
$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
File: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft (raw, json)
Hash identifier: ep5jhzZloCRUU0mVpFGHOG5tPrx/uMcFVJKu0ciA0wU=
Subject key identifier: 43:FD:1D:14:46:72:4C:42:69:FD:2E:84:38:84:A2:87:D2:9A:19:3A
Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
Certificate issuer: /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Certificate serial: 0821
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
Manifest number: 0806
Signing time: Tue 04 Nov 2025 21:11:04 +0000
Manifest this update: Tue 04 Nov 2025 21:11:04 +0000
Manifest next update: Tue 11 Nov 2025 21:11:04 +0000
Files and hashes: 1: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl (hash: pnIRDiI3Ppfps09pYbpEBznrzkAjUX9kLGyBObgHf/Q=)
2: 4314DB4C8EAF11F091C0B421C4F9AE02.roa (hash: soxPBotfeGZJQtYFANg/AIsqymj558YBgTRf2OttWoQ=)
3: B0425744D7E211ECBD1D447FC4F9AE02.roa (hash: FmrrPxT3AQS1QsODrOl0Mag5fJkdo8yw7npJe5EvI48=)
4: 1DB0529C7CA711F0A52C5966C4F9AE02.roa (hash: XaSGJdVmQFwnCd+b3KdpqRusxazGj+qlh/KndRTEPfA=)
5: 1069D50EB54B11F092E79246C4F9AE02.roa (hash: oPyKzL4O0xlhZZ92P0pzMtzovY+UYDC46Jkmm8P2idY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:11:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2081 (0x821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Validity
Not Before: Nov 4 21:11:04 2025 GMT
Not After : Nov 11 21:11:04 2025 GMT
Subject: CN=690a6be8-7d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6e:1c:77:d7:17:c5:fb:43:73:39:1c:9e:94:
db:05:85:77:e6:8b:80:77:cb:eb:83:be:94:e7:b0:
d1:29:92:30:b8:f1:20:42:bf:ba:9b:9c:a4:05:b4:
ac:6b:65:db:a2:02:a9:75:59:3a:9e:e9:c1:90:54:
eb:88:33:27:4c:3c:1f:3f:04:83:b1:59:7f:16:fc:
e5:8f:e5:2d:f5:07:d3:27:03:59:d3:66:24:8b:a0:
df:57:64:25:d5:83:10:2a:6c:5b:38:9c:12:4d:59:
ef:c0:71:0c:66:78:96:b0:ee:04:bc:30:9d:32:c8:
d9:99:25:02:6e:5e:d0:65:d3:10:d8:c6:e7:ca:b1:
33:3d:f4:35:a3:47:ba:96:08:4b:5e:68:04:01:3b:
1b:cb:12:88:62:d0:e4:20:0f:67:08:69:83:b3:66:
87:67:6c:78:b8:1a:0b:be:06:a4:71:07:cd:5a:10:
96:1f:21:49:14:9c:b5:f8:20:02:37:49:a0:12:e1:
e2:cb:27:3a:56:15:ee:a5:1a:eb:f3:e1:67:f6:49:
f1:15:0c:e9:a7:ec:49:5d:ca:2e:59:63:94:48:6d:
d6:7f:0d:8a:1c:34:51:90:d1:fb:ce:d5:34:f1:4f:
70:cc:80:d0:e1:14:8b:ac:10:0d:64:d3:32:e3:bd:
17:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FD:1D:14:46:72:4C:42:69:FD:2E:84:38:84:A2:87:D2:9A:19:3A
X509v3 Authority Key Identifier:
keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:50:fe:a1:89:d1:78:5f:a8:63:e0:95:c3:2d:b1:17:f3:bf:
96:d3:78:06:a9:a2:12:63:a4:be:c7:9a:3e:98:13:e3:72:26:
a1:ce:fb:ff:89:fb:a7:72:a0:e7:95:c3:6a:84:44:10:91:d1:
0f:0c:65:38:0f:a5:bc:ae:3e:d1:ef:d4:06:53:e2:5e:18:f0:
d5:83:57:ed:6f:4e:0f:17:0e:7e:b1:b1:16:06:1b:2c:b0:d9:
2d:3f:2e:4f:1f:4b:27:26:29:8a:52:89:39:82:be:de:53:95:
18:a7:6e:81:cb:ba:38:71:34:00:ae:21:77:ad:60:ae:0f:97:
46:04:36:2a:22:da:0c:24:c1:3c:22:77:94:d2:ce:fe:fa:e1:
3a:14:03:8a:ef:09:08:c8:7a:63:b2:04:c9:8f:82:78:86:db:
00:d4:3f:71:9b:6f:b3:ec:38:74:35:8c:66:3f:8e:0b:29:d9:
a5:07:38:19:60:5c:87:d6:c1:be:9d:3f:90:96:b2:a2:9f:f2:
2e:e8:73:58:da:9b:19:79:1d:2a:41:d3:68:70:b7:a2:c1:f8:
2a:bd:93:fe:8c:51:1a:8f:b1:f1:10:24:8d:58:aa:cc:2d:44:
e0:c4:4b:81:33:8f:f5:fe:71:d7:e3:1b:8f:29:96:c4:8d:01:
1d:bf:cc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:04:43 2025 by rpki-client