
$ rpki-client -vvf rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
File: N5vU53MvGo0cOyItt3c8HBVBn0I.mft (raw, json)
Hash identifier: QuV8zmKx6Su2OPvZ7Y3pIz0Qsdh4sPj0pkXgIH77vwk=
Subject key identifier: 7E:74:90:0F:AC:0B:7F:68:AE:A0:7C:6D:56:81:D1:D5:00:11:1A:79
Authority key identifier: 37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42
Certificate issuer: /CN=A912527F/serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42
Certificate serial: 030D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
Manifest number: 0303
Signing time: Fri 13 Mar 2026 00:44:49 +0000
Manifest this update: Fri 13 Mar 2026 00:44:49 +0000
Manifest next update: Fri 20 Mar 2026 00:44:49 +0000
Files and hashes: 1: N5vU53MvGo0cOyItt3c8HBVBn0I.crl (hash: ST4bpxHJwF1ailsc+4TIjNppyspVFOQo99Np2SsEID8=)
2: BE0481A4EFA111ED87AD1F0BC4F9AE02.roa (hash: iOuORY+LnmvKLHgsVsbokwSlIctdoiKuQFeKpaNglE4=)
3: 2C257150DBCA11EF920CC12BC4F9AE02.roa (hash: pM24w6vKLtsWmfPCHn0P6r3fycQVCoXTQ9k3lCEASV8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl
rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 00:44:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 781 (0x30d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912527F, serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42
Validity
Not Before: Mar 13 00:44:49 2026 GMT
Not After : Mar 20 00:44:49 2026 GMT
Subject: CN=69b35e01-94d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:65:cd:cd:47:7d:5d:d1:1a:ab:0a:5d:8d:d7:
c1:1a:cd:58:0b:2a:28:12:f5:ee:fc:9e:f4:f2:5f:
64:06:cf:29:76:ca:c8:4d:cf:29:eb:82:c0:79:ba:
38:da:39:22:75:de:4e:60:f7:68:a1:2f:ae:ac:dc:
2a:4f:d0:34:7a:8d:df:5f:90:c3:95:fc:f2:e3:76:
76:32:70:1f:a0:b4:f3:e2:e6:95:75:d5:81:ca:c7:
26:47:82:90:db:98:86:6c:3e:e3:ad:c4:04:bd:40:
5c:ec:49:fd:89:54:88:c1:dd:82:e8:bd:11:bc:5f:
35:91:b4:11:5f:b7:6e:07:cb:6d:dc:ca:ca:31:b8:
9a:97:e5:ac:64:4c:23:a6:59:d1:a6:5d:e3:02:ee:
ff:c6:a0:5b:5f:68:a4:08:cf:ec:d3:5e:f6:74:72:
11:4a:4f:4c:8e:4f:68:7c:77:e7:2a:7b:3c:8a:23:
42:bc:d4:de:49:21:69:b2:50:79:27:05:98:58:0a:
48:3d:82:e9:e3:48:6f:99:c9:08:31:07:6f:ab:0a:
43:4c:0d:1e:8b:7f:c7:a2:ee:46:3a:5c:d5:0c:67:
6a:02:3d:83:1b:87:33:3c:6e:0f:fc:90:f1:c9:18:
25:80:bb:e2:ac:14:80:b7:5e:32:bc:cb:39:b2:54:
39:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:74:90:0F:AC:0B:7F:68:AE:A0:7C:6D:56:81:D1:D5:00:11:1A:79
X509v3 Authority Key Identifier:
keyid:37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:ec:4c:ce:be:2d:5d:91:6b:d0:e6:6c:bd:67:fc:cb:ae:71:
7d:ca:74:45:b8:60:48:ff:ed:51:cb:8d:d7:3a:c7:d1:39:65:
74:12:4f:dc:b0:06:1f:51:f8:77:1d:20:f8:df:14:08:dd:c1:
63:fc:fa:1f:78:c6:73:bc:e8:a4:06:0d:08:a9:7f:ca:21:a9:
70:06:86:3b:97:fa:97:7d:86:bb:92:dc:91:66:33:eb:cf:5c:
eb:b4:9e:26:8f:fa:00:34:f3:e2:46:25:d8:fd:6f:68:63:0e:
92:04:88:71:b8:30:9d:74:9a:4e:7e:b3:12:2e:4c:72:25:e4:
3a:ee:e2:6d:c2:0d:1a:c4:aa:fd:ec:33:6c:a6:62:4e:0a:08:
40:78:dd:19:29:19:f1:39:06:a4:47:6a:73:b8:a2:ec:b0:ed:
35:00:38:ff:4a:52:65:05:70:77:94:6b:70:c8:6c:bd:c8:c9:
60:74:62:9c:4f:e2:87:d8:3a:a4:07:63:e9:de:2b:5e:96:a0:
c1:21:da:13:df:ce:52:6b:97:46:c2:e8:41:2f:54:41:18:61:
13:69:a9:bf:4a:0a:a0:41:b0:f6:1c:0b:22:62:b3:77:94:32:
de:6a:50:20:83:c9:fb:21:62:f6:1e:e9:da:b3:05:11:91:d3:
94:38:14:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 21:05:08 2026 by rpki-client