
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
File: PM59J4idCNUwg0kqqJygm2jw5fA.mft (raw, json)
Hash identifier: jcmMG6vsHuBpit1p8Jq2S5sdx8IhiTOzfhMd7+5xTdo=
Subject key identifier: 6F:72:01:EE:F2:B6:56:AC:4F:A5:EA:8C:DD:1F:DE:DA:B0:3B:89:77
Authority key identifier: 3C:CE:7D:27:88:9D:08:D5:30:83:49:2A:A8:9C:A0:9B:68:F0:E5:F0
Certificate issuer: /CN=A9173161/serialNumber=3CCE7D27889D08D53083492AA89CA09B68F0E5F0
Certificate serial: 92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
Manifest number: 92
Signing time: Wed 05 Nov 2025 06:41:14 +0000
Manifest this update: Wed 05 Nov 2025 06:41:14 +0000
Manifest next update: Wed 12 Nov 2025 06:41:13 +0000
Files and hashes: 1: PM59J4idCNUwg0kqqJygm2jw5fA.crl (hash: x0y/mtE7eJJmV4Slt6Dy4Pk0xpDw0qLEOS5l51wSx44=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.crl
rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:41:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173161, serialNumber=3CCE7D27889D08D53083492AA89CA09B68F0E5F0
Validity
Not Before: Nov 5 06:41:14 2025 GMT
Not After : Nov 12 06:41:13 2025 GMT
Subject: CN=690af18a-fc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:40:9f:37:30:40:d8:47:3d:bf:91:3b:c4:
b8:02:4f:de:f2:d5:e7:d2:aa:52:6e:10:6b:11:8b:
13:77:c0:1d:e5:32:83:5e:03:a9:d5:8e:05:e6:d8:
fa:52:d6:83:6f:94:60:f8:f8:10:53:07:25:5c:c5:
13:cc:09:07:5c:34:99:cf:66:3d:94:9a:af:a9:2a:
80:36:65:6a:ad:ca:c4:5b:63:b8:96:bf:98:2b:47:
80:0a:9b:21:0e:1c:09:c7:86:44:88:dc:a6:51:2c:
db:09:d6:b9:38:d5:11:7c:2c:e1:e1:38:db:34:16:
d1:37:7b:d1:97:aa:ca:25:a3:a9:25:6d:57:d0:7d:
46:35:20:53:2e:0e:4e:80:12:46:83:c2:34:1b:fb:
c1:ca:d2:93:84:51:68:0e:70:44:dd:0c:63:a9:43:
be:e2:36:75:17:02:51:17:c6:3d:57:10:1c:7d:79:
1d:7c:93:bf:f2:f7:94:3c:af:de:36:61:c6:4e:be:
83:f0:7b:56:69:d6:4c:fd:09:e9:3c:89:50:f6:9c:
95:75:76:c4:48:b0:76:69:32:ad:ea:8f:4e:58:2e:
0b:9b:eb:e1:eb:a1:32:8d:24:21:6e:04:60:0a:f7:
9d:f0:49:7e:b3:d0:7b:b8:88:e0:59:de:12:1a:ea:
e7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:72:01:EE:F2:B6:56:AC:4F:A5:EA:8C:DD:1F:DE:DA:B0:3B:89:77
X509v3 Authority Key Identifier:
keyid:3C:CE:7D:27:88:9D:08:D5:30:83:49:2A:A8:9C:A0:9B:68:F0:E5:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:01:b6:60:79:91:a5:f0:fe:b0:1c:08:ef:20:ba:e2:e1:e9:
23:37:8b:bc:fa:26:41:a8:4b:52:6a:ad:c4:7c:25:78:5a:68:
0f:b5:42:e8:3e:ad:77:59:81:d5:e2:1f:9c:78:dd:9a:7f:7c:
e9:0e:8e:9f:c9:42:a8:b0:2b:f6:c9:73:d6:71:f4:c3:dd:94:
80:6e:c3:6a:9f:11:a6:8e:01:19:9b:7d:c6:f9:2a:ba:da:5b:
d5:84:f4:d7:6b:ea:e5:00:62:22:ef:60:de:e4:9d:49:81:01:
70:30:19:3b:74:08:b3:56:32:81:4e:62:81:dc:c3:a0:1c:46:
4e:e6:d0:56:42:2a:89:e4:a8:4f:76:c3:42:c8:f2:d1:08:58:
89:b5:36:72:97:37:96:8b:62:32:c4:8d:59:77:ff:76:b0:c0:
10:40:f5:42:93:13:c2:a5:8b:db:c0:02:0e:85:a8:79:43:d3:
4f:81:e0:95:8f:dc:b4:c8:4e:b1:f4:d1:62:da:63:f8:b6:f1:
21:59:31:cc:0b:49:e3:11:a2:9e:e3:01:e5:3c:63:3e:47:25:
bc:e4:c4:99:75:eb:4f:e3:3f:7f:cb:c8:76:50:81:ab:7d:50:
cc:73:46:aa:46:79:ec:67:e4:13:30:bc:99:c8:62:ee:42:cb:
43:1e:64:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:59:11 2025 by rpki-client