
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
File: N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft (raw, json)
Hash identifier: V0XymF15yLnP9F1A7KV09nKexgZFhjiFJ9irlfx5S9U=
Subject key identifier: 30:86:2F:AF:9F:11:85:3E:DA:4E:4A:26:2B:A8:37:04:0B:DE:61:7A
Authority key identifier: 37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB
Certificate issuer: /CN=A91F3256/serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB
Certificate serial: 53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
Manifest number: 50
Signing time: Mon 11 May 2026 08:26:57 +0000
Manifest this update: Mon 11 May 2026 08:26:57 +0000
Manifest next update: Mon 18 May 2026 08:26:57 +0000
Files and hashes: 1: N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl (hash: fwqtCnloHZovZ0rURiqexT+aJ1Dg2jg71TVmIvu2D7E=)
2: BED8B2621D1B11F1B6F055AB103D8C67.roa (hash: EjJ1CDCwau1fKrzrYHxK/Qrh8GUA8jF4SY+Z2pjXM+w=)
3: 33EB881ED9A011F08EC1CA9167D3641D.roa (hash: BgD9Nozy6YrPBl3k/LaQh1iksmIlumLLGLfxZ8EsuWo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl
rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3256, serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB
Validity
Not Before: May 11 08:26:57 2026 GMT
Not After : May 18 08:26:57 2026 GMT
Subject: CN=6a0192d1-4857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7c:e3:6e:92:19:bd:13:ea:14:6f:d4:24:6b:
75:11:31:31:2c:ed:c0:a2:e2:e3:f5:ee:a8:b9:f5:
4e:57:81:d2:e0:38:06:36:e1:4d:a0:62:1a:73:ee:
27:8c:fb:0c:f7:25:35:b2:ca:dd:59:9d:0f:74:f8:
ad:99:bf:07:3f:c3:a0:ea:9b:d7:e7:12:ca:0a:4c:
dc:bd:71:e5:70:64:69:a9:10:25:49:d9:fb:a1:7f:
c3:60:29:e6:b7:28:f3:32:a9:f9:69:c9:40:3f:b6:
3e:f4:7d:9c:aa:07:51:ea:c7:0a:bc:64:31:d8:49:
fd:22:6c:76:f6:2c:95:62:b9:db:99:cf:11:68:ad:
0d:cf:50:ca:a3:fc:34:9d:b8:b5:42:6a:d9:38:c4:
97:09:dc:e5:43:a5:fc:7f:8f:0c:ca:fc:a8:98:03:
84:dd:64:0e:f3:ab:46:6a:00:de:cb:97:b5:e7:1c:
8f:a9:66:4e:bc:e3:6d:5b:bd:36:1e:e2:b4:36:97:
a3:72:35:37:41:4e:47:75:10:75:aa:7b:a1:9e:e5:
a6:a8:5a:a2:4f:67:d8:3c:2e:1d:57:a5:9e:82:60:
76:a7:e2:a8:86:25:ee:13:20:de:b7:fb:74:78:77:
95:b0:d6:5a:64:9d:c5:f5:c5:36:ad:5a:02:8b:87:
6f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:86:2F:AF:9F:11:85:3E:DA:4E:4A:26:2B:A8:37:04:0B:DE:61:7A
X509v3 Authority Key Identifier:
keyid:37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:27:a9:bb:f8:c7:fd:6a:10:5e:1e:50:89:8d:ab:ae:c7:d0:
a5:e5:4e:ec:c0:63:e1:3d:4a:02:ae:09:c7:b0:63:97:ba:53:
a9:5b:ac:76:80:25:62:b0:80:df:5f:1f:44:ee:2d:2e:88:76:
87:0f:d8:3b:c3:cd:0b:8f:c2:1d:d6:6a:90:67:94:85:e1:eb:
46:39:2e:6f:8b:42:7a:d4:4c:4f:81:10:15:08:75:b1:cc:5d:
53:54:f5:43:0c:76:54:01:39:9a:39:fc:15:e9:45:dd:d6:81:
eb:ed:49:85:e0:b4:49:f6:a2:12:f9:60:f7:f8:c4:d9:16:73:
f8:38:c7:f0:44:bd:c8:ab:a1:4e:29:bc:52:4d:8f:85:5c:e4:
81:2c:1c:6b:e0:b0:28:a5:15:97:da:0e:8f:6a:56:ab:16:e5:
a6:c6:71:48:f1:52:c2:f9:44:b0:6c:1d:fd:91:23:e0:df:32:
2e:72:79:fe:d3:80:ce:0a:dd:a7:e9:42:45:5a:96:c8:b6:3a:
8b:3e:bc:96:a1:82:ed:6e:e9:1d:1d:d3:3b:92:9f:0b:27:09:
cf:35:48:37:4e:f5:5e:bf:bb:8b:22:0c:f4:8d:b7:e9:38:2e:
87:0b:08:ac:47:da:c4:b8:d8:93:80:7e:48:85:28:1e:0e:40:
95:aa:71:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:12:49 2026 by rpki-client