
$ rpki-client -vvf rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft
File: V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft (raw, json)
Hash identifier: TrBJq7xsKw6o4rZhY4RbOBOysmi0yRKM+so8JtRjM7E=
Subject key identifier: 63:4D:56:2F:B3:D8:6E:74:8D:E8:19:09:29:A2:58:13:28:3B:A7:29
Authority key identifier: 57:B5:83:2B:49:00:18:19:CA:E1:CC:B9:2C:DB:1C:B4:68:87:E0:9C
Certificate issuer: /CN=A91955D9/serialNumber=57B5832B49001819CAE1CCB92CDB1CB46887E09C
Certificate serial: C0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft
Manifest number: BC
Signing time: Wed 05 Nov 2025 06:14:52 +0000
Manifest this update: Wed 05 Nov 2025 06:14:51 +0000
Manifest next update: Wed 12 Nov 2025 06:14:51 +0000
Files and hashes: 1: V7WDK0kAGBnK4cy5LNsctGiH4Jw.crl (hash: YwtGgXzOf/EsMVYxhlvlq70hKXoYkfop5wSyzPTeAD0=)
2: EC509DE4501211F0BE5D2025C4F9AE02.roa (hash: 59709TYd4BYZbsPTssB//DoW2gqjEPI/Hf7sdt1S0uw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.crl
rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:14:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955D9, serialNumber=57B5832B49001819CAE1CCB92CDB1CB46887E09C
Validity
Not Before: Nov 5 06:14:51 2025 GMT
Not After : Nov 12 06:14:51 2025 GMT
Subject: CN=690aeb5b-f914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:5a:68:f4:08:80:9c:9a:5e:e9:2d:7a:9f:
a8:24:37:57:40:b9:fd:c1:cf:d7:f9:07:cc:df:f3:
ef:56:0f:49:7e:92:2b:0e:34:c4:25:b3:6e:d9:07:
0f:75:44:fa:4c:2f:f5:70:c0:6b:f8:9e:d6:f8:1f:
0e:c0:c2:5e:bc:f1:1b:a8:f5:85:44:e5:a0:78:53:
d1:63:f4:5b:56:a3:be:a1:1a:7b:04:96:f1:d4:98:
e8:d3:de:c4:95:87:99:11:41:55:b9:17:6f:89:ce:
48:2d:49:8e:f5:6a:82:62:b7:18:5d:6a:77:e3:aa:
7c:18:11:5b:f2:d7:d9:72:14:80:40:fc:96:1c:27:
15:be:57:be:59:b4:5f:b1:7d:b0:26:a6:43:db:cd:
d4:83:e5:37:14:83:6e:97:b5:86:b4:33:65:50:71:
9e:e7:00:fa:5c:55:02:00:dd:71:ab:77:d8:f9:71:
a5:88:48:97:04:04:fe:fa:da:0b:1b:aa:1c:02:93:
6c:3a:12:c1:31:0c:3c:87:91:a1:4c:08:8e:c3:36:
05:ed:60:91:6e:77:5f:b4:9b:e6:0c:76:83:db:91:
0b:31:a1:75:64:48:75:0d:6f:f7:b5:62:29:4a:4d:
4b:33:de:44:f1:20:6b:72:ca:05:1a:13:70:8e:22:
95:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4D:56:2F:B3:D8:6E:74:8D:E8:19:09:29:A2:58:13:28:3B:A7:29
X509v3 Authority Key Identifier:
keyid:57:B5:83:2B:49:00:18:19:CA:E1:CC:B9:2C:DB:1C:B4:68:87:E0:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:fc:5a:ef:e1:b7:10:d1:5c:a8:b2:2a:f5:c4:95:f9:b3:c8:
34:0f:b8:1b:58:a2:68:92:bd:c7:86:47:f7:e8:a0:45:c1:9a:
ad:da:ba:d4:43:be:f3:28:de:31:78:76:87:bb:9c:e5:74:32:
9c:5c:d3:62:4e:57:6f:00:33:60:18:85:1c:16:97:33:41:e5:
aa:0d:71:af:d5:f6:dc:2c:fa:b5:a2:a9:d1:f2:1c:8f:07:4e:
ac:6f:9b:36:00:e5:3f:24:fe:6a:9e:e6:19:84:c9:2a:46:6e:
a3:e3:7c:85:54:1c:91:8b:0e:2d:bc:c7:cf:a7:ef:67:fd:dd:
dd:f4:67:4b:df:20:a7:46:d9:f7:ed:51:26:f9:f0:d2:7c:08:
f6:0c:8e:40:4c:31:40:6f:8b:62:97:0f:f3:20:42:73:d9:4d:
f2:bb:7b:36:b4:fd:24:c4:9b:2f:5a:7b:ab:a1:44:61:99:92:
2a:fb:26:ca:15:de:23:fa:c8:a7:da:ff:21:4b:bf:25:59:55:
a1:db:fc:df:db:5f:c4:43:c5:3c:f2:55:47:99:59:c9:2e:3a:
60:95:34:dd:9c:8c:13:e5:ea:41:57:65:1e:25:21:4c:de:22:
00:0f:39:9b:d8:9b:d3:28:a6:fd:1b:fa:84:a1:c6:18:ed:b5:
88:2d:a1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:57:03 2025 by rpki-client