
$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
File: V1pu0ww3OtQ00VpmXdoudk7Imso.mft (raw, json)
Hash identifier: iG97N3rtHVe8mVSNuH0/7lJmCg4zPO42x4hY7u/staI=
Subject key identifier: 95:81:02:C5:46:3E:A8:C4:78:6D:53:4A:39:57:1A:3F:02:BB:F9:51
Authority key identifier: 57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA
Certificate issuer: /CN=A91827C5/serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
Certificate serial: D1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
Manifest number: CB
Signing time: Mon 03 Nov 2025 05:49:07 +0000
Manifest this update: Mon 03 Nov 2025 05:49:06 +0000
Manifest next update: Mon 10 Nov 2025 05:49:06 +0000
Files and hashes: 1: V1pu0ww3OtQ00VpmXdoudk7Imso.crl (hash: JV2xYvyADF2Nxc1HDZZf8D5vpEbd9L97Q6ESCMYHRsE=)
2: 6F591F00671411F0A568F124C4F9AE02.roa (hash: x0s+a8n0tfUspvoFu90euoP3YJ9IRWh7FQTQNg+CfNA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl
rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 05:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209 (0xd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91827C5, serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
Validity
Not Before: Nov 3 05:49:06 2025 GMT
Not After : Nov 10 05:49:06 2025 GMT
Subject: CN=69084253-35bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f5:5e:11:13:ec:47:e7:f6:87:5c:9c:48:fc:
f8:64:53:df:72:45:0c:57:8c:d1:65:0c:ef:00:d5:
80:8e:36:bb:33:45:80:dc:29:1f:5d:2d:36:46:69:
94:96:05:d7:ce:17:8e:13:67:1a:bd:1f:82:b6:a8:
c6:2f:19:c7:62:93:18:79:72:0d:bc:3d:12:d5:8d:
50:53:3a:bf:f0:09:9a:f4:e5:4f:e6:ff:f4:99:48:
f0:c8:0f:96:36:cc:2d:1d:be:88:08:18:bc:af:31:
6c:e3:c4:61:5c:f7:9c:f1:e0:32:07:4e:c9:27:ff:
30:c4:77:8d:0f:e1:19:d8:46:08:8e:1b:f4:90:1f:
00:f6:26:e6:f4:38:75:10:cb:f2:a1:9e:2c:bd:93:
6d:2a:2f:eb:ea:c5:cd:46:97:02:e7:21:f6:1f:ef:
49:bd:46:0a:c7:4b:09:af:83:09:be:ac:bd:73:69:
4a:4d:bd:f8:44:3a:60:89:6b:32:2d:3b:41:a5:0f:
96:35:bd:13:89:2e:d6:53:16:3e:ba:aa:a0:6b:11:
b9:d6:75:59:fc:4b:ee:57:80:e0:e7:6d:9d:85:a5:
74:8b:f2:fc:d3:b0:a4:53:08:06:8a:a5:31:cb:03:
9c:5b:86:e1:a0:40:55:a9:f0:2d:ab:ef:99:71:84:
62:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:81:02:C5:46:3E:A8:C4:78:6D:53:4A:39:57:1A:3F:02:BB:F9:51
X509v3 Authority Key Identifier:
keyid:57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b9:49:26:72:8c:ab:4a:2c:76:37:b9:18:ac:7e:e2:8b:bc:
db:b4:d2:89:0e:1a:d9:d0:a9:84:b5:ae:26:3a:3e:1e:0b:92:
29:23:7c:c9:81:61:3a:80:38:80:fa:16:6e:b6:0e:2f:10:e0:
01:43:8e:1e:14:82:52:38:3a:a5:05:bb:bd:8c:78:1f:b6:f6:
1b:95:ac:7f:a2:c3:23:a1:47:b4:fd:a7:45:25:a9:41:f3:ed:
91:e3:0a:56:02:f5:44:fa:93:bb:8d:4e:56:75:0a:e5:5f:b9:
a1:82:46:64:b5:17:27:2d:d1:cb:0f:61:ef:6b:71:ac:d5:19:
e2:84:8f:ca:a7:79:a9:a0:8d:8d:51:16:eb:b9:68:ab:fb:99:
d0:95:8c:9a:d9:d8:ca:fe:9d:b3:cb:f2:7a:45:48:be:d4:1e:
16:03:45:93:13:40:38:c9:4d:57:5e:66:66:d0:d0:b8:2c:be:
f7:cd:14:60:4e:67:7b:a7:29:48:16:68:74:6e:a1:64:4e:45:
cc:25:d3:35:cc:d2:91:bf:62:f2:49:59:74:dc:af:5e:3a:40:
c3:d8:bc:46:1d:e9:a7:9e:5e:1f:f9:18:68:66:05:66:02:cb:
5f:49:cf:9b:62:ae:f8:b1:43:64:f8:74:8f:96:c4:bd:b4:3e:
d4:02:b9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:23:45 2025 by rpki-client