
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft
File: N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft (raw, json)
Hash identifier: rXJLx25mIBtTxORsnH9bZK2mQg0lSUK+oj3tcrc7Io4=
Subject key identifier: 1A:76:02:12:20:32:DB:CB:27:AA:56:AB:47:F6:68:C4:CC:53:90:E6
Authority key identifier: 37:74:6A:86:93:B3:B8:3F:50:1D:71:5D:10:30:B9:54:72:BE:3A:F6
Certificate issuer: /CN=A91F53A5/serialNumber=37746A8693B3B83F501D715D1030B95472BE3AF6
Certificate serial: 05
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N3RqhpOzuD9QHXFdEDC5VHK-OvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft
Manifest number: 04
Signing time: Wed 13 May 2026 00:48:34 +0000
Manifest this update: Wed 13 May 2026 00:48:33 +0000
Manifest next update: Wed 20 May 2026 00:48:33 +0000
Files and hashes: 1: N3RqhpOzuD9QHXFdEDC5VHK-OvY.crl (hash: dyLAGKPbMZxvCLc8ujqELyNvx5uQrZFdtEGyhM0o3Rw=)
2: 8F3BB5304DCD11F191088215B4833773.roa (hash: lA3Zts59kRJf+K26QY68A9dBrBr6aTNWe+CFgHwsnZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.crl
rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N3RqhpOzuD9QHXFdEDC5VHK-OvY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F53A5, serialNumber=37746A8693B3B83F501D715D1030B95472BE3AF6
Validity
Not Before: May 13 00:48:33 2026 GMT
Not After : May 20 00:48:33 2026 GMT
Subject: CN=6a03ca62-91c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:be:8a:d3:32:53:2b:c8:25:05:c7:a3:6f:d2:
56:da:50:b2:4f:9e:7c:b5:64:94:69:82:5e:77:6d:
d9:f7:06:27:20:ea:e1:1f:b3:43:7e:f9:82:8b:75:
62:57:e0:92:78:c5:66:b4:94:d8:72:90:e1:84:77:
ef:52:b7:ff:b6:96:9d:64:11:3d:f3:3e:3b:f1:f3:
c0:76:c8:24:30:c5:49:f4:3d:64:b2:f7:c6:55:9a:
cb:d9:d6:e4:82:e8:44:e1:71:49:9c:ee:90:5f:50:
ca:ef:08:e9:2e:3b:6b:73:7e:c8:27:47:d3:1d:44:
d6:3d:97:32:71:ff:9b:9c:2a:41:e0:36:46:41:2b:
c8:21:89:4d:76:47:15:e4:65:a1:ca:70:61:b7:f5:
6f:9a:0d:26:7a:2c:d4:42:30:12:c5:6e:ce:16:79:
cf:7e:ad:84:0d:45:3e:38:f1:73:8c:9a:57:f9:56:
2a:e4:17:3c:64:e7:43:4d:c3:a2:b7:4f:49:17:ae:
1a:a5:19:46:d1:cf:2c:a6:8d:55:fb:d6:c6:30:cd:
64:d6:da:ba:19:0b:8a:70:4e:b5:f6:bb:1f:24:c0:
69:e5:f0:93:16:69:d1:6a:e4:03:ab:61:23:dd:a7:
d6:9c:44:32:f6:dc:bc:65:d5:a5:58:cb:d0:fd:39:
db:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:76:02:12:20:32:DB:CB:27:AA:56:AB:47:F6:68:C4:CC:53:90:E6
X509v3 Authority Key Identifier:
keyid:37:74:6A:86:93:B3:B8:3F:50:1D:71:5D:10:30:B9:54:72:BE:3A:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N3RqhpOzuD9QHXFdEDC5VHK-OvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:33:b5:f1:7b:c3:de:ee:ae:ae:6b:ac:a2:ab:0c:0a:a1:48:
7c:ee:67:e4:45:51:52:4b:cf:6e:32:c1:bf:39:c9:7b:b9:df:
30:1d:44:63:07:20:39:3e:80:d9:67:fb:76:3e:d4:3a:b7:55:
d4:10:a3:d1:11:ee:9d:34:d9:8c:db:bc:79:ea:9f:ef:33:df:
7e:09:73:bc:d4:13:2b:da:43:73:bb:4f:64:6a:01:10:0e:65:
d9:d2:98:19:19:39:0e:cf:a7:68:8d:48:70:59:d3:e3:76:b8:
77:0b:d4:dd:fe:90:85:8c:15:78:92:30:e2:98:7d:2d:2b:1e:
3b:32:0f:c9:4d:bd:f1:03:00:0d:f9:5f:a7:bb:ed:e4:20:46:
32:56:ed:86:19:97:f4:2b:8d:f3:3b:3a:1d:b2:0e:c5:d9:ff:
ed:74:01:d3:28:9c:a8:8f:a5:df:87:1b:1f:b4:74:f9:07:a3:
ce:db:c9:05:64:f9:5a:47:9a:6b:a3:9a:29:2f:ed:92:30:94:
be:1a:84:b4:5a:c5:49:ea:19:f4:e9:b3:96:a1:f2:55:3d:24:
b2:ad:eb:cd:6c:06:6a:69:45:ac:ae:7a:7f:c2:38:2a:4f:80:
d3:42:16:a8:a6:90:4a:30:70:d2:d1:de:b6:6f:52:33:c1:1f:
7a:dd:24:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:56:34 2026 by rpki-client