
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
File: N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft (raw, json)
Hash identifier: TiH1xBB/xyBzP2aw8pOp/+EzqX8aJjXGD+0faHkIxKw=
Subject key identifier: 49:3D:9D:4D:E3:F8:B1:49:07:C7:1A:F5:25:B9:A8:57:E1:DC:3E:F0
Authority key identifier: 37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB
Certificate issuer: /CN=A91F3256/serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB
Certificate serial: 6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
Manifest number: 6A
Signing time: Mon 29 Jun 2026 08:41:42 +0000
Manifest this update: Mon 29 Jun 2026 08:41:42 +0000
Manifest next update: Mon 06 Jul 2026 08:41:42 +0000
Files and hashes: 1: N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl (hash: QLV0D7sjPg/l5+xjdXPg3b/E1nO2QWWzse3GtZGWU3g=)
2: 33EB881ED9A011F08EC1CA9167D3641D.roa (hash: PsNugEmxb0VqmOUe342oKhYJR77dyuxdQVuRbBuOR54=)
3: BED8B2621D1B11F1B6F055AB103D8C67.roa (hash: TZiFnlQe5aFCTw3TXlx3VBuv8nDQSF0KBsx60QraJQ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl
rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 06 Jul 2026 08:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3256, serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB
Validity
Not Before: Jun 29 08:41:42 2026 GMT
Not After : Jul 6 08:41:42 2026 GMT
Subject: CN=6a422fc6-361a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:27:d5:3b:a1:0f:a7:4e:80:0f:f5:fa:59:af:
69:2c:fb:cc:bc:48:08:1d:ac:76:4e:1f:5b:ee:ed:
21:0a:c7:29:48:80:bc:ff:df:e8:6b:38:cd:35:5e:
18:08:3d:a5:47:07:80:ce:67:2b:09:22:22:ce:a6:
0e:80:81:66:c0:1d:db:20:33:44:61:38:4e:73:5f:
02:75:df:a6:cb:8b:5e:9e:0d:3c:10:39:a9:c2:77:
b6:1c:81:c4:3c:2e:ef:d9:39:00:32:ee:dc:77:53:
7b:f1:0e:b6:2a:22:6e:0c:9b:3c:f5:f1:22:2a:23:
4d:06:c2:8c:31:45:33:64:d8:18:49:12:a2:71:8f:
ce:de:12:7b:2b:0a:2a:63:b9:20:25:77:67:4f:5c:
17:04:1e:f1:11:5e:43:0c:b8:19:66:4b:34:25:81:
59:b1:89:8f:17:54:07:ea:df:fd:83:64:f7:2c:be:
ad:c8:6a:44:33:49:dc:20:2c:2b:d0:cb:e8:ce:2e:
79:d6:42:02:57:d3:bb:0e:43:5c:f3:5f:f2:db:c4:
c6:5b:2c:19:b5:83:76:c9:9a:b9:84:cb:87:bf:ab:
b6:4f:56:ad:cb:9c:ca:cf:0f:a6:d1:ad:6f:56:ce:
85:2c:4e:12:0e:10:8d:84:58:5b:31:09:3d:fd:e8:
c8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3D:9D:4D:E3:F8:B1:49:07:C7:1A:F5:25:B9:A8:57:E1:DC:3E:F0
X509v3 Authority Key Identifier:
keyid:37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:93:c9:57:27:af:c4:dc:ba:37:32:fe:34:3a:cb:a6:b4:9f:
f8:91:40:5a:1a:e0:3c:d4:32:f2:c8:0f:ae:e2:c4:5c:ef:5d:
71:b3:e2:da:c3:c0:17:36:b3:f9:bc:93:11:b9:46:26:af:c3:
1a:b8:fb:f7:38:fd:a1:a0:ae:a9:24:bc:4a:6a:ad:10:05:09:
a9:ed:80:a7:a0:00:ef:53:27:f4:55:9d:b7:94:9d:96:d9:40:
e0:ca:1a:48:1d:4e:6b:b6:19:a6:1c:c0:a4:3a:f3:28:67:b6:
82:8e:fc:4c:24:a8:71:1d:09:3b:e7:ca:fa:5b:15:f7:4c:bb:
74:d1:4e:27:6f:2b:28:e3:a5:46:7d:08:e0:32:b4:5c:6d:c4:
a3:62:5e:f1:9f:da:ae:15:c4:e2:d7:65:0b:21:fd:c9:c0:7b:
36:02:56:a8:d0:7a:b7:9e:1a:c1:26:8f:d3:41:ed:40:df:eb:
0b:1b:e9:59:f5:b0:31:ff:e2:25:f3:2b:85:8d:2e:4a:c5:05:
53:b9:fa:de:06:e1:57:f4:19:ba:ad:ef:85:41:cd:aa:8b:67:
6d:ea:92:b6:ac:a8:82:b0:a0:74:fb:b7:f4:af:73:28:8d:9a:
ae:7b:1e:47:a6:58:a7:c7:78:21:b0:8c:85:7f:e2:17:95:bd:
d0:b3:81:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 08:27:11 2026 by rpki-client