
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
File: NcbYSDFsIdmTz25MBtYB3AXvxOE.mft (raw, json)
Hash identifier: pVsnzzqtH383W2AoJjtiPXDlIvvIeCLTvBxnHBAR2OE=
Subject key identifier: 46:6A:3E:E8:E8:61:7D:E8:44:CD:3B:15:16:25:FA:A6:5F:6E:95:28
Authority key identifier: 35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1
Certificate issuer: /CN=A91F473F/serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1
Certificate serial: 021C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
Manifest number: 0216
Signing time: Thu 21 May 2026 02:57:41 +0000
Manifest this update: Thu 21 May 2026 02:57:41 +0000
Manifest next update: Thu 28 May 2026 02:57:41 +0000
Files and hashes: 1: NcbYSDFsIdmTz25MBtYB3AXvxOE.crl (hash: zEJ0r9lV0N4hAormrhBgjCSuU20CNeW1zBxqOWMxddg=)
2: C416FBB02D6F11EEAC755B42C4F9AE02.roa (hash: 7y4oXNer6WsBPlefm0aDOGxXKn0I4ZDBbQhKmEfxFC8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl
rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:57:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 540 (0x21c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F473F, serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1
Validity
Not Before: May 21 02:57:41 2026 GMT
Not After : May 28 02:57:41 2026 GMT
Subject: CN=6a0e74a5-1dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a9:23:5b:80:51:c7:c9:a9:6c:b5:bf:33:7a:
c8:2e:2a:c2:12:cc:7d:e7:30:b4:de:54:2e:d8:7e:
9d:a6:c7:eb:42:69:dc:e2:11:93:90:63:c1:a9:4e:
ed:43:1c:f2:65:f4:83:e7:0a:03:1a:cb:48:d3:b9:
d8:27:e1:db:57:4e:da:96:3e:22:07:28:21:a3:94:
35:42:fe:ab:9b:f7:ef:72:89:71:af:71:2c:35:a8:
b2:b2:15:82:25:96:51:28:e0:fe:76:a0:96:f5:ab:
20:f1:26:0b:38:3d:8c:f0:f1:50:6c:32:a9:b6:16:
97:7f:82:2f:d9:b8:17:99:5a:14:41:da:ab:64:b4:
9a:b8:65:d9:33:d2:6d:ed:e5:55:3d:7b:86:6a:10:
68:92:35:30:50:c4:45:20:ff:45:f3:46:4c:dc:31:
ea:c0:74:68:61:47:b0:45:79:3d:66:4a:f9:30:4a:
d4:32:80:ca:13:13:7b:67:5f:98:0f:2a:ba:76:a3:
d1:65:89:02:94:83:f3:ef:c8:9e:91:3f:3d:dc:32:
b9:bd:e7:56:db:e8:d5:d0:9a:ab:26:8c:16:a0:52:
b9:7b:44:7d:ee:98:24:08:e2:cc:ee:50:09:72:06:
6f:f6:83:4c:ed:15:3b:48:5d:14:b9:96:82:dd:38:
53:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6A:3E:E8:E8:61:7D:E8:44:CD:3B:15:16:25:FA:A6:5F:6E:95:28
X509v3 Authority Key Identifier:
keyid:35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:02:35:0e:87:73:f1:c0:35:e9:f5:78:c5:a0:6a:c3:50:31:
04:66:95:9a:40:f4:b6:9e:77:ac:80:2d:ac:d3:73:74:23:af:
6a:d0:93:9e:ca:95:b9:89:c6:0d:03:92:89:e4:68:e5:8c:02:
c0:9e:aa:4c:e9:b4:f7:94:9d:4e:1e:b0:0a:08:2f:2a:17:c8:
fe:6a:d2:a3:e7:16:b3:bc:67:d1:ee:fc:43:0e:89:a0:36:07:
89:69:13:5c:89:df:96:3d:0f:20:43:cf:48:ac:59:0b:19:e5:
de:92:be:ee:81:15:7e:fe:06:be:03:0b:2f:d3:fc:ac:34:93:
68:2f:9c:44:9a:ac:98:03:05:e4:3f:6d:f5:e0:98:ad:a4:b7:
f4:e1:b7:30:33:a4:46:01:b5:59:b5:06:df:31:e8:3f:99:8b:
4b:80:39:55:1a:54:96:8b:cf:6a:e9:c7:9c:fa:e0:98:ec:94:
79:76:30:5e:31:2c:cd:ad:3b:7f:10:c7:4d:0a:81:e3:68:bb:
69:a3:18:14:22:16:e5:20:af:4c:c2:47:c7:4b:9b:c3:c7:5c:
ee:e6:4b:ff:9b:32:9a:48:f3:0d:6c:be:37:ba:bf:83:4e:8a:
05:18:e7:bb:7f:c8:d5:2e:09:c7:10:bb:9a:50:5d:2f:0c:c9:
cc:2d:58:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:06 2026 by rpki-client