
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft
File: NHTCU5hhEAr9ljoWPIAtAmT47H0.mft (raw, json)
Hash identifier: 8R/atHHgVn+QFZCGB49AGVND/a3HvQTY2Ff8pKl00mM=
Subject key identifier: E7:1F:E8:CC:ED:B0:01:AB:50:7D:A2:FF:55:3A:DE:D5:A4:26:39:69
Authority key identifier: 34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D
Certificate issuer: /CN=A91D63AF/serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D
Certificate serial: 01D9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft
Manifest number: 01CB
Signing time: Mon 01 Jun 2026 04:38:06 +0000
Manifest this update: Mon 01 Jun 2026 04:38:05 +0000
Manifest next update: Mon 08 Jun 2026 04:38:05 +0000
Files and hashes: 1: NHTCU5hhEAr9ljoWPIAtAmT47H0.crl (hash: aTNWHDMOpEL3tIe6ekSpTf+K3F4Vwmws/QcOafaGKIY=)
2: 8C508DC055F711EFA5200828C4F9AE02.roa (hash: +vcgHqQaVF6a8tBeWlRZvq+SFdKItNicDBwJjhcEwPQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl
rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 04:38:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473 (0x1d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D63AF, serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D
Validity
Not Before: Jun 1 04:38:05 2026 GMT
Not After : Jun 8 04:38:05 2026 GMT
Subject: CN=6a1d0cae-4b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d1:f0:3e:ef:00:8b:be:17:31:1b:9c:26:20:
0f:ef:ef:3a:08:05:a8:c6:60:44:a9:b2:15:fc:61:
0d:94:9a:49:e4:70:ed:24:a3:7a:b2:10:0d:1a:dc:
57:e4:d8:15:63:52:05:ba:48:06:e5:33:5d:51:6a:
d8:a7:86:ed:46:4a:54:0d:fa:01:25:a5:50:c2:ac:
9c:e2:40:4e:ad:47:83:17:75:85:49:c4:c5:cf:1c:
ec:db:ab:bf:17:83:e2:6e:9b:3a:5c:8c:e7:20:52:
7b:b4:7c:ba:07:8d:d3:93:11:9c:e7:79:c6:cf:4c:
31:6a:66:5d:27:41:3f:37:0e:6f:65:e1:1c:9c:da:
38:d5:c5:2c:52:8a:aa:1f:a6:3a:97:b8:69:4b:be:
8f:54:9e:be:c6:ac:c8:e0:b5:75:b3:95:ff:eb:13:
b2:73:57:68:d8:6b:fe:94:01:3d:bb:d3:92:74:6f:
72:a2:e2:b2:36:4c:70:9e:98:1e:df:ad:82:a9:61:
1f:6b:34:bb:7f:03:ed:d0:13:d0:c3:10:b4:33:90:
e2:31:76:4f:ba:ff:16:0e:d3:99:70:e6:ea:3c:cd:
32:e0:c4:f6:85:6b:d4:ff:0d:17:aa:47:cf:3c:3e:
c9:6c:02:8e:e3:21:6e:0e:4c:94:4e:28:63:02:27:
49:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1F:E8:CC:ED:B0:01:AB:50:7D:A2:FF:55:3A:DE:D5:A4:26:39:69
X509v3 Authority Key Identifier:
keyid:34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:c5:66:9c:19:26:dd:de:4b:e5:3b:5c:60:89:f7:de:89:bf:
26:69:0b:03:d7:23:84:f9:f1:49:71:b9:77:6e:94:a5:39:05:
ab:75:1e:9e:3c:02:ec:de:c7:69:5f:41:31:f8:f0:ae:b2:15:
eb:d7:99:b4:8c:86:6f:83:67:ba:cc:6a:92:70:68:08:ec:e3:
e5:1e:eb:71:7a:86:85:a4:15:c5:a5:b7:95:45:73:31:ba:82:
12:e2:2b:ec:ec:5a:89:8c:bc:a9:9a:9c:24:96:40:3a:b8:68:
40:6f:09:4a:53:98:a5:2b:06:26:b5:7c:16:df:e7:fd:a8:fd:
25:57:d5:fd:11:0e:45:1b:f9:99:a7:8a:61:b8:c6:08:61:de:
33:a4:f5:18:46:df:7a:df:df:73:2e:a5:33:c3:1c:5c:5e:84:
90:d4:43:87:a7:be:1c:6c:8e:09:b0:66:7f:ef:12:aa:f4:37:
80:ab:9b:f9:25:b0:66:d6:d1:a4:0f:50:0a:54:e5:55:72:71:
7f:50:78:18:94:8c:76:63:d0:c4:37:bd:31:25:b8:d8:1d:60:
73:7c:6e:e9:04:d4:38:86:8c:7c:57:09:f0:a0:34:58:29:43:
2c:c4:b4:9d:77:4d:33:a0:cb:8b:bf:37:0c:45:ac:ab:27:ba:
82:2b:84:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:18:48 2026 by rpki-client