
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
File: nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json)
Hash identifier: jYiy0KRQO1PsYA4WrTiFpONM4EY7js3SRSWR70jBb/0=
Subject key identifier: 34:6F:5C:39:F0:0E:2E:FA:19:34:73:38:B5:3C:4D:88:02:B0:BF:9E
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Certificate issuer: /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial: 0693
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
Manifest number: 066B
Signing time: Sun 26 Jul 2026 23:30:38 +0000
Manifest this update: Sun 26 Jul 2026 23:30:37 +0000
Manifest next update: Sun 02 Aug 2026 23:30:37 +0000
Files and hashes: 1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: jzka7ZsKRuFcYUgGItXo4/KJlvnstc+1EGep8gJ5/GI=)
2: 729F253CAB7611F0BCB28743C4F9AE02.roa (hash: RNZ4spqntA0JMCZsSqaH+sqpORW1IDmuJusYPmcPZSk=)
3: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: 6oy8vfXbR13Fccn1nC7FTUc7Ni330SgxcaSdkrjuIvk=)
4: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: x8sZ4QxQXhvPiVMJ2oKAKBGtbntHbWyBpumXqbB9h14=)
5: A7EBD74EAB7611F0A4F18663C4F9AE02.roa (hash: fMUinF8FSeKtIYLfJ88CgvoxibOKGi4+/9nzdFUr5UY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:30:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1683 (0x693)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Validity
Not Before: Jul 26 23:30:37 2026 GMT
Not After : Aug 2 23:30:37 2026 GMT
Subject: CN=6a66989d-be3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1f:02:61:30:87:b1:a1:cd:82:8e:11:19:ed:
15:41:91:a2:c3:5a:7f:34:21:49:f6:4b:03:d2:f6:
18:db:97:ca:5c:5a:f3:56:e2:28:6b:7b:c6:a8:e8:
a9:08:c1:27:e2:64:c7:6e:81:dc:dc:24:44:89:01:
ac:49:cb:1b:80:78:4c:63:c2:71:36:8a:a6:5b:9d:
4b:3b:7f:77:66:a5:75:f8:9a:ea:99:49:89:24:53:
5d:42:1e:f0:d7:d1:ea:41:a5:5e:29:3f:7b:db:40:
64:ed:2e:e7:b7:2c:b5:4f:58:58:3f:a8:88:ed:46:
24:2d:54:4a:88:74:d7:4f:bf:20:b6:cf:db:76:3c:
ad:1f:35:38:ca:7c:19:c9:df:62:17:80:bb:fc:2a:
31:f4:fb:09:ba:9a:bb:a6:46:fc:10:77:0b:c2:ab:
72:c1:71:82:8b:99:15:b3:8e:6c:fe:71:9c:f9:73:
8a:28:ae:96:76:d5:13:d1:87:64:93:63:ee:fe:6c:
47:3d:59:52:d3:b5:7b:e0:cc:ce:82:9e:f0:a0:e2:
ee:9c:16:e0:3b:67:e3:7f:14:93:07:a4:7a:45:dd:
69:9b:7c:76:4d:89:83:2a:ac:c4:a5:57:63:07:36:
ca:67:e3:fd:aa:8a:a1:8c:7b:25:59:bf:96:89:be:
02:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6F:5C:39:F0:0E:2E:FA:19:34:73:38:B5:3C:4D:88:02:B0:BF:9E
X509v3 Authority Key Identifier:
keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:7d:b4:99:bc:2b:f7:b3:be:72:3f:ff:ee:62:1b:c6:71:ea:
0b:28:ea:70:8b:89:13:37:38:a3:d4:e4:cf:bc:eb:79:6f:89:
0e:05:7c:75:f8:3b:a9:01:06:07:de:79:03:70:6a:68:63:0e:
11:cd:ec:6e:9a:25:5b:bc:23:0c:c1:13:a6:40:7c:9b:6e:68:
e4:e9:30:60:2d:96:63:04:32:f9:eb:53:ed:d2:a3:84:b5:66:
d9:c8:29:d9:d0:a8:7a:58:c5:87:91:49:4f:d8:24:ca:f5:1e:
e3:25:85:71:91:4c:3a:c7:24:3b:4b:02:66:c3:5f:17:7b:f4:
a2:dc:0f:08:7d:05:d1:2f:0a:1a:c3:d9:c3:1f:9c:50:b4:d3:
eb:93:9d:6b:5a:e5:6a:0a:8f:c2:da:b4:ad:ca:93:72:27:de:
1c:ed:b9:fb:60:48:64:dc:3e:f2:5b:4e:ee:5f:96:ec:84:0d:
7f:00:2a:63:b1:4c:f4:eb:71:fc:42:d4:f3:97:b1:cf:5b:1d:
e5:e7:b0:9f:95:cc:41:8f:ad:d0:90:ce:ca:32:e1:63:9e:51:
8e:d1:57:09:c2:b7:2b:53:b7:f9:d6:e5:9f:c6:d5:b2:fd:67:
88:93:48:e7:4f:bc:9f:9b:42:73:f4:4c:c2:d9:29:01:37:28:
bf:ae:8e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:11:04 2026 by rpki-client