
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft
File: RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft (raw, json)
Hash identifier: 6rCDC/dd8E5l9BT0V1gwQt6cmsOdqFwbk/vYs0TpEe8=
Subject key identifier: 0B:56:A3:66:B5:57:96:D9:D2:6C:25:BF:38:DA:BD:D6:16:08:C2:B1
Authority key identifier: 45:C9:DE:25:4E:2E:03:05:D6:50:A5:0A:6B:F1:92:68:80:7E:F1:0A
Certificate issuer: /CN=A91A1938/serialNumber=45C9DE254E2E0305D650A50A6BF19268807EF10A
Certificate serial: 01D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft
Manifest number: 01D4
Signing time: Wed 05 Nov 2025 02:54:17 +0000
Manifest this update: Wed 05 Nov 2025 02:54:16 +0000
Manifest next update: Wed 12 Nov 2025 02:54:16 +0000
Files and hashes: 1: RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl (hash: ujh6uLvauFeiVFdbYs45h7EJ0Y+fDDkQsvS7KeWfEbM=)
2: 68ECF3BAEE1911ED9C7CDC63C4F9AE02.roa (hash: BCIBhB1yRhPPINtU+Jvj6+AcCagEYHcs0oGO7PLSo3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl
rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:54:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1938, serialNumber=45C9DE254E2E0305D650A50A6BF19268807EF10A
Validity
Not Before: Nov 5 02:54:16 2025 GMT
Not After : Nov 12 02:54:16 2025 GMT
Subject: CN=690abc58-b60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:c2:8c:a0:4c:c5:78:90:98:e1:5c:fc:b7:a4:
13:e0:38:9a:14:6e:de:ef:71:d1:2b:c9:be:f4:5b:
02:2d:74:90:b8:bb:44:27:ba:c5:85:b7:78:db:d9:
f1:64:c6:90:e6:55:ab:73:35:c5:98:29:a5:53:07:
be:ab:47:60:b4:70:b7:db:8a:26:d7:82:df:13:6d:
00:85:8d:a8:3d:4d:22:dd:b7:c2:f0:53:39:1a:43:
d4:d1:74:a8:26:f7:a4:82:4c:e2:d7:6b:30:39:95:
a6:c5:ad:ac:1e:d1:0e:35:d7:96:9c:9c:43:17:60:
4b:cf:92:15:40:79:68:87:3d:8a:ee:63:5b:0f:3c:
50:4a:b8:77:90:51:05:d3:96:75:e1:6a:ef:cb:b8:
7e:6a:1d:24:96:ff:c0:b0:d7:f2:9c:26:94:16:f5:
6f:19:26:5c:d1:28:da:7f:ff:3d:20:d7:a7:99:34:
3f:02:f8:ff:76:8e:9e:c8:0a:52:b9:77:f4:4c:b2:
83:21:2c:b6:63:9f:38:6f:38:43:52:91:c8:80:41:
ec:c7:f0:b4:64:4d:46:dc:d9:37:b6:58:81:cd:5a:
5e:a1:5d:64:f2:7b:f5:56:1a:be:2f:4a:b8:21:d0:
08:28:88:3e:8f:49:88:57:b9:4f:e0:3c:69:78:f0:
e8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:56:A3:66:B5:57:96:D9:D2:6C:25:BF:38:DA:BD:D6:16:08:C2:B1
X509v3 Authority Key Identifier:
keyid:45:C9:DE:25:4E:2E:03:05:D6:50:A5:0A:6B:F1:92:68:80:7E:F1:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:21:a1:9f:1c:43:d8:f4:43:de:06:e4:83:63:52:32:a7:d4:
32:ce:0c:6e:6e:a6:02:2b:0c:f3:20:a6:3e:31:d6:83:e2:f2:
0a:b5:99:dd:e1:a7:95:75:e9:d2:a5:c0:a1:41:54:91:70:54:
cf:7b:3c:25:af:6b:53:e9:ac:f7:92:1c:4e:70:3c:db:3e:bd:
11:1c:c5:d7:c3:3d:15:fb:83:65:84:d9:a9:21:a4:07:9a:74:
dd:fe:00:a8:20:f2:7b:2e:ae:8b:1f:06:6d:5b:8d:e7:44:d4:
88:6d:de:c8:4e:fb:80:fd:0c:3c:97:7b:13:bc:66:b0:90:2e:
c3:80:83:3f:d6:bd:4a:c7:46:90:68:4b:0d:a2:54:4c:76:c2:
8b:da:6c:02:be:12:77:66:52:f0:45:7f:d7:bf:7f:b9:b3:98:
fb:69:61:e1:15:8e:99:c1:2e:f7:d3:93:5f:35:fd:a3:98:57:
91:b3:58:8a:56:1a:45:27:42:46:f5:c3:57:8c:87:33:d8:c9:
cd:81:3a:d1:12:ee:c4:8a:7d:b2:28:10:1b:e1:d4:5d:62:5d:
a9:9f:fd:d4:29:3a:9e:11:ab:9f:a2:d5:6a:2e:56:f7:9f:88:
65:83:e2:a0:d9:bb:dc:21:4c:e6:35:a0:3e:55:c7:d0:29:3b:
34:24:32:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:00:52 2025 by rpki-client