
$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
File: peb1x0u860AJxV7qaJcDSZcf9jo.mft (raw, json)
Hash identifier: pTpZKbQZ4N5lPNPHZn0ap6DWXvae74o+JHHCREkanRA=
Subject key identifier: 16:AC:4A:22:CF:A9:B2:66:33:44:9B:08:82:BD:E6:17:0D:44:8D:0E
Authority key identifier: A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A
Certificate issuer: /CN=A91684D0/serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
Certificate serial: 0235
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
Manifest number: 0230
Signing time: Mon 03 Nov 2025 01:52:23 +0000
Manifest this update: Mon 03 Nov 2025 01:52:23 +0000
Manifest next update: Mon 10 Nov 2025 01:52:23 +0000
Files and hashes: 1: peb1x0u860AJxV7qaJcDSZcf9jo.crl (hash: DmHsKJqHhjgPwSCTXDkrnJN9fmSPxsHy3m/TUZxK5Jk=)
2: DFB66DA85E9211ED83D40E65C4F9AE02.roa (hash: vYjDKJoL/LVvPBznc+DyGkQ1jp9r0XRmWXYGOVlx3uA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl
rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 01:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 565 (0x235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91684D0, serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
Validity
Not Before: Nov 3 01:52:23 2025 GMT
Not After : Nov 10 01:52:23 2025 GMT
Subject: CN=69080ad7-64b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5c:48:ab:75:9d:e7:3a:1c:12:a8:39:79:12:
26:d9:7f:1b:b1:5f:7d:cb:46:73:07:e4:31:a4:b3:
d4:8a:44:ce:19:bb:a5:21:88:be:c8:c7:26:e2:88:
53:99:64:cc:6f:3e:81:3c:54:5c:41:99:85:88:7b:
d2:17:a4:6c:76:58:85:9e:99:f9:ac:89:8f:64:55:
2b:8f:53:42:1a:f1:54:bb:d1:11:46:17:1b:fe:03:
6a:79:08:aa:08:8b:15:0d:42:5d:bf:b2:cc:b2:53:
83:6c:98:41:ce:ad:a1:14:39:e3:b9:17:92:8f:c8:
c1:a0:24:15:ba:17:ca:33:41:7b:6b:64:d9:28:ca:
a3:ba:1b:7c:ab:90:28:20:ea:71:11:2e:4b:05:30:
eb:4a:3b:67:5d:9e:81:92:f0:63:51:c5:0d:3b:e3:
d3:82:72:cd:ef:29:49:3c:98:20:b6:d9:d9:14:0a:
48:0f:a4:06:bc:f8:c5:54:89:8a:77:49:6b:3b:0c:
ba:39:cf:f0:f6:19:92:1a:41:90:aa:85:de:ad:a9:
f1:98:25:7c:00:fa:4e:5d:1a:c0:f0:c8:77:13:51:
93:44:ea:7a:20:28:73:d3:d6:53:87:f2:15:17:00:
c8:49:0f:fc:b8:d8:91:ca:38:47:14:8f:d0:6a:cc:
6f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AC:4A:22:CF:A9:B2:66:33:44:9B:08:82:BD:E6:17:0D:44:8D:0E
X509v3 Authority Key Identifier:
keyid:A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:dc:5b:10:35:09:25:4c:f2:df:e1:87:11:3e:f9:74:1b:0d:
0a:e6:fe:0f:73:2f:c9:16:0f:67:c6:83:51:15:12:39:aa:72:
e7:fe:a6:18:d1:6b:81:47:cb:55:74:e5:ab:5f:b2:03:23:4e:
b0:af:a9:65:82:31:40:bc:c3:d0:72:f0:11:14:70:8d:91:d5:
3d:d6:77:30:c1:29:42:c9:27:37:e6:4e:2b:7a:f9:62:18:91:
6d:23:74:14:0b:ff:8d:e8:d1:52:19:0f:d0:02:8f:6d:1e:60:
0b:e0:1c:2d:82:cb:49:d7:8a:ce:02:15:3b:ff:f1:85:5c:41:
41:b7:e6:ee:34:35:5e:3c:61:5a:7f:a7:b6:29:f2:e3:a5:a6:
7c:bd:d8:f3:35:1e:56:f3:cf:b9:85:b1:99:c7:59:29:2a:6e:
86:89:55:db:49:7f:2d:8e:1a:65:68:ca:47:26:5e:c4:84:e8:
a9:a6:ab:f2:f2:a4:ca:b9:b8:09:39:c5:de:ec:dd:b3:38:5f:
d2:96:c4:00:ec:26:f8:00:51:46:26:92:73:7e:73:67:7c:2c:
f8:d2:ee:a9:6d:d5:c5:21:22:d9:5c:04:2d:43:ac:80:2d:47:
37:83:17:d1:1c:56:b9:a0:1e:c5:8c:43:92:0f:1f:55:81:09:
48:0c:ae:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:28:56 2025 by rpki-client