
$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
File: GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft (raw, json)
Hash identifier: bCdu0zdvx4azS6tOW872312idVDuaXoJxT7xEeLLfCg=
Subject key identifier: C2:2A:39:F4:03:42:72:5F:EE:86:6D:1D:EB:B2:53:9F:AE:E8:E7:24
Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Certificate serial: 01D8
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
Manifest number: 01C1
Signing time: Mon 03 Nov 2025 02:17:35 +0000
Manifest this update: Mon 03 Nov 2025 02:17:34 +0000
Manifest next update: Mon 10 Nov 2025 02:17:34 +0000
Files and hashes: 1: GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl (hash: jEzwZlNK5+EKp1DIlYB0yTwe6ZjBgTcO5acBuhCvAS8=)
2: 1F388278205F11F0A895DE1EC4F9AE02.roa (hash: ksbPiEON/rfN+9KcAeESjlw0pDzn0uwDVByAkHoOZ5I=)
3: 926A40AC205E11F0A7552513C4F9AE02.roa (hash: +GOwmmv/WQvXmYUv3zJL7t+sIDyt7sOnzLXJtteAzBQ=)
4: 9781D91CB36B11EEA3394737C4F9AE02.roa (hash: HWgtJZZShVOjpJyOjZHOrob9TQCrmSDpAAlvfRMr4WY=)
5: 12D4E3D41AA411F0A196BA66C4F9AE02.roa (hash: WqNYMWqxYNONSyEjRytn5l7aZGIUzjwjymCk0WTuD8A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl
rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 02:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Validity
Not Before: Nov 3 02:17:34 2025 GMT
Not After : Nov 10 02:17:34 2025 GMT
Subject: CN=690810bf-a351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f0:bd:3e:40:20:60:f1:93:4b:71:4b:4c:e5:
c7:5c:60:8b:52:87:55:02:8c:c1:93:6a:2b:51:78:
8b:32:b2:bc:bf:66:9a:ca:bc:29:6d:80:f3:c6:37:
87:9d:1c:e1:d1:b1:3a:53:ca:e4:27:7d:8c:cc:0c:
84:e3:74:c7:c6:45:96:47:3c:6e:3f:d7:7e:de:10:
85:66:59:79:12:af:69:dd:f1:99:9e:81:ac:90:50:
39:d6:41:74:4f:17:7f:ca:41:1d:cd:b8:8a:e9:bd:
ee:f8:a6:d7:d0:4c:1d:a8:1f:c9:a1:59:47:d4:5b:
6c:ad:b1:1b:a8:73:48:a5:5f:cd:6b:cd:20:32:c5:
06:17:90:6e:79:c2:c1:df:a9:e4:a3:84:17:43:e3:
18:d2:fc:a4:92:42:b3:94:60:db:32:7a:6f:2b:5c:
5b:ea:8a:57:62:48:a6:a2:be:87:cc:6c:e3:c4:26:
2a:64:3c:81:84:3c:30:03:e8:7e:45:cf:5c:17:1e:
ea:46:0d:a9:df:85:b6:b2:57:6d:7e:7f:dc:de:0f:
77:89:44:ff:4f:83:5f:05:ff:9a:4d:b1:91:2e:2f:
66:37:c4:3f:0e:ed:15:73:03:6f:46:db:09:b6:b9:
12:23:44:0d:78:b8:f1:b5:b0:58:cf:06:23:88:8a:
76:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2A:39:F4:03:42:72:5F:EE:86:6D:1D:EB:B2:53:9F:AE:E8:E7:24
X509v3 Authority Key Identifier:
keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:5a:52:c5:a6:35:3a:d0:92:8e:ce:8c:56:a3:6b:1c:6f:55:
10:c1:8b:42:63:8d:d2:4b:52:c4:d5:4c:d7:63:0d:f0:03:d1:
41:95:b4:05:61:7e:b6:e1:43:4a:85:d0:ad:d4:14:ea:79:e5:
4e:93:6b:ac:fd:78:af:22:c3:49:1d:fb:45:fe:a5:40:b2:f7:
fd:3c:46:44:ad:de:d2:e1:c4:6d:ec:2e:c2:06:f4:48:7a:bc:
fc:09:08:bd:19:3c:ae:1c:bc:68:02:8e:2d:cf:0e:78:11:c5:
b6:51:a0:32:11:03:21:8a:f7:8f:ea:fe:7d:f1:25:8a:af:63:
46:0c:fc:f0:bd:e3:31:dc:79:af:6f:37:ba:25:d5:86:c7:fe:
39:50:a7:04:3a:fd:b8:02:00:c4:09:a4:cd:11:d4:c5:12:7d:
98:27:ac:38:69:d4:d6:c1:f5:1c:bd:62:02:64:f2:d2:24:5a:
fe:58:63:1d:f3:bd:12:a3:28:ad:f8:a7:eb:b8:4c:d2:aa:c1:
58:7e:2e:78:fb:2f:a6:ef:ef:80:05:ac:47:ca:96:5c:6f:16:
0d:85:01:56:55:29:a3:13:05:e1:6e:90:ad:1c:7f:5f:be:47:
88:46:91:53:d3:6d:37:b6:e7:4f:bb:91:16:54:57:5b:dc:ef:
1c:1b:90:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:23:33 2025 by rpki-client