
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
File: N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft (raw, json)
Hash identifier: BjKRRmm//eWW0NisL1RiznPJWl+sTn7Qkc0MJ2es6ck=
Subject key identifier: 6B:21:09:7C:C5:C1:9F:B6:51:5B:5F:FB:3B:1E:B0:9F:8D:13:4B:66
Authority key identifier: 37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB
Certificate issuer: /CN=A91F3256/serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB
Certificate serial: 87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
Manifest number: 82
Signing time: Sat 15 Aug 2026 07:50:51 +0000
Manifest this update: Sat 15 Aug 2026 07:50:50 +0000
Manifest next update: Sat 22 Aug 2026 07:50:50 +0000
Files and hashes: 1: N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl (hash: kpzU60D+YFMkLrrX711iv0Eu81VM0ag5qbFiiuRAUSU=)
2: BED8B2621D1B11F1B6F055AB103D8C67.roa (hash: TZiFnlQe5aFCTw3TXlx3VBuv8nDQSF0KBsx60QraJQ8=)
3: 33EB881ED9A011F08EC1CA9167D3641D.roa (hash: PsNugEmxb0VqmOUe342oKhYJR77dyuxdQVuRbBuOR54=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl
rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 22 Aug 2026 02:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3256, serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB
Validity
Not Before: Aug 15 07:50:50 2026 GMT
Not After : Aug 22 07:50:50 2026 GMT
Subject: CN=6a801a5b-ca19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:07:e5:ca:25:c1:c0:b0:ae:6b:23:a4:b7:
32:ab:11:95:02:95:66:eb:49:ef:5b:03:23:fa:d7:
a6:e0:8e:be:e8:3f:cd:ec:f2:5d:9a:ee:1c:23:a1:
db:c5:5a:50:6b:4e:59:a3:db:78:c9:b3:e3:9c:7c:
55:37:7a:2c:02:9b:06:38:bb:fc:59:04:4b:fe:e1:
80:ba:28:e2:85:e5:8a:c6:58:c8:e4:1e:43:46:7c:
50:58:66:63:7c:9d:f7:6f:20:01:55:19:fb:c8:68:
cb:ff:97:a8:2e:2f:17:36:9a:c3:c8:28:7f:d9:db:
5a:98:d3:aa:a0:d8:b6:c7:3a:cd:5f:b3:a6:41:3a:
1c:5b:64:fa:48:ff:85:0d:09:c2:e7:20:4e:34:51:
c3:07:aa:22:81:37:0e:5c:0f:95:14:e6:f5:24:9a:
c3:54:79:0d:84:20:1c:3d:ba:e9:16:5e:50:01:2d:
eb:6c:c6:ff:3d:21:26:c7:b6:38:9a:21:99:51:42:
1a:2d:ad:3f:ee:1b:15:62:d7:d1:fe:05:06:e1:1b:
fd:7f:90:10:fe:b0:89:b8:45:4a:d3:0e:4e:8e:ae:
c2:ec:db:b4:c0:21:d7:15:ae:3e:06:ff:25:ce:da:
ae:80:4a:6f:c4:ae:18:71:18:a3:4b:b8:2f:c1:53:
f8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:21:09:7C:C5:C1:9F:B6:51:5B:5F:FB:3B:1E:B0:9F:8D:13:4B:66
X509v3 Authority Key Identifier:
keyid:37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:e6:f3:d1:1e:27:d3:27:33:b5:c9:c8:75:ec:20:93:5a:83:
c1:85:59:a2:4a:e8:45:e2:3a:02:fe:3b:e3:ac:69:52:ec:78:
b9:0b:32:2a:6d:2b:ef:50:49:9d:7f:f1:e7:bc:77:ac:18:67:
9c:5f:4d:a5:1f:2a:f2:13:fa:44:9a:04:c5:b1:13:d8:f7:58:
a7:1d:bb:5b:24:99:ac:4d:c6:f3:c9:7b:06:d3:e7:4c:93:8a:
62:0b:53:97:1c:46:27:06:88:1d:bb:cb:de:b4:71:a3:20:66:
4f:eb:55:87:9f:f8:b8:38:91:4c:89:b4:64:d7:b1:3b:06:ed:
46:ae:1e:1c:9e:46:11:3b:18:fb:83:5d:91:95:d8:10:e1:7b:
53:fe:4d:55:0b:1b:53:86:29:45:bf:50:1f:3e:95:2b:55:20:
dd:2a:a3:3e:9d:89:96:6a:91:cc:60:50:80:cc:72:20:83:59:
20:6e:9d:b4:38:a0:f2:23:45:07:d3:9f:4c:19:68:b7:53:80:
18:cc:f1:96:95:15:64:74:44:5f:e8:e8:51:2b:18:2b:09:07:
1a:56:18:89:1a:bc:fd:88:05:3a:00:36:ac:19:d3:82:df:5b:
d8:4d:70:ae:aa:b7:50:e3:32:8a:14:3c:5d:da:26:dc:f7:4e:
55:7f:e3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 13:06:16 2026 by rpki-client