
$ rpki-client -vvf rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
File: N5vU53MvGo0cOyItt3c8HBVBn0I.mft (raw, json)
Hash identifier: NPRE+ALy4htrxxqet+e0ex6gYoQ2O4dnqx6pg5ZBIZ0=
Subject key identifier: 49:0A:D6:D9:D7:92:91:26:AC:67:2D:B8:73:F4:76:2E:C3:C4:E0:47
Authority key identifier: 37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42
Certificate issuer: /CN=A912527F/serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42
Certificate serial: 032B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
Manifest number: 0321
Signing time: Mon 11 May 2026 01:13:47 +0000
Manifest this update: Mon 11 May 2026 01:13:46 +0000
Manifest next update: Mon 18 May 2026 01:13:46 +0000
Files and hashes: 1: N5vU53MvGo0cOyItt3c8HBVBn0I.crl (hash: dndoomZ6FmKke0BLRcsg2++llGIblaVmC1WRY0hABsc=)
2: 2C257150DBCA11EF920CC12BC4F9AE02.roa (hash: pM24w6vKLtsWmfPCHn0P6r3fycQVCoXTQ9k3lCEASV8=)
3: BE0481A4EFA111ED87AD1F0BC4F9AE02.roa (hash: iOuORY+LnmvKLHgsVsbokwSlIctdoiKuQFeKpaNglE4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl
rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 01:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 811 (0x32b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912527F, serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42
Validity
Not Before: May 11 01:13:46 2026 GMT
Not After : May 18 01:13:46 2026 GMT
Subject: CN=6a012d4b-ee0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3b:05:f5:72:a1:67:3a:55:ef:b6:af:cb:5d:
7b:e5:88:bf:60:95:86:bc:7f:34:44:ff:ca:4d:a4:
88:65:86:46:60:9f:46:bc:ec:32:6b:53:0f:70:c5:
e6:06:0b:63:8a:df:97:dd:49:76:48:0f:9a:c7:7c:
d6:bc:d7:c9:11:12:a3:65:df:7e:2a:94:6c:92:ea:
61:6b:59:21:eb:b4:1c:77:f1:7b:9e:aa:49:d2:e1:
1d:2c:d7:ec:73:72:e0:8e:c1:f9:a6:a5:05:03:fe:
42:2d:08:1c:35:5b:79:32:e6:70:27:cc:d3:0a:2c:
c8:87:03:47:2e:96:6f:08:31:8d:9a:81:44:fb:2e:
5a:ed:48:9a:c4:f7:42:ac:10:e6:87:0e:27:31:bf:
6b:bc:44:66:10:f0:e7:b6:e8:3d:22:40:5a:41:67:
ad:7d:c0:4b:8d:4c:5e:c9:d6:b8:9e:eb:42:44:03:
09:fe:6a:f6:24:dd:a9:6c:f9:77:50:1a:89:e5:5c:
37:ba:fe:46:6a:9d:32:6f:71:3a:0f:bc:48:85:7d:
04:04:cd:2a:47:67:62:b4:5d:38:05:33:f7:9d:bf:
eb:14:b9:44:fa:1e:0b:35:f9:5e:6f:40:20:b6:a7:
6b:db:d3:ce:47:37:c5:ed:94:b9:68:02:f0:22:9a:
dd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0A:D6:D9:D7:92:91:26:AC:67:2D:B8:73:F4:76:2E:C3:C4:E0:47
X509v3 Authority Key Identifier:
keyid:37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:58:54:ec:3f:e2:62:03:f9:49:7a:4b:06:5f:bf:6f:61:8a:
c1:7d:f3:d2:3e:04:32:5c:d2:8d:b4:32:08:0b:86:c5:f1:6c:
1f:83:31:5c:97:05:f2:4f:1a:de:67:76:1e:17:b0:60:6f:b3:
53:58:a5:e5:3f:95:74:d8:c0:87:e4:9a:e5:ec:43:f7:62:95:
3e:64:24:55:8b:fd:4d:43:a0:3b:c4:d0:9e:54:44:8c:82:7b:
e1:c5:63:58:94:98:d1:f2:55:0d:47:51:19:5d:99:10:2d:0f:
e4:27:76:b3:8d:0c:7f:4d:1d:d9:af:73:41:19:6d:0d:f4:e2:
c3:d9:b4:b0:a0:8e:e4:a8:60:5f:81:fb:92:b8:fc:08:1b:eb:
2c:0e:0e:3b:bd:77:9d:fb:a0:33:1e:65:e5:f3:ac:ae:c9:db:
e3:da:91:25:cc:0d:d8:1d:0e:ac:93:ef:49:f0:e0:2d:84:b8:
63:4f:48:61:4a:18:7f:fd:55:2b:d1:57:45:8b:86:07:65:af:
95:08:04:a7:e4:1b:77:0c:eb:af:31:ff:c5:86:9a:53:00:6f:
36:7b:17:86:ce:b4:fa:84:72:46:19:c4:96:81:eb:37:13:5a:
05:0e:a1:81:1b:05:cd:10:8a:ba:76:69:0f:62:e3:29:21:09:
96:80:c0:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjUyN0YxMTAvBgNVBAUTKDM3OUJENEU3NzMyRjFBOEQxQzNCMjIyREI3NzczQzFD
MTU0MTlGNDIwHhcNMjYwNTExMDExMzQ2WhcNMjYwNTE4MDExMzQ2WjAYMRYwFAYD
VQQDEw02YTAxMmQ0Yi1lZTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5TsF9XKhZzpV77avy1175Yi/YJWGvH80RP/KTaSIZYZGYJ9GvOwya1MPcMXm
Bgtjit+X3Ul2SA+ax3zWvNfJERKjZd9+KpRskupha1kh67Qcd/F7nqpJ0uEdLNfs
c3LgjsH5pqUFA/5CLQgcNVt5MuZwJ8zTCizIhwNHLpZvCDGNmoFE+y5a7UiaxPdC
rBDmhw4nMb9rvERmEPDntug9IkBaQWetfcBLjUxeyda4nutCRAMJ/mr2JN2pbPl3
UBqJ5Vw3uv5Gap0yb3E6D7xIhX0EBM0qR2ditF04BTP3nb/rFLlE+h4LNfleb0Ag
tqdr29PORzfF7ZS5aALwIprd7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEkK1tnX
kpEmrGctuHP0di7DxOBHMB8GA1UdIwQYMBaAFDeb1OdzLxqNHDsiLbd3PBwVQZ9C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTI3Ri9CQ0ZEQUZDQzEw
REQxMUVEODBBQTI0ODVDNEY5QUUwMi9ONXZVNTNNdkdvMGNPeUl0dDNjOEhCVkJu
MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL041dlU1M012R28wY095SXR0M2M4SEJWQm4wSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTI3Ri9CQ0ZEQUZDQzEwREQxMUVEODBBQTI0ODVDNEY5QUUwMi9ONXZVNTNNdkdv
MGNPeUl0dDNjOEhCVkJuMEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIFhU7D/iYgP5SXpLBl+/b2GKwX3z0j4EMlzSjbQyCAuGxfFsH4MxXJcF8k8a
3md2HhewYG+zU1il5T+VdNjAh+Sa5exD92KVPmQkVYv9TUOgO8TQnlREjIJ74cVj
WJSY0fJVDUdRGV2ZEC0P5Cd2s40Mf00d2a9zQRltDfTiw9m0sKCO5KhgX4H7krj8
CBvrLA4OO713nfugMx5l5fOsrsnb49qRJcwN2B0OrJPvSfDgLYS4Y09IYUoYf/1V
K9FXRYuGB2WvlQgEp+QbdwzrrzH/xYaaUwBvNnsXhs60+oRyRhnEloHrNxNaBQ6h
gRsFzRCKunZpD2LjKSEJloDALw==
-----END CERTIFICATE-----
Generated at Wed May 13 00:52:28 2026 by rpki-client