
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
File: tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft (raw, json)
Hash identifier: p2+9sN2lMaflAb7VaXJoWYi4/XfzEe9ytM1zidptUkA=
Subject key identifier: 49:4B:6C:B6:03:3F:6F:16:01:41:DF:6F:F9:F4:2E:55:AC:B7:84:1A
Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
Certificate issuer: /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Certificate serial: 0152
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
Manifest number: 0143
Signing time: Wed 05 Nov 2025 04:42:31 +0000
Manifest this update: Wed 05 Nov 2025 04:42:31 +0000
Manifest next update: Wed 12 Nov 2025 04:42:31 +0000
Files and hashes: 1: tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl (hash: tIHupwnVnzcWmWJE7UJuFlorfxDkCNca2MGUz19VRXk=)
2: F2D62F12A5FD11F09E86DE59C4F9AE02.roa (hash: dbyE92rBZMKmsivB+ep5rxHPze9Bbozx1KkgXLzY/Bs=)
3: 4CF8923058BC11F09869AC87C4F9AE02.roa (hash: zY90zo/xojHjF1wecs/HwesdG3vMHXP6Ku/hhTPUGd8=)
4: 6D85335A58BC11F0983EE987C4F9AE02.roa (hash: YJ4UnxpzDCCzQhrx6wFr1GrzFRiuwNVyQ4kIp3p0jlQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338 (0x152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4849, serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Validity
Not Before: Nov 5 04:42:31 2025 GMT
Not After : Nov 12 04:42:31 2025 GMT
Subject: CN=690ad5b7-f8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:47:77:45:df:80:1b:1b:47:00:13:3c:d7:de:
84:7b:8e:5e:67:0a:93:cb:0b:0f:71:e4:f1:aa:65:
78:02:0d:06:3c:48:62:59:e6:0f:a1:fd:63:24:22:
43:31:90:e0:c2:2e:59:e7:de:6e:25:d7:09:28:2c:
58:68:e0:05:ed:0e:07:55:1e:db:99:ba:0e:bc:1b:
cd:29:c0:1d:71:7d:28:f4:af:45:a4:ca:18:db:7e:
40:d0:eb:e9:1d:f6:b1:ef:fb:91:06:50:8e:86:5a:
6d:08:3a:41:91:53:b5:9f:a6:72:39:05:9b:f5:37:
81:46:a3:72:5f:fd:1c:19:8c:a5:d9:81:2d:02:f3:
91:9b:35:08:59:8d:38:24:c7:2b:db:e7:46:1c:7e:
90:e3:5e:82:ef:dc:bc:f3:70:2c:36:d4:4a:ca:fa:
fa:b7:c3:9c:b4:2f:b2:46:35:6a:be:23:d5:8d:d9:
bc:07:27:ec:6f:ad:c7:62:f8:7b:f0:b3:b6:f3:81:
d8:b1:e2:0a:f7:d5:89:19:a7:4b:ee:bf:4a:2d:93:
26:ad:54:d2:3e:ee:ef:e4:d6:30:7e:c7:5f:c3:2a:
53:33:05:ae:c7:36:61:99:52:b0:54:5f:3c:b6:19:
c6:90:02:40:ab:e7:3c:e7:5c:5d:a9:91:40:14:80:
1b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4B:6C:B6:03:3F:6F:16:01:41:DF:6F:F9:F4:2E:55:AC:B7:84:1A
X509v3 Authority Key Identifier:
keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:fa:2d:12:0d:11:8e:05:07:68:ef:33:bb:51:5c:41:85:05:
87:68:82:6b:08:a3:ad:2e:8a:ae:c7:74:a7:b1:b8:f6:08:07:
70:a2:18:3a:41:27:19:d5:a3:0f:51:fd:33:dd:ec:2b:ca:1b:
d5:d0:4f:93:8c:65:dc:0b:90:3f:b4:c3:60:59:5d:1b:83:91:
d4:b3:c0:02:50:e8:34:35:49:27:70:f3:13:e3:f5:e3:2d:95:
8f:a4:a5:4e:65:6e:3e:40:4e:1f:a8:c2:16:67:fe:13:a0:32:
49:55:55:1f:66:3a:ed:10:a3:db:34:dd:f8:38:06:4e:89:dd:
89:77:c3:32:ec:69:fa:16:d1:34:91:ac:3e:77:e1:86:26:50:
db:8e:54:76:19:a6:f1:19:72:61:1d:66:83:b4:0c:56:fa:77:
ab:08:73:e6:a4:8c:d2:62:5e:1d:51:3c:67:4e:7f:fb:e4:b0:
1e:3d:93:df:4a:d7:22:49:24:fb:1e:c0:58:f9:54:52:f1:4f:
ae:13:79:4f:6b:71:75:ce:e4:db:85:15:5d:44:e1:8c:28:78:
c8:33:a4:35:4b:a1:74:af:9f:43:b3:ee:cc:a3:07:8f:e2:d7:
76:0b:83:f6:2a:fa:92:9a:31:10:13:6b:66:3c:a6:45:83:e1:
4a:da:8d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:44:10 2025 by rpki-client