
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft
File: N5uRyTDgoq-LgirZqVm6313dYJ8.mft (raw, json)
Hash identifier: oVQeiJir5OhxFl0xXIhz6Xwu5IZGOggtKqsoJp4cRNw=
Subject key identifier: 8A:41:FE:63:12:D3:88:B8:2E:A2:78:13:20:29:4A:2F:92:71:C8:2E
Authority key identifier: 37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F
Certificate issuer: /CN=A91AD92A/serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F
Certificate serial: 022D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft
Manifest number: 0228
Signing time: Thu 03 Sep 2026 02:53:08 +0000
Manifest this update: Thu 03 Sep 2026 02:53:08 +0000
Manifest next update: Thu 10 Sep 2026 02:53:08 +0000
Files and hashes: 1: N5uRyTDgoq-LgirZqVm6313dYJ8.crl (hash: 3YdRdG3F1FQKwhrcZgTy2MHLb6D8dXIWFsBrdmMZyos=)
2: 796CD35A5B5511EE8E4D2A39C4F9AE02.roa (hash: KT2tiHsvRY9LOJYw0HcT//nfw16eth/WSx/o0UIX/Uw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl
rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 02:53:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 557 (0x22d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD92A, serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F
Validity
Not Before: Sep 3 02:53:08 2026 GMT
Not After : Sep 10 02:53:08 2026 GMT
Subject: CN=6a98e114-767b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:aa:b7:43:b0:49:13:d7:8f:ef:52:5a:12:ae:
0d:10:b4:e4:6a:d8:68:05:7d:cc:6d:e2:1e:c1:24:
06:6c:75:24:e2:7b:fc:1b:75:40:63:55:53:de:49:
ff:b0:72:ec:c0:0f:67:46:7e:64:f4:cc:ea:7d:08:
14:0a:8b:8d:f3:be:e6:f0:f4:b6:1e:94:8c:86:b8:
c8:cf:db:7f:ca:52:b7:02:57:be:1f:f4:11:12:9a:
82:df:74:74:e8:b4:7e:b4:91:27:02:e7:9d:59:a1:
75:dc:4f:9b:45:5d:44:92:44:8a:04:f7:b2:78:37:
01:51:a6:67:e9:bf:45:81:68:33:98:b5:00:61:05:
63:ab:ca:b7:b7:bc:80:62:aa:12:13:59:70:e0:db:
5b:5a:0d:98:2a:21:08:38:52:5a:12:54:3b:69:ef:
64:d2:41:12:f9:91:5b:37:2c:20:e4:48:0f:04:fb:
4f:90:88:e4:b7:a7:d9:77:ec:22:e1:3d:45:91:67:
2d:01:27:8b:07:6c:76:90:73:ba:d0:ff:59:b6:2a:
56:58:d0:e9:0f:a8:cf:cf:17:89:a5:a8:c4:0f:e6:
0a:5c:00:84:67:ab:84:81:9d:e2:61:a1:07:5a:02:
b1:90:24:b1:30:c5:89:db:9a:7c:19:36:87:d4:25:
69:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:41:FE:63:12:D3:88:B8:2E:A2:78:13:20:29:4A:2F:92:71:C8:2E
X509v3 Authority Key Identifier:
keyid:37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:bf:59:64:e2:9c:39:4c:59:d0:1b:2c:5e:b4:6c:67:d8:85:
96:b0:32:84:ff:ca:42:05:f5:a8:23:a0:61:0e:0a:aa:34:c5:
e1:0b:5b:96:74:c1:c1:0c:2c:42:7c:b9:4d:93:af:25:56:8e:
7f:39:e1:58:75:ec:72:9b:56:8a:96:25:d6:a2:a7:c2:da:c5:
3b:53:fe:40:32:a5:7d:9b:8c:8a:2b:2c:e9:5d:6f:27:49:c9:
78:39:b5:2a:b6:a5:b0:4a:0c:d2:f2:2d:ca:b6:7c:6f:28:18:
73:29:19:ca:63:7e:bd:72:e2:a0:b6:39:85:59:e6:7a:bc:34:
fa:53:03:01:67:7e:c0:be:bd:df:5b:5b:35:d1:65:e1:37:b0:
9b:71:ab:40:13:8e:4e:48:7a:e6:04:5a:14:4c:88:ee:97:dc:
03:5f:9e:d0:2e:1b:e1:ea:19:3b:d7:e1:18:55:36:a5:3d:dc:
81:8f:54:bb:a1:57:c1:0e:c3:b2:3a:fd:f5:6f:5e:f0:05:14:
ef:6c:d0:e6:38:a0:94:07:0e:11:a2:1a:3e:76:aa:9c:83:0f:
36:6a:c2:01:f5:08:f3:6e:4c:00:0c:ae:4e:33:40:a6:87:b5:
7f:31:0b:22:72:51:b5:ea:78:ce:bb:72:9c:04:53:cb:13:87:
a8:1e:6e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:34:28 2026 by rpki-client