
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
File: N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft (raw, json)
Hash identifier: 5UIIpJL8zsqJRREnQ25eB98D91vOvWBxWyS/x6RFvxY=
Subject key identifier: A1:51:A0:12:BC:14:93:EF:0B:4A:CA:44:9B:C5:B0:DD:FD:27:A8:5D
Authority key identifier: 37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB
Certificate issuer: /CN=A91F3256/serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB
Certificate serial: 7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
Manifest number: 76
Signing time: Thu 23 Jul 2026 09:47:29 +0000
Manifest this update: Thu 23 Jul 2026 09:47:28 +0000
Manifest next update: Thu 30 Jul 2026 09:47:28 +0000
Files and hashes: 1: N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl (hash: Peg91A9DUKNyXkvRlHMZUe4dWDOatLbcgs56JImNftE=)
2: BED8B2621D1B11F1B6F055AB103D8C67.roa (hash: TZiFnlQe5aFCTw3TXlx3VBuv8nDQSF0KBsx60QraJQ8=)
3: 33EB881ED9A011F08EC1CA9167D3641D.roa (hash: PsNugEmxb0VqmOUe342oKhYJR77dyuxdQVuRbBuOR54=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl
rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:47:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3256, serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB
Validity
Not Before: Jul 23 09:47:28 2026 GMT
Not After : Jul 30 09:47:28 2026 GMT
Subject: CN=6a61e331-876d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:75:2e:73:b7:bd:be:35:2b:82:12:73:c4:55:
04:25:59:26:1c:84:e1:ea:14:fa:fb:53:56:bf:82:
7e:93:45:6d:e7:90:31:3e:33:21:34:17:a3:31:1a:
03:a0:88:df:4b:c2:94:59:6b:43:03:fa:41:d0:69:
08:17:58:9e:0f:56:ea:85:50:d8:85:b8:e5:1a:db:
fd:2d:54:43:c8:e8:2e:c6:a0:03:32:ec:48:5a:6c:
14:7b:de:a6:56:ba:40:82:f5:b4:e3:7b:7c:7c:e4:
73:f8:f5:9a:1d:ce:43:02:00:3d:d5:f2:82:1f:ca:
4a:97:68:40:f8:61:3d:b6:d7:c1:7d:fe:ed:cc:eb:
63:5a:bc:51:88:13:83:91:ec:e1:7c:03:ce:59:99:
6b:18:cf:1a:fd:62:87:66:41:36:d9:9e:22:94:ca:
e0:b9:8c:8d:11:8a:89:c6:6e:c2:68:06:a0:95:b2:
17:5e:d1:c8:35:6a:d6:8a:fb:45:55:53:a2:03:b5:
06:01:14:89:ae:4a:7a:c6:e5:95:e2:4c:4e:0b:4d:
39:f8:37:f4:77:7e:5d:4d:fa:ec:a1:1e:2e:7b:78:
90:e1:be:e9:e4:5a:44:65:27:61:53:72:11:53:fe:
91:cf:79:d1:3d:98:55:37:4a:7a:ba:c2:69:89:81:
80:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:51:A0:12:BC:14:93:EF:0B:4A:CA:44:9B:C5:B0:DD:FD:27:A8:5D
X509v3 Authority Key Identifier:
keyid:37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:98:e0:fa:f7:d0:22:c8:62:27:53:66:75:1e:e3:43:74:41:
a9:3f:14:87:70:01:3d:a6:1d:1f:c7:b7:93:53:5e:bb:b9:60:
0a:0f:49:8b:f0:fe:52:13:71:2d:ad:43:d2:73:dd:f8:88:b9:
ae:7a:eb:4b:d3:b6:20:81:f5:13:e6:4a:5d:7f:d5:52:66:fc:
67:f3:82:6e:16:f9:d8:2d:47:96:03:4c:a1:5e:77:f4:65:39:
b1:f8:ab:ea:df:ea:fa:07:ed:dd:4c:e5:1e:08:a7:9f:b4:3c:
df:5d:9b:a2:b7:ad:54:1c:97:0d:7a:77:02:c2:89:11:6e:58:
4d:9f:a5:32:97:28:a8:a7:84:80:b1:57:a4:ea:3a:21:59:bf:
d2:d9:5d:7d:bf:fc:93:d8:d4:b0:95:55:71:04:57:9d:a6:7a:
4f:08:38:3e:2f:de:91:28:ee:d5:43:ef:42:49:7e:a2:d7:fc:
06:b3:3e:d7:40:f1:c4:c6:7e:32:cd:b2:dd:19:12:5c:cd:c2:
b4:3d:a1:9d:d9:01:94:7c:cc:fd:32:d7:e7:cc:4e:9f:e4:e2:
b6:55:cf:e7:de:3c:87:b8:65:bd:36:1f:6e:a6:e6:7f:a3:03:
6b:db:28:94:40:15:d4:ed:61:1a:d3:ab:0e:e7:b1:22:7b:9e:
01:8a:49:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:23:24 2026 by rpki-client