
$ rpki-client -vvf rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft
File: V4hJyblKNVp2IKl0eXPSG77aP1M.mft (raw, json)
Hash identifier: 9ZqSkN90nky7Ef83URKAmTKNI8iO7mCM9PjyQtGUFo8=
Subject key identifier: 7D:36:98:EB:74:93:07:17:69:EC:B2:12:DA:B9:1D:20:B1:43:65:64
Authority key identifier: 57:88:49:C9:B9:4A:35:5A:76:20:A9:74:79:73:D2:1B:BE:DA:3F:53
Certificate issuer: /CN=A91410C5/serialNumber=578849C9B94A355A7620A9747973D21BBEDA3F53
Certificate serial: 4E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft
Manifest number: 48
Signing time: Mon 03 Nov 2025 07:25:20 +0000
Manifest this update: Mon 03 Nov 2025 07:25:20 +0000
Manifest next update: Mon 10 Nov 2025 07:25:20 +0000
Files and hashes: 1: V4hJyblKNVp2IKl0eXPSG77aP1M.crl (hash: K9pOTmuecRhW3534E8iQeeCb8qiD0LYEf6MCkazevqw=)
2: C7142BC6654E11F0903B1F31C4F9AE02.roa (hash: N2WAIBH8ZMkrMk9CktT8AtzaLV74cC0YpuQq3dTGOmI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.crl
rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 07:25:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91410C5, serialNumber=578849C9B94A355A7620A9747973D21BBEDA3F53
Validity
Not Before: Nov 3 07:25:20 2025 GMT
Not After : Nov 10 07:25:20 2025 GMT
Subject: CN=690858e0-cbd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5c:60:18:db:69:9c:c5:1c:08:d3:97:af:f9:
22:de:b6:a8:12:7c:30:81:30:8f:8f:95:88:03:dd:
18:5b:9c:4f:94:d5:3b:e4:68:5c:f7:dd:03:ca:69:
71:46:ab:cf:51:a9:71:9c:24:f3:01:69:90:f7:a6:
e2:e2:c5:82:b4:39:78:32:30:19:2a:64:e8:9c:64:
ed:7b:4a:f5:62:30:7e:32:86:db:21:73:12:db:bf:
79:73:31:13:fa:d2:90:e1:41:2f:ba:9d:03:6c:8e:
dc:83:7c:1b:d4:c9:fa:d5:fd:b1:17:81:1d:2d:c8:
c7:f2:9b:c3:d8:2e:76:b0:23:0f:8f:ad:31:c5:51:
89:a7:cb:53:8f:23:e1:76:ec:0d:a5:a6:f7:da:ed:
e2:5c:e1:37:90:cf:f2:78:ad:e3:25:ec:71:35:15:
f2:9a:4c:da:94:77:27:60:0a:54:32:c6:1e:2f:6e:
14:ca:5b:3a:bd:d8:c6:83:07:49:44:18:02:99:68:
72:4a:d7:7d:91:a2:d3:d6:89:52:2e:ae:c7:d4:60:
29:ae:7d:b8:c8:a9:8c:f1:da:f4:49:e6:32:19:b1:
52:ca:e1:fc:79:c4:0f:94:94:0d:ad:98:de:b5:7f:
29:f5:3d:72:3c:52:6f:83:ae:38:4a:0d:dc:2e:68:
e8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:36:98:EB:74:93:07:17:69:EC:B2:12:DA:B9:1D:20:B1:43:65:64
X509v3 Authority Key Identifier:
keyid:57:88:49:C9:B9:4A:35:5A:76:20:A9:74:79:73:D2:1B:BE:DA:3F:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:bb:4f:50:67:73:67:64:f7:56:14:e9:cc:5c:02:55:b5:94:
fe:09:aa:9f:80:63:f0:9b:64:8e:af:bf:4b:20:c8:26:04:eb:
c0:8c:fc:3c:a4:d6:68:85:92:0a:25:ad:44:28:44:28:e1:30:
2b:59:12:ac:61:fe:61:bf:7d:e3:35:22:96:c1:15:45:d8:8a:
54:32:8a:7f:69:34:d3:aa:b7:3f:87:8a:2c:fb:8e:9d:d9:c4:
09:f5:0b:86:ad:d2:5d:12:54:15:c6:4f:56:8a:7a:41:de:c6:
c2:64:24:f8:cb:a8:c2:56:74:d0:56:f8:7c:93:6f:78:74:eb:
dc:fd:3f:21:42:7f:f5:5a:fc:be:8a:b6:1a:f4:59:a6:30:64:
ca:a8:b8:d4:b3:26:43:3c:09:60:7a:af:fb:2a:d2:ca:8f:42:
12:e1:8b:c6:12:3c:a3:be:9e:49:a4:24:e5:d4:b3:16:83:4d:
9f:fb:65:9a:95:f3:f4:f1:38:b1:64:7c:e4:f5:e4:48:ac:1d:
bc:3c:70:a4:01:58:ee:38:45:ac:bd:60:b2:b1:60:67:8c:f0:
73:9c:2f:3b:94:96:d4:dc:07:13:70:42:e1:b4:82:b1:9c:99:
d2:eb:38:2c:c4:f2:9b:03:ca:e4:43:f7:99:d2:ad:7f:5a:8b:
fd:3f:da:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:48:08 2025 by rpki-client