
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
File: N5vU53MvGo0cOyItt3c8HBVBn0I.mft (raw, json)
Hash identifier: bnD68lXnNptYSgTuiUlH4LlDFczwzG4r7nmMuTVQ0Ek=
Subject key identifier: 48:3F:0C:D6:8C:32:DE:82:80:2D:A6:6C:C0:DF:4A:E5:43:08:1E:AC
Authority key identifier: 37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42
Certificate issuer: /CN=A912527F/serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42
Certificate serial: 038E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
Manifest number: 0380
Signing time: Thu 05 Nov 2026 01:06:37 +0000
Manifest this update: Thu 05 Nov 2026 01:06:36 +0000
Manifest next update: Thu 12 Nov 2026 01:06:36 +0000
Files and hashes: 1: N5vU53MvGo0cOyItt3c8HBVBn0I.crl (hash: TdebuU/ln4sFXtP7KQVvUdpB+oDF1inSV9NrCCEN82o=)
2: 2C257150DBCA11EF920CC12BC4F9AE02.roa (hash: zXtmaqUd/SHW6AH9S9kiJ2Fq9D/OPbiNASvEOOP5bVI=)
3: BE0481A4EFA111ED87AD1F0BC4F9AE02.roa (hash: g26zayCJEe3pBk7y7M5zDEGtaoYO/VKLNfOSnn77WoE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl
rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 01:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 910 (0x38e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912527F, serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42
Validity
Not Before: Nov 5 01:06:36 2026 GMT
Not After : Nov 12 01:06:36 2026 GMT
Subject: CN=6aebd69d-23e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b7:03:e0:c3:62:f8:59:ea:76:97:39:5f:e6:
09:b0:f2:dd:35:b7:c9:1d:98:9a:48:7f:c2:10:64:
83:bd:08:e2:bd:4c:0b:8c:cb:68:24:57:99:09:8c:
65:5e:28:3b:d8:3f:3f:c6:0a:f5:ad:13:c3:51:dd:
9d:34:d6:80:8e:e2:25:b0:c4:3e:8e:cf:cf:1d:ae:
e7:00:ea:cd:cd:f7:af:2e:7c:c8:8e:fa:47:7d:9e:
18:29:4b:57:c4:5e:22:23:df:82:a3:97:d0:3e:42:
11:98:1d:92:27:f2:ed:c2:4a:b7:c2:1a:59:b7:f1:
32:4d:59:45:1a:93:38:2f:37:11:85:d8:be:7e:02:
5a:2a:f5:8a:2a:ba:42:d1:fd:be:30:c0:a8:2a:65:
41:24:d9:be:20:9d:f6:36:3a:83:c6:45:04:61:b5:
e4:7d:da:a3:31:5c:bd:69:25:e2:87:84:76:2d:ef:
0f:73:ba:69:a6:90:88:39:90:ad:a6:34:97:3b:19:
59:9e:8f:86:e1:3e:bc:be:3f:c7:21:17:d2:6f:bf:
35:9d:a3:96:7e:62:39:ce:54:39:29:33:e0:96:93:
6a:d0:58:f2:18:d6:c4:dd:c0:02:22:2f:4d:3d:51:
e5:a2:25:d3:9c:3d:80:d8:b8:ff:65:9a:c0:ad:00:
3d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3F:0C:D6:8C:32:DE:82:80:2D:A6:6C:C0:DF:4A:E5:43:08:1E:AC
X509v3 Authority Key Identifier:
keyid:37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a7:d6:47:a4:00:88:42:c5:ce:64:8b:ce:a9:d6:76:5b:d8:
74:69:d9:d8:7b:3e:40:e6:ef:40:52:02:91:73:a4:b4:86:02:
d2:1c:6d:be:b5:a4:b0:bf:4e:12:93:d7:7d:63:22:96:8f:b4:
91:9a:04:b9:67:7d:66:17:7b:20:ac:bc:ed:4e:90:c7:ea:2c:
3b:f7:52:69:06:b5:e9:a0:2b:52:f2:8c:a8:94:48:9f:60:42:
55:40:4f:f4:e6:c7:80:0d:a5:b9:aa:ec:c3:15:ec:f5:d9:79:
e6:db:ab:c5:fe:e8:1a:42:0b:1a:89:5e:18:84:69:d3:f7:57:
0e:32:bf:4a:c0:66:8a:ca:44:5a:50:8c:cd:37:a2:11:24:0b:
47:ff:bf:a3:76:cb:16:1a:2f:85:3d:d8:d9:72:90:6f:13:22:
e0:88:dc:00:f3:7b:0e:7c:a7:9e:82:b6:0e:70:0d:00:04:3a:
9a:eb:48:fe:90:42:18:bc:11:a2:a4:bc:47:69:60:9d:5a:27:
2e:46:1f:2d:f1:1d:27:3b:7e:d2:df:80:f7:da:10:80:5f:ca:
d3:2b:71:28:19:85:7c:3e:12:7d:93:81:76:2f:71:52:cb:c3:
81:d0:8c:08:f1:81:8f:c9:43:de:bd:2a:3b:5b:3c:8d:b8:b3:
be:22:5d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:51:44 2026 by rpki-client