
$ rpki-client -vvf rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
File: GO9DJ41GMx6arw_XcqcygNE6qlI.mft (raw, json)
Hash identifier: sHBUVp8ruUYnF086UPkaWMKmb4PZDnRSObJCifHi9a8=
Subject key identifier: 3E:E1:BA:F4:E6:DF:3E:0D:E9:C1:14:46:F3:FA:F5:7F:8E:AC:3E:45
Authority key identifier: 18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52
Certificate issuer: /CN=A91104D1/serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52
Certificate serial: 1113
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
Manifest number: 10C0
Signing time: Tue 04 Nov 2025 17:28:32 +0000
Manifest this update: Tue 04 Nov 2025 17:28:32 +0000
Manifest next update: Tue 11 Nov 2025 17:28:32 +0000
Files and hashes: 1: GO9DJ41GMx6arw_XcqcygNE6qlI.crl (hash: W7EfWDZMaP/tO1JizfYwiqZqGXq692TbgeHyN7UjDHw=)
2: 87C9E3FE3F6D11F0951BB23CC4F9AE02.roa (hash: cZ6PZrYDDvwfg8CUMPN9ghZZSt3c2YnNiECXmtMGmPE=)
3: 446826648F3511EE8864C25EC4F9AE02.roa (hash: isUw4olTYLhmDXX2L/NMbXVs40srSiQ7QfOKuuisKvs=)
4: 381223E2E00711EE8E019E29C4F9AE02.roa (hash: T690o+zlmCjPk931+I/aCbChbJkL8SqS+o/0AQYcZ0c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl
rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 17:28:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4371 (0x1113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91104D1, serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52
Validity
Not Before: Nov 4 17:28:32 2025 GMT
Not After : Nov 11 17:28:32 2025 GMT
Subject: CN=690a37c0-36b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ad:cc:a6:f6:e6:69:09:0b:5a:dd:f9:85:90:
be:c4:96:df:af:c2:56:6b:8c:51:7a:e0:c2:84:14:
5b:b9:a5:17:58:6d:ed:52:75:97:9e:d8:ad:2c:09:
95:e4:4f:02:e7:e8:ed:e1:86:db:45:13:db:dc:40:
c1:20:7b:0c:88:b2:54:e0:62:3e:d1:46:01:a7:1d:
50:b1:97:5f:0f:cf:e0:49:90:42:b2:e7:97:2f:cb:
7a:ed:fa:94:1b:3c:3c:7a:22:aa:51:59:2f:b3:b6:
c7:c8:8f:0d:56:f5:c4:a1:d5:13:a3:f6:b5:3b:ab:
c0:74:ee:61:45:b7:1b:c5:73:ed:21:74:85:00:85:
65:71:3a:f1:b8:55:34:dc:ab:d1:82:37:00:ed:9b:
f0:30:c7:46:87:22:c6:da:db:75:3c:ca:af:37:68:
44:f9:81:90:5b:48:73:8f:a4:2b:b9:c9:02:dd:ee:
fe:ce:b0:c5:1b:4d:bd:95:ac:74:35:d6:eb:cf:b6:
d9:7c:9b:42:c9:59:af:47:b7:f6:b4:7a:e1:85:0e:
43:8b:9e:4f:40:67:81:03:2c:9b:5e:e3:76:fe:54:
ec:55:c8:64:67:eb:00:49:91:01:89:83:7a:dc:49:
be:39:b3:49:a3:dd:9e:a0:85:dc:28:d2:a5:38:03:
06:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E1:BA:F4:E6:DF:3E:0D:E9:C1:14:46:F3:FA:F5:7F:8E:AC:3E:45
X509v3 Authority Key Identifier:
keyid:18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:3a:f5:fd:ac:f4:34:93:e8:91:e7:d2:50:d8:9a:a2:fe:40:
43:90:da:7f:2e:3e:20:db:d8:d7:58:78:81:aa:da:d1:65:c1:
e0:db:e3:d5:f1:0c:e9:ba:59:3b:89:c0:4d:66:5c:71:b8:47:
6c:ed:0b:f2:06:99:77:74:97:57:74:1c:94:41:6d:af:39:04:
ff:19:0e:bb:91:3f:d9:cc:dc:31:be:a7:63:4d:9c:24:5c:e0:
b2:30:ff:2a:ce:80:81:93:88:da:e9:4e:52:81:2c:f7:02:cd:
cf:b2:c1:02:ed:72:b7:3e:1b:73:1e:7c:72:e4:14:05:c1:07:
2e:98:27:f4:ac:87:46:9e:75:25:49:9a:a4:95:2a:26:97:a4:
58:1f:3f:83:25:23:e9:9e:95:4f:8b:21:ae:2b:e5:63:92:8b:
26:96:f7:47:f8:fe:30:95:87:81:6a:b3:f4:88:db:b5:b8:9f:
e5:d8:86:ea:d0:00:44:12:07:76:45:9d:2f:4e:16:58:52:80:
72:4b:df:da:97:59:ce:c4:7d:67:b6:32:6b:63:de:d2:97:a4:
30:b9:c6:23:12:4a:00:c4:fe:56:14:cb:5a:7f:2c:c7:6a:f1:
f2:c9:03:0b:14:73:99:3e:9d:16:c1:8e:ea:fd:18:b1:d4:95:
6a:1b:47:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:17:58 2025 by rpki-client