
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
File: NttE1MFZiGc4IVpWELEQwkSGylY.mft (raw, json)
Hash identifier: KUaoZASQK+yhyCxzg8B4eRjccwv2S1bjO2yduQebL10=
Subject key identifier: 10:84:32:19:DD:BE:0F:D5:08:45:7C:B2:27:E5:99:34:32:B6:10:08
Authority key identifier: 36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56
Certificate issuer: /CN=A91C6515/serialNumber=36DB44D4C159886738215A5610B110C24486CA56
Certificate serial: C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
Manifest number: C0
Signing time: Fri 17 Jul 2026 08:11:10 +0000
Manifest this update: Fri 17 Jul 2026 08:11:09 +0000
Manifest next update: Fri 24 Jul 2026 08:11:09 +0000
Files and hashes: 1: NttE1MFZiGc4IVpWELEQwkSGylY.crl (hash: KB6MO3oSZ+wmU5dfT7oT8wE5WLbB6zQUDObKUs+m8Qs=)
2: E5723CA260C111F0A9EB0333C4F9AE02.roa (hash: vxcGwI8Luk+cexqrtDI44NCym1uBtp6Sxq28P5I1c3Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl
rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:11:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6515, serialNumber=36DB44D4C159886738215A5610B110C24486CA56
Validity
Not Before: Jul 17 08:11:09 2026 GMT
Not After : Jul 24 08:11:09 2026 GMT
Subject: CN=6a59e39d-c523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a6:c6:fd:32:03:55:be:fb:9a:43:30:80:27:
b9:b3:88:67:cb:df:e5:ae:69:7e:c0:19:40:75:38:
3c:7b:2f:ef:f1:64:3d:86:de:14:8d:3b:31:73:cd:
9c:bd:18:62:49:70:98:91:81:86:ed:6e:84:23:88:
15:13:11:7d:cb:55:c2:2d:d8:40:b2:ba:d5:4d:cf:
75:01:7c:16:ba:0b:75:0b:9a:2b:78:dc:49:4d:43:
dc:bb:4a:e1:cc:0c:b9:f9:09:a1:c5:13:79:57:42:
56:1b:e3:fd:3b:cf:e9:ad:ce:9a:0a:fe:f7:7d:4d:
ac:b4:6b:61:82:ed:fb:3c:19:a5:20:87:12:55:2b:
45:37:33:e3:7f:d9:4c:94:53:4f:61:db:62:b4:a0:
3d:ed:f3:d0:0e:c3:ac:93:35:e6:d7:e2:77:84:0c:
b9:93:46:8b:16:0b:b0:f6:10:0f:2f:40:9c:70:07:
b9:cc:df:33:9e:27:44:78:00:41:8f:20:fa:a0:19:
86:1a:dd:0f:38:05:97:ff:c5:3b:bf:19:11:d1:ba:
5b:35:95:9d:f0:f6:ed:ab:be:15:11:1b:33:b2:18:
69:7d:4e:18:09:70:1f:5b:55:50:4b:29:f3:1f:19:
6e:38:b1:08:30:bd:04:d3:5b:3c:00:e2:90:5b:2a:
80:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:84:32:19:DD:BE:0F:D5:08:45:7C:B2:27:E5:99:34:32:B6:10:08
X509v3 Authority Key Identifier:
keyid:36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:cb:10:90:bb:16:f4:d6:f6:b8:49:33:df:06:0f:b0:6e:9a:
6b:00:13:d3:51:00:0c:47:7a:4a:91:3c:3c:cf:1b:9b:14:a5:
b0:96:61:b9:63:64:b3:16:8f:f1:50:26:c8:d4:76:72:50:86:
e3:4e:77:46:ad:c9:f0:12:a4:55:67:6d:5c:ec:53:b0:0f:ff:
a2:cf:06:20:50:01:6a:a2:06:d1:46:3e:70:5f:df:26:1e:bc:
27:c6:dd:13:93:0f:f1:fe:93:d7:0c:88:a9:c4:07:34:30:24:
40:7b:69:2a:81:e0:60:36:e4:6e:d4:07:34:31:3f:be:be:09:
83:27:8a:01:69:4c:57:46:b7:d1:de:42:33:42:18:58:ef:e1:
64:3c:9e:6b:1a:a9:49:e2:c6:20:01:c2:0e:85:a0:00:1d:61:
17:d6:b3:03:6a:3f:48:7b:05:68:50:2f:f8:ad:5c:96:8b:cd:
19:8a:d9:97:54:a2:6e:0d:e0:e7:4e:f5:a4:47:ed:63:02:69:
51:5f:74:00:4f:17:6a:7d:f2:b0:32:9c:ca:41:3d:75:fe:de:
5e:e8:d5:39:47:11:82:6c:aa:67:ea:ec:22:43:91:a9:55:b7:
99:f1:fc:3c:fd:4c:0c:f2:8a:9f:0a:4a:27:24:4e:86:95:de:
c2:f7:f9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:17:45 2026 by rpki-client