
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
File: N5vU53MvGo0cOyItt3c8HBVBn0I.mft (raw, json)
Hash identifier: EklXrbXy5/oY3i2sRSGH63keSyeeL1nVpJoY14NnhIQ=
Subject key identifier: B3:FE:1B:01:6E:C8:3E:FB:57:D0:B6:C9:2A:04:BE:87:E2:19:0D:B8
Authority key identifier: 37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42
Certificate issuer: /CN=A912527F/serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42
Certificate serial: 0370
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
Manifest number: 0366
Signing time: Wed 23 Sep 2026 00:28:43 +0000
Manifest this update: Wed 23 Sep 2026 00:28:42 +0000
Manifest next update: Wed 30 Sep 2026 00:28:42 +0000
Files and hashes: 1: N5vU53MvGo0cOyItt3c8HBVBn0I.crl (hash: lNbym4dSmqooJyNFcZfvp/x6p7jY+61Sp1dSio+KWQA=)
2: 2C257150DBCA11EF920CC12BC4F9AE02.roa (hash: pM24w6vKLtsWmfPCHn0P6r3fycQVCoXTQ9k3lCEASV8=)
3: BE0481A4EFA111ED87AD1F0BC4F9AE02.roa (hash: iOuORY+LnmvKLHgsVsbokwSlIctdoiKuQFeKpaNglE4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl
rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 880 (0x370)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912527F, serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42
Validity
Not Before: Sep 23 00:28:42 2026 GMT
Not After : Sep 30 00:28:42 2026 GMT
Subject: CN=6ab31d3a-94a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:67:70:f7:8b:22:e0:50:e5:bc:d3:81:5d:50:
98:3d:91:68:9d:71:00:1b:cb:00:0e:5b:ad:26:f9:
4d:70:94:58:86:52:48:7a:8f:1e:97:d8:0c:69:ff:
bb:95:c8:af:e4:c7:1f:82:b8:7e:b2:cd:cc:7f:62:
84:88:13:5a:ce:bf:10:07:f6:1b:b2:b5:f5:ce:3c:
5f:e0:57:22:d7:3c:71:8d:31:f8:a7:7a:ed:33:56:
25:4d:f6:26:a4:06:6a:3d:96:56:15:4b:da:57:ff:
8d:9b:4f:02:f8:22:5d:48:28:98:35:9b:4e:d3:be:
b7:4e:56:14:fb:1d:3d:57:25:6b:d0:eb:a1:19:5c:
56:82:e3:d1:aa:e9:94:1a:a9:3c:49:43:87:2b:37:
98:2c:24:b5:96:ce:9c:cd:da:35:ae:84:12:72:ce:
fa:49:87:1c:6e:c8:d2:f0:f0:c3:8f:01:58:1f:20:
00:16:b9:c3:b7:c6:e6:ef:0d:c8:63:0c:58:b7:ef:
e6:71:98:df:f2:fa:34:75:7a:d9:01:c8:be:30:c8:
da:b0:80:8b:68:e1:a6:da:0c:19:07:ab:18:cf:a7:
75:92:76:f7:9d:36:d7:80:4e:5b:36:17:65:d6:61:
96:79:41:e4:39:e9:db:20:41:57:a0:2a:56:b5:ea:
29:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FE:1B:01:6E:C8:3E:FB:57:D0:B6:C9:2A:04:BE:87:E2:19:0D:B8
X509v3 Authority Key Identifier:
keyid:37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:67:dc:d2:7c:c2:24:7c:ef:9d:ee:fa:2c:f3:3f:79:55:48:
9a:45:4c:6b:77:0c:38:8f:69:5a:c4:19:4c:40:15:28:9a:4f:
8b:7a:e3:4f:d4:e9:eb:08:a5:0a:98:fa:4a:e4:25:7f:16:dc:
91:b6:ad:24:89:cf:4b:e2:53:e8:29:c8:cd:cb:06:8f:03:42:
cb:03:73:f7:60:96:4e:e1:6a:cb:2b:e5:77:c0:1a:c6:18:0c:
d2:ab:0d:46:3f:29:75:2f:44:58:d2:4c:5f:1b:0d:f2:fb:46:
00:a5:3c:16:c6:47:c4:09:76:2f:6c:7c:99:4c:b9:21:60:cf:
11:d5:f8:18:db:90:d8:62:27:f0:04:f9:df:a9:6d:c3:86:39:
a1:5b:86:36:95:2d:c9:4f:15:87:67:16:4d:0e:8c:39:a8:8b:
3a:8f:4c:94:1a:8d:85:cb:5e:42:2d:62:e2:ba:e8:5e:ab:35:
75:87:be:09:e8:7b:e2:1d:c9:44:a1:f4:3e:11:a1:d6:19:1f:
f1:1e:1d:70:99:87:f6:bc:6a:f9:3a:15:22:75:22:d7:5d:13:
90:7e:97:c4:26:b6:c2:98:dd:36:09:38:6e:22:ce:44:f0:28:
f6:95:01:fb:ae:6e:be:39:d7:98:91:d6:2d:1f:6a:2c:92:bb:
eb:36:14:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:06:46 2026 by rpki-client