
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
File: rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft (raw, json)
Hash identifier: cAB1BfMCdLsyiaWKf/KfpzNSDhvCrCPYX98MNKq73Ps=
Subject key identifier: 02:00:45:54:62:F7:00:C8:03:28:EE:22:9A:87:FD:77:56:C1:BC:F9
Authority key identifier: AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2
Certificate issuer: /CN=A91A85A8/serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
Certificate serial: 0523
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
Manifest number: 050A
Signing time: Sun 02 Nov 2025 23:36:56 +0000
Manifest this update: Sun 02 Nov 2025 23:36:56 +0000
Manifest next update: Sun 09 Nov 2025 23:36:56 +0000
Files and hashes: 1: rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl (hash: 9TJlBXGzYv/4pI+4P7B2gqMCqVyc1ERIiM2rraL/KEY=)
2: B016290E2CE211EC8664D47EC4F9AE02.roa (hash: XSnUK976UXwYHciWW5wccgOD7fOjMode6M1FzFFnvQ4=)
3: 14172F4C264311EEB0342B45C4F9AE02.roa (hash: hGiilfSQIcgKH4NIdZJeXzdl+FpDj03CR4zzG/JcbXg=)
4: 8C2F1C96367F11EEB689C243C4F9AE02.roa (hash: H8xjH5y20P1rOG3WSUPBDAJqjIZUNQTVo2FaxmnxQzw=)
5: AF91ADB42CE211EC8664D47EC4F9AE02.roa (hash: wwz7C2WhiFB/fPJcMxt1QlkPUOWQEV9jMcZeemu9/Kg=)
6: AEFA3DD02CE211EC8664D47EC4F9AE02.roa (hash: 0rs0STSm9B6q1ImRupSPhNQw8yrXD67mSzQRxhTWeyM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl
rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 23:36:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1315 (0x523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A85A8, serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
Validity
Not Before: Nov 2 23:36:56 2025 GMT
Not After : Nov 9 23:36:56 2025 GMT
Subject: CN=6907eb18-b3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:36:e7:61:76:47:20:c6:9e:46:00:f7:ba:f7:
bc:3d:74:01:93:68:31:6f:3e:3f:b9:f4:f7:e5:e1:
8d:9c:cd:80:6e:b2:7e:c6:d5:b8:22:a0:f4:e7:02:
c0:d8:b4:4d:33:ad:5c:db:e0:52:3c:f2:b0:56:fe:
a3:42:c6:e7:a4:5b:d5:a8:eb:15:b4:57:b4:f8:24:
c1:c5:88:fc:00:77:af:c7:86:a5:9c:d0:bf:45:92:
89:85:c3:83:b5:60:50:7f:67:80:d5:ea:40:18:c6:
9f:21:c2:6a:9a:f1:5e:43:4b:6f:c0:36:f0:87:2e:
fd:9a:d5:94:be:e1:bb:46:0b:da:91:26:51:f4:c3:
5e:19:1d:db:c0:66:75:84:0a:38:bb:54:12:a9:35:
dd:87:a4:9f:ba:9b:8a:1e:bc:a3:3a:5f:01:c6:a4:
cd:b1:c5:67:d5:9a:da:f8:46:7d:b8:28:98:9f:4e:
e1:ae:f6:de:48:d1:9c:5e:da:29:23:08:c6:3d:53:
8b:88:6f:82:c7:36:6f:9d:f4:b0:a1:f1:4e:0b:8e:
7d:e3:63:21:15:8f:93:72:99:68:34:3b:8b:c6:57:
39:33:6b:c4:65:6e:07:59:d2:ce:8c:7b:c5:97:1b:
ae:fd:48:d2:2c:db:75:4a:e3:3e:45:fc:05:66:21:
3b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:00:45:54:62:F7:00:C8:03:28:EE:22:9A:87:FD:77:56:C1:BC:F9
X509v3 Authority Key Identifier:
keyid:AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:dd:22:d2:af:ae:be:c7:a3:e2:53:2c:8e:38:27:44:e1:7f:
e3:a8:29:41:68:dc:69:03:3c:43:37:cc:4f:e0:04:f8:bf:ba:
1c:f8:6c:59:ad:e5:74:f1:bb:03:18:bd:9d:7e:8d:41:5f:be:
6c:a7:1f:19:95:cb:9c:ce:24:40:05:50:51:46:e9:59:d3:ec:
8f:6f:9d:3d:22:c2:17:c8:7e:7c:81:87:cd:68:61:bb:30:8c:
af:a8:49:40:50:3b:db:fb:04:9e:fb:11:3c:11:20:c7:d1:1d:
a7:e1:76:1a:3a:f6:9f:76:76:c7:b3:ac:bd:a3:55:fb:2c:4c:
28:99:03:70:3b:53:38:26:38:22:8c:d0:76:ae:ec:5c:a7:bd:
c8:ce:53:80:4b:83:0f:55:64:65:1b:49:02:ab:fc:50:80:2d:
6a:61:59:54:1e:fe:be:7f:f2:9f:a5:75:e9:97:26:f3:2e:22:
52:a4:31:ef:7e:50:10:c2:2a:01:ee:81:15:0d:20:71:3c:3a:
88:80:c2:46:16:ad:4d:c4:0f:46:58:d9:be:1b:d9:43:c1:0e:
c3:8c:9d:6f:77:8e:bb:f9:32:08:7e:11:d1:0c:f9:cc:40:0d:
27:33:32:28:2c:14:b7:ce:5e:f8:83:eb:10:15:14:be:24:cb:
4d:02:1c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:43 2025 by rpki-client