
$ rpki-client -vvf rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
File: 8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft (raw, json)
Hash identifier: K8S+iYOsmt0BxhYyIcd/0ThocT1TsQ8bISaZ6Y3fRT4=
Subject key identifier: C2:9A:89:13:41:2A:2F:FF:0E:E3:B5:A9:98:96:69:96:78:1D:F2:73
Authority key identifier: F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78
Certificate issuer: /CN=A91955D9/serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78
Certificate serial: B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
Manifest number: B5
Signing time: Mon 03 Nov 2025 06:02:37 +0000
Manifest this update: Mon 03 Nov 2025 06:02:37 +0000
Manifest next update: Mon 10 Nov 2025 06:02:37 +0000
Files and hashes: 1: 8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl (hash: dtP1NFg6OralhCPCdA/loyJR8zSq8VVTlSsMeCY8qj4=)
2: 0D041790A28611EFBD5A8C11C4F9AE02.roa (hash: 97I65+Q066TDiRkq5FVajUp8ATxWSUAGmGMHS8ACfSY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl
rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955D9, serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78
Validity
Not Before: Nov 3 06:02:37 2025 GMT
Not After : Nov 10 06:02:37 2025 GMT
Subject: CN=6908457d-257a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:69:47:1e:9c:07:41:77:ed:7b:af:c5:84:
9b:c2:18:92:60:48:ff:48:13:cf:75:77:eb:37:26:
d5:b2:12:c8:04:58:92:38:06:c5:13:30:7a:0d:40:
09:5f:f4:c9:ff:66:0b:32:e2:3f:6f:96:7b:c2:28:
a3:95:0f:b8:35:2f:ce:47:c4:1d:a0:d9:bd:97:42:
9a:19:51:fa:30:f9:93:66:b5:25:a7:27:bd:37:a3:
13:5f:61:77:ba:a2:5c:9b:27:4c:46:fb:99:9b:54:
d3:ce:f8:e8:b9:a6:2c:3e:2b:0e:de:42:f5:aa:0d:
b9:50:cf:95:6b:a9:7a:3b:75:ad:51:07:67:07:2e:
d7:21:b2:6f:46:90:99:ad:ca:a6:f4:46:4c:5e:63:
c2:13:0b:f4:ff:2b:df:83:cd:e6:62:3c:77:28:fe:
b1:ee:22:96:79:6b:85:c2:41:f0:b5:16:ec:e5:fb:
05:16:0a:0f:14:a9:82:42:fb:f6:bb:72:d2:09:45:
eb:1b:1d:e5:22:6b:bd:bd:3e:7c:7e:aa:05:52:8e:
fb:1d:e5:e6:bf:f3:55:bd:4f:3d:35:a3:c3:2b:55:
b7:41:0d:c0:4a:9e:54:a4:57:e1:2a:5c:4e:ee:9b:
5d:70:5f:67:b1:cb:48:2f:24:ff:4c:7b:3a:9a:f0:
1a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9A:89:13:41:2A:2F:FF:0E:E3:B5:A9:98:96:69:96:78:1D:F2:73
X509v3 Authority Key Identifier:
keyid:F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:5f:5b:64:4f:81:c2:5a:89:49:8e:51:48:74:9b:09:b9:67:
87:2c:13:65:df:f8:7b:a0:d5:f5:c9:dc:be:4a:a2:67:50:fd:
d7:9a:71:6b:e8:12:8c:14:14:b3:3c:82:4b:5f:11:3e:50:f5:
5b:a9:8b:f2:31:f3:f2:a3:6c:57:05:71:3b:f0:ae:25:75:e5:
63:12:8a:66:23:a8:3e:9c:c1:b5:28:d0:dd:95:af:b8:63:8d:
db:d1:3a:26:63:d4:19:8e:99:34:e3:fa:92:4c:76:be:7b:3c:
a4:a5:07:89:8f:51:11:13:6f:19:1e:cc:e3:25:f9:3d:88:8f:
77:45:f5:65:d4:6a:95:42:d1:7d:a3:f3:e6:6c:bf:86:63:6f:
dc:e6:ca:b7:bd:62:7d:4e:4b:72:a0:4d:07:c4:e8:93:9f:3f:
8a:4c:e6:80:3e:62:b7:76:e9:ca:3c:8f:01:a0:43:fe:9d:f5:
74:f4:d3:0f:d0:af:21:c3:10:da:ed:b0:de:a5:76:39:dd:c6:
3b:9d:a2:15:ec:3a:41:81:16:d3:32:68:4b:b6:ce:88:0c:79:
49:ee:2b:38:54:1e:0f:72:c9:cc:6e:20:f3:63:18:35:2d:78:
3e:db:65:d8:e9:ff:16:2d:81:61:56:da:1b:0b:9a:e0:3d:72:
3a:79:21:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:04:46 2025 by rpki-client