
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
File: Nocz_cVgxeuJ5FJA331AOcsvYQg.mft (raw, json)
Hash identifier: PZj8LrIVGsNM5Qa47XdqGP4qnl3ku1AYe2cTFWuxthI=
Subject key identifier: DB:EB:BF:E7:00:F3:D9:4D:16:4B:E4:C0:38:03:3B:D7:58:F1:65:57
Authority key identifier: 36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08
Certificate issuer: /CN=A91C97F5/serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108
Certificate serial: 034F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
Manifest number: 0343
Signing time: Tue 27 Oct 2026 00:49:58 +0000
Manifest this update: Tue 27 Oct 2026 00:49:58 +0000
Manifest next update: Tue 03 Nov 2026 00:49:58 +0000
Files and hashes: 1: Nocz_cVgxeuJ5FJA331AOcsvYQg.crl (hash: NryARwJEgSUtEE6q4am5CLR+DN94jlhJl5OC4mtX+7Q=)
2: 48B639C8B85E11F0B0F0B01CC4F9AE02.roa (hash: pcUI164QP94dET6vxGqZiMWs2E97pOagQxpOZq2263A=)
3: 020D49E0283211ED9E29FA70C4F9AE02.roa (hash: bnjR0+NKXKAmWxRc9D3E4vCO8glI5TIRHVBCY29e/KE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl
rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 00:49:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 847 (0x34f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C97F5, serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108
Validity
Not Before: Oct 27 00:49:58 2026 GMT
Not After : Nov 3 00:49:58 2026 GMT
Subject: CN=6adff536-48ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:37:bc:93:bf:15:62:cf:c1:77:41:a7:81:e2:
78:5c:fc:6b:fa:6c:31:c2:d9:55:6f:ec:d3:00:df:
34:a5:d9:88:b6:d5:e3:bd:60:19:de:61:78:3e:63:
da:a0:6c:f5:aa:2b:30:86:cc:7a:70:cd:3e:32:ce:
ff:7b:02:42:c3:0d:33:d3:37:ea:07:25:9c:11:66:
f1:b1:8a:16:48:e5:94:91:0c:b0:e5:1f:b6:13:e2:
10:2f:4f:2b:79:c9:ce:33:92:02:8f:00:33:c7:57:
78:e1:9d:07:bc:7d:45:d2:3d:54:c9:31:d8:9e:52:
40:32:d1:02:79:63:9c:9b:2c:c2:de:0c:da:2a:28:
e5:47:8c:94:3d:ff:bd:c4:00:eb:40:12:d7:63:db:
9a:50:99:95:6c:fc:93:cc:6f:cf:fc:7d:d5:06:16:
9e:ad:91:75:b9:d8:4a:9f:55:b7:c6:70:a7:1d:08:
9b:1a:37:8a:f5:4e:0e:8c:41:3a:db:a1:44:f4:07:
88:47:ac:5c:1f:8e:59:85:8d:41:4b:c0:d7:80:f9:
fa:b9:bb:b5:d7:fa:d6:05:0e:b0:b0:4a:bd:cc:09:
a6:6a:40:57:bb:24:20:54:d7:ad:5e:ce:bb:02:c8:
aa:5f:e9:e6:0c:4e:d9:55:69:7f:cf:10:94:90:2d:
ca:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EB:BF:E7:00:F3:D9:4D:16:4B:E4:C0:38:03:3B:D7:58:F1:65:57
X509v3 Authority Key Identifier:
keyid:36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:8f:73:58:a0:61:89:f5:e9:e4:86:f3:98:95:c9:ea:8f:72:
97:2c:8f:ac:55:6a:ef:fe:a9:c8:1c:e9:eb:ed:1a:bd:a4:58:
25:6a:0e:19:f6:34:49:61:29:c3:9b:57:4c:2f:26:e8:de:77:
35:d7:69:9d:60:8a:a4:16:9d:28:48:e6:83:70:49:ec:8c:6b:
c0:12:74:42:e5:31:78:54:28:04:39:fb:a0:8c:99:ac:87:3a:
d4:b2:d1:ac:16:97:27:c4:25:4a:7f:ad:59:8a:99:8e:44:cf:
cc:70:e6:61:cc:b1:ec:23:8e:13:68:24:76:bc:88:84:b7:fe:
8c:3b:89:30:03:ee:6a:9f:9f:fa:b0:48:a6:0f:f2:11:66:03:
85:20:bd:96:bf:0c:c9:77:3e:65:68:6f:d0:c0:35:cb:c2:88:
4f:ba:91:84:1b:7c:6a:f9:47:20:32:06:b1:5b:aa:f0:a0:64:
c2:00:9f:d4:4a:e8:d1:7d:06:99:00:a7:65:46:9c:a0:9e:5e:
dc:82:df:c9:25:38:52:ca:16:d0:df:ab:77:dc:d7:c0:cc:9f:
8e:c8:cf:c3:98:af:15:64:43:84:21:89:e6:a6:ee:4f:2f:7b:
5b:4f:69:ae:23:8c:c3:b8:23:ec:09:29:de:e1:20:0c:e1:d6:
aa:77:e3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:24:44 2026 by rpki-client