
$ rpki-client -vvf rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.mft
File: Sew5-RvAfq8SKvqqC9t7U9iBDAc.mft (raw, json)
Hash identifier: VxvlYFeN4ZCePBhpfDqJvSoNbQ+ATtKdTFSpjTRxJ+A=
Subject key identifier: 77:F0:08:55:C4:FC:88:CE:97:F8:3C:05:B2:DE:4B:1A:FA:53:9F:80
Authority key identifier: 49:EC:39:F9:1B:C0:7E:AF:12:2A:FA:AA:0B:DB:7B:53:D8:81:0C:07
Certificate issuer: /CN=A91736B7/serialNumber=49EC39F91BC07EAF122AFAAA0BDB7B53D8810C07
Certificate serial: 06D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sew5-RvAfq8SKvqqC9t7U9iBDAc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.mft
Manifest number: 06C2
Signing time: Sun 02 Nov 2025 22:05:22 +0000
Manifest this update: Sun 02 Nov 2025 22:05:22 +0000
Manifest next update: Sun 09 Nov 2025 22:05:22 +0000
Files and hashes: 1: Sew5-RvAfq8SKvqqC9t7U9iBDAc.crl (hash: 5Cj/wtUgc6V2KPbCaLLLoaRdWIiRecCSKusg//sbEhE=)
2: BD8A42B27CA411EB847F0B83C4F9AE02.roa (hash: rF+D6zPDIJwry6qHScwbtKwBOHZvfUdrhdX6D6Fqdog=)
3: FFD6E656DB1E11EB91006D71C4F9AE02.roa (hash: K61xoWut3SAgEuN5+1k0dXQON0k0l7TUwfM2kslJEm4=)
4: 006626AEDB1F11EB91006D71C4F9AE02.roa (hash: 20i7SUN+ILtvpk7iV/YzHa7IC6zBka4WdUDNuP/C6/U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.crl
rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sew5-RvAfq8SKvqqC9t7U9iBDAc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 22:05:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1745 (0x6d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91736B7, serialNumber=49EC39F91BC07EAF122AFAAA0BDB7B53D8810C07
Validity
Not Before: Nov 2 22:05:22 2025 GMT
Not After : Nov 9 22:05:22 2025 GMT
Subject: CN=6907d5a2-d04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:45:da:f7:89:32:84:1f:0e:91:33:8e:41:49:
83:dd:29:e9:35:90:dc:77:ac:65:37:f9:62:b6:6e:
e1:4b:6e:e6:5d:5d:28:a9:7b:50:94:19:d6:57:dc:
fb:a8:d9:dc:d3:19:dc:e0:44:32:63:ff:a0:57:08:
14:02:d2:2b:af:4a:fa:f7:37:5b:d6:db:be:c5:e9:
9d:55:13:71:d5:c1:37:e5:b5:83:93:e1:98:4e:c8:
44:aa:28:ec:3e:c5:01:22:23:b5:05:f8:7a:f6:db:
93:84:18:3b:0f:00:51:d8:ea:33:4a:28:a1:12:ca:
d3:3d:fa:85:7d:9a:c3:fc:f4:9d:c8:29:7f:39:93:
79:18:7b:b7:7a:99:cf:d5:ec:da:fb:b4:54:6f:cc:
ac:3f:68:f1:9a:15:57:d6:c3:51:f4:a9:59:1b:93:
2c:b7:d9:4b:c8:a7:93:c0:8a:b5:b0:35:07:69:d0:
21:3c:09:9b:18:f1:81:d5:bb:b7:1f:8d:4a:e3:57:
39:26:4e:1a:52:32:ce:da:4a:2f:6d:ce:15:5d:3d:
14:9b:dc:af:b1:f2:a6:a9:91:25:d9:7d:66:56:14:
22:c5:b4:6c:96:e1:c5:eb:d6:2d:cb:67:f3:5e:1d:
0a:91:62:a7:cf:de:a9:51:5d:10:a9:44:a0:e6:27:
6f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F0:08:55:C4:FC:88:CE:97:F8:3C:05:B2:DE:4B:1A:FA:53:9F:80
X509v3 Authority Key Identifier:
keyid:49:EC:39:F9:1B:C0:7E:AF:12:2A:FA:AA:0B:DB:7B:53:D8:81:0C:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sew5-RvAfq8SKvqqC9t7U9iBDAc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4f:e0:69:aa:4a:2f:bf:1f:7e:50:f2:2e:55:ac:a7:60:86:
76:71:6c:06:b5:fe:5e:9c:91:6c:0b:2d:c9:ba:cb:62:3c:2f:
f9:42:2c:32:a2:81:30:ac:b2:88:cb:f6:f6:78:4e:05:8a:fd:
bb:c7:c6:16:26:25:ec:ac:d0:1d:9f:10:3a:3a:df:f6:a7:d0:
0d:42:28:80:74:75:13:96:b9:eb:ad:c9:b2:3b:fd:5e:5c:8e:
d1:0d:96:84:a1:99:b7:1f:80:a5:80:b9:67:01:c8:d0:83:73:
ca:d5:93:e5:e7:95:a4:01:57:73:17:43:25:89:f7:ac:b9:d7:
4a:e4:0c:a1:09:23:ec:5e:9a:96:f2:03:ed:eb:55:5e:86:d2:
ef:57:61:0f:67:ad:79:9c:5f:34:c5:3a:93:bd:3f:1b:63:02:
83:08:35:fe:4b:17:ec:e9:2f:2a:db:ca:1e:5c:48:18:fd:45:
dd:53:c1:38:b5:8c:a0:03:21:0a:cc:f3:b5:4e:e6:86:84:e6:
a4:75:f7:33:b4:39:cf:69:b1:a4:79:e0:a8:ba:3d:78:e5:54:
db:bb:dc:df:4e:7b:c4:c9:59:fe:fb:99:32:27:d1:a4:fe:ee:
ea:22:07:9d:29:da:02:5e:34:2f:57:56:9e:40:97:22:e8:f3:
17:eb:fe:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:35:41 2025 by rpki-client