
$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
File: 9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft (raw, json)
Hash identifier: QG/coGp+DFOhzysGlvI9EXM425i7Vpvjlkl0z2pHLnA=
Subject key identifier: 0A:75:8D:6F:F5:EB:E8:E1:16:D6:FC:BC:E7:CB:43:42:DF:B8:37:7C
Authority key identifier: F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C
Certificate issuer: /CN=A91921AE/serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C
Certificate serial: B5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
Manifest number: B3
Signing time: Wed 05 Nov 2025 06:19:34 +0000
Manifest this update: Wed 05 Nov 2025 06:19:33 +0000
Manifest next update: Wed 12 Nov 2025 06:19:33 +0000
Files and hashes: 1: 9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl (hash: pq7vJTkez3iPN7tccZXNs373IX0lY8zQ7nCqB89kwFk=)
2: 91D2F686B4BE11EFA41A5C26C4F9AE02.roa (hash: sKOTsNVX+CZUe222IvZsyt4goGILGlPT7qY6Zl0V7Cg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl
rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:19:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91921AE, serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C
Validity
Not Before: Nov 5 06:19:33 2025 GMT
Not After : Nov 12 06:19:33 2025 GMT
Subject: CN=690aec75-6f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:39:35:ca:f4:ab:17:9f:5c:7f:13:90:ce:51:
76:a2:05:05:fd:65:95:0c:c2:f5:38:d2:47:08:c0:
9b:bb:ae:13:4c:56:87:87:71:22:e7:1a:5d:93:a0:
5b:cc:a8:06:d6:80:32:2d:a1:4e:54:88:b4:d8:80:
35:d2:8a:a5:b0:48:c3:19:56:1b:d5:da:5d:42:75:
d2:b5:8d:4d:cf:85:c8:70:ff:f5:17:a7:83:3d:73:
d3:c5:31:6b:22:39:40:05:0a:bf:ce:2c:63:5a:ef:
7b:41:ba:93:e0:0a:80:1a:85:59:b9:41:97:87:a1:
a0:2f:12:e7:40:0f:73:23:a2:b3:1e:16:01:43:fc:
d6:4e:10:a0:83:01:35:b8:6a:9a:96:14:59:99:92:
db:d4:81:70:e1:1f:b3:b0:13:6c:82:47:c8:db:dc:
70:ad:be:d6:37:88:06:8a:0a:24:96:57:25:71:56:
f5:cf:16:0a:f7:12:38:57:95:26:e1:86:62:aa:3e:
7f:27:7c:a3:83:2c:b3:65:09:d6:04:55:66:e5:ec:
74:7a:9c:08:4e:a8:0a:12:a5:81:8e:9d:77:af:85:
77:00:09:c9:3a:de:08:82:66:37:c3:23:b9:26:22:
c6:c7:51:22:7a:ff:ac:45:7c:3b:42:9a:ab:1c:f7:
7b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:75:8D:6F:F5:EB:E8:E1:16:D6:FC:BC:E7:CB:43:42:DF:B8:37:7C
X509v3 Authority Key Identifier:
keyid:F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:6d:62:45:0e:f0:4e:04:05:98:9a:8d:dd:4c:d5:8d:7e:51:
14:9e:e2:c1:2c:73:1b:02:1e:e4:23:55:38:72:a0:f1:07:5e:
24:fb:de:1a:ea:35:1d:ed:9c:31:d5:f1:c8:48:fa:3b:1c:cc:
90:83:7a:7c:fb:ea:00:08:9e:bd:12:51:52:f1:8b:0c:4b:fb:
90:7d:1e:0a:18:e9:c9:a0:b9:b8:94:82:2e:d9:63:88:f5:b8:
fc:11:0e:18:5f:bb:16:f3:68:40:2c:0d:17:4a:e6:9a:70:54:
89:8f:c9:2f:44:be:54:16:ba:66:3f:a4:2f:98:00:c9:f5:51:
cf:09:76:dd:2e:a4:ed:81:1e:8d:64:f7:8c:26:af:fc:c8:a5:
71:45:fb:48:34:b9:86:80:67:15:0e:49:a7:94:53:d0:23:0c:
13:9a:2e:c1:d3:18:ea:3f:5a:95:e9:e0:9d:20:9e:d5:30:87:
49:c9:03:2e:94:5e:ee:d9:48:f3:d3:c6:1c:d4:6f:6d:df:1c:
b6:1f:db:02:bb:ea:68:57:53:21:0e:f7:8e:c4:50:b4:24:9c:
2a:f2:8f:11:3e:f0:5c:e0:02:40:04:c0:02:7c:32:7f:0d:e8:
93:04:89:12:89:d7:a2:5e:55:d9:f5:47:c0:af:63:54:b7:e5:
0c:b5:79:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:17:23 2025 by rpki-client