
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
File: N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft (raw, json)
Hash identifier: kV4zAvGDijRWZaI/pP27pVkAmRfpQ77JnVO4SU6v95c=
Subject key identifier: E6:8F:41:EF:32:C7:4D:F7:F2:19:67:E0:8D:3C:73:42:1A:98:F3:90
Authority key identifier: 37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB
Certificate issuer: /CN=A91F3256/serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB
Certificate serial: 9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
Manifest number: 96
Signing time: Wed 23 Sep 2026 07:13:31 +0000
Manifest this update: Wed 23 Sep 2026 07:13:30 +0000
Manifest next update: Wed 30 Sep 2026 07:13:30 +0000
Files and hashes: 1: N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl (hash: 7S4pfPNUwdYFa3OErH8XBEDql8VfXBeMQRy++WMk9uo=)
2: 33EB881ED9A011F08EC1CA9167D3641D.roa (hash: PsNugEmxb0VqmOUe342oKhYJR77dyuxdQVuRbBuOR54=)
3: BED8B2621D1B11F1B6F055AB103D8C67.roa (hash: TZiFnlQe5aFCTw3TXlx3VBuv8nDQSF0KBsx60QraJQ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl
rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:13:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155 (0x9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3256, serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB
Validity
Not Before: Sep 23 07:13:30 2026 GMT
Not After : Sep 30 07:13:30 2026 GMT
Subject: CN=6ab37c1b-2fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:41:32:97:e3:68:99:3f:4b:6f:2f:69:d8:50:
f5:2e:d3:ea:37:81:eb:c1:a7:a4:44:12:86:be:4b:
86:f3:80:af:25:bc:78:b5:fc:74:da:20:4f:e0:77:
56:ef:cf:ff:a3:82:e5:90:46:9c:16:c0:fd:d2:b0:
e0:f5:f5:f0:02:57:fb:e4:42:2d:c7:81:ed:97:ea:
7c:7b:05:f1:56:8f:2d:4d:45:56:db:49:2c:56:5b:
7b:b0:50:5c:b3:07:2b:ad:3f:34:8b:5a:18:13:e0:
af:f4:fe:ca:23:6e:49:05:f6:dc:f7:72:b6:80:ff:
aa:81:7f:79:6b:c8:d9:10:c1:81:6c:d5:09:0c:ea:
cd:f0:1a:32:bf:1a:7e:59:ee:43:56:19:8d:52:e4:
ad:c7:e4:56:d2:b8:de:ac:58:43:30:8e:b2:b8:85:
62:55:90:67:d5:62:76:66:5d:2a:d6:6f:42:91:e2:
ed:91:49:66:c4:cb:f7:29:b2:fe:66:a0:62:30:da:
39:68:3d:47:e5:cf:ab:5d:88:74:eb:37:d9:83:24:
9e:a2:9e:44:83:26:06:0d:46:77:18:cf:a3:c6:d2:
fc:fd:cd:a2:b3:26:0f:21:a7:21:da:6f:cc:b3:f8:
63:4d:40:cf:dd:b8:1a:d3:5b:ad:9d:ed:90:9e:47:
26:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8F:41:EF:32:C7:4D:F7:F2:19:67:E0:8D:3C:73:42:1A:98:F3:90
X509v3 Authority Key Identifier:
keyid:37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e1:d4:60:bf:79:26:1b:d3:9a:d4:f2:ea:b2:59:bb:92:4f:
9e:d6:03:0d:4d:20:b3:5d:f9:ee:aa:a4:54:31:18:3e:77:05:
ee:e2:18:fe:e2:6f:42:14:a8:fa:47:03:ca:ad:33:06:20:aa:
87:eb:e3:90:25:9e:39:02:ea:92:54:86:c5:a3:fe:e8:01:8c:
1e:0b:ee:3c:aa:45:d4:7b:93:51:63:f0:59:09:81:b5:bf:74:
99:8c:bf:49:e6:8d:3e:db:e7:e7:3e:1a:a7:ab:3a:33:91:80:
26:9e:d1:b9:84:82:24:3e:03:21:36:d9:29:e6:ef:b6:47:7e:
8f:75:a0:a1:fa:dd:c7:de:29:fe:b0:ca:fc:19:ea:0a:4b:c2:
c8:cb:e2:21:81:5f:16:a8:de:d3:ee:55:48:bb:e4:5d:59:f0:
fa:83:7b:fd:0f:df:e3:b8:63:96:b0:3b:2b:83:59:81:63:bf:
6a:7e:f9:32:a8:57:d9:02:f9:04:41:f0:57:1b:02:4a:aa:0c:
25:e2:35:74:fc:c1:85:0c:47:6b:59:d1:ea:78:19:4e:66:83:
b9:e7:14:27:27:9a:36:e6:4a:51:a0:b7:73:ad:c7:ab:b0:a0:
b7:8f:21:09:6a:86:f5:bb:2f:92:48:df:b6:66:4f:83:c9:b7:
f2:5b:0e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:59:36 2026 by rpki-client