f:9d:71:85:08:25:da:2d:
31:41:a1:af:d3:ea:9c:49:2d:e9:9b:54:89:65:07:65:b3:34:
b4:75:ba:d6:fc:73:86:81:41:34:62:66:3a:db:77:2d:b8:12:
61:da:d8:7f:a4:50:b8:72:82:5e:2d:35:36:96:f2:df:81:da:
43:6a:18:62:37:a3:92:bf:ac:e3:6e:ec:17:87:54:ed:cb:70:
f6:dc:06:18:5f:7f:32:d2:1c:c7:a8:c4:30:a0:b3:52:f5:cb:
35:b4:12:0a:4f:6b:5d:a9:56:e3:fb:f0:2b:ed:f1:13:d2:fe:
62:d9:50:05:6f:73:a3:e4:1e:e4:df:ae:20:fc:15:c9:16:18:
56:5a:ca:b6:d2:a4:c6:91:85:9c:b1:5e:62:0b:97:5d:27:3b:
61:0c:d3:2a:b7:0e:4c:b0:24:72:46:ea:5b:c9:a7:bb:13:67:
2f:0e:6e:b7:80:4e:a8:e4:12:3f:9a:cd:d1:ef:42:00:50:28:
24:3c:de:e1:f7:19:81:e1:66:b1:55:72:74:eb:36:c8:8f:33:
25:23:07:0f:80:52:a9:49:ac:14:3c:2d:79:35:04:81:10:31:
75:45:2d:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICOAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTA4MzIxMTAvBgNVBAUTKDlFRDkwNTUxMDdDNzBGODVCQjkxQThEQTAyNzBCNUNB
NzYwQUVCNTQwHhcNMjYwNjA2MTQ0ODA1WhcNMjYwNjEzMTQ0ODA1WjAYMRYwFAYD
VQQDEw02YTI0MzMyNS0wNTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjycpXGmgHSel+Kj5DbfgKPuXFGCvJRBnUpUJ6AvO8Yq49G9ugPG51i84P3HG
TMsjh1qhYSIFlswglqvb9zAAO9tvOI5LIdcDpHrfYDlGxEB8CVV85ylAXSndQZIv
7oMC3nArNLRLbWRP6a+xuZgdSgdFmoc4uf7G1BkRc9yZSmhGDMoWW0qy+4Qs1hUT
34gWOaa5L4D9lIaJOREvz3ilYh0kw9CHFCD0V7uExMhTNHfFGiPA4BU2MNOzUDmZ
W14ysnfKBiMbAMg3K/30GlEdD9Jwv8x02Hk0FQkssQFSYiQjr8BLAB9oAu46Ty1/
uAsKl5TJNWMqpFvTTZLgv8dYVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB5M9IJ1
gH3plJcDVSZ99ZAoWN90MB8GA1UdIwQYMBaAFJ7ZBVEHxw+Fu5Go2gJwtcp2CutU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDgzMi85REFGNzgwRTFE
OTQxMUUyOTkwMUYzRjgwOEIwMkNEMi9udGtGVVFmSEQ0VzdrYWphQW5DMXluWUs2
MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL250a0ZVUWZIRDRXN2thamFBbkMxeW5ZSzYxUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MDgzMi85REFGNzgwRTFEOTQxMUUyOTkwMUYzRjgwOEIwMkNEMi9udGtGVVFmSEQ0
VzdrYWphQW5DMXluWUs2MVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuRMtvGOFa3IZSws536KjJAlycHrfCKZX9r9cz3+dcYUIJdotMUGhr9PqnEkt
6ZtUiWUHZbM0tHW61vxzhoFBNGJmOtt3LbgSYdrYf6RQuHKCXi01Npby34HaQ2oY
Yjejkr+s427sF4dU7ctw9twGGF9/MtIcx6jEMKCzUvXLNbQSCk9rXalW4/vwK+3x
E9L+YtlQBW9zo+Qe5N+uIPwVyRYYVlrKttKkxpGFnLFeYguXXSc7YQzTKrcOTLAk
ckbqW8mnuxNnLw5ut4BOqOQSP5rN0e9CAFAoJDze4fcZgeFmsVVydOs2yI8zJSMH
D4BSqUmsFDwteTUEgRAxdUUtbg==
-----END CERTIFICATE-----
Generated at Sat Jun 6 16:51:08 2026 by rpki-client