
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
File: hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft (raw, json)
Hash identifier: OZqKqMuiriD1g7K/Xqatz+PgUczKd77D1vvITfJU4wM=
Subject key identifier: 5E:F1:7F:57:0A:17:A3:B3:6D:32:49:22:5A:EF:A3:35:0B:BC:4E:C7
Authority key identifier: 85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC
Certificate issuer: /CN=A91AC567/serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC
Certificate serial: 26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
Manifest number: 23
Signing time: Mon 03 Nov 2025 07:44:54 +0000
Manifest this update: Mon 03 Nov 2025 07:44:54 +0000
Manifest next update: Mon 10 Nov 2025 07:44:53 +0000
Files and hashes: 1: hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl (hash: VaOriVVI/TeKKUoPkWpDTKXMm8b8D1zLNcTDTeN7qwQ=)
2: 3014B5BC86D011F08795B91FC4F9AE02.roa (hash: FD/7U7XSmgg6Fwdvyfw/wFBPedO+DNiEk5bwRU3tAxw=)
3: 675D716092EE11F0990BEA65C4F9AE02.roa (hash: 4QCa8Wv6sDtZDWi9ABDwu1xQIu9iLo9GAI+6YdZfu04=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl
rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 07:44:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC567, serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC
Validity
Not Before: Nov 3 07:44:54 2025 GMT
Not After : Nov 10 07:44:53 2025 GMT
Subject: CN=69085d76-7ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8a:26:bb:da:f6:af:3a:a7:de:a0:ac:93:86:
3f:99:65:0c:c5:62:f2:a3:01:e9:4c:6b:85:6e:f2:
5f:18:66:86:f0:27:54:fc:e6:c8:78:2a:9e:aa:dc:
85:bb:45:68:79:df:5d:0d:1e:dd:8c:43:dd:45:ef:
02:1d:0d:3c:c7:3a:0d:a2:1d:29:34:42:1d:d6:35:
31:c0:5c:38:35:5e:40:e6:4b:f0:e3:fd:18:cb:88:
8e:5a:1e:70:c3:ad:76:38:f2:d8:51:93:ff:ac:c0:
ad:1d:9a:15:bd:22:fa:4c:1d:d9:83:da:ff:c4:a6:
bd:0b:7b:df:33:cd:0e:8a:19:0c:bd:0c:d6:36:8d:
9e:d1:f2:c0:03:05:0c:d6:80:94:6f:a3:68:a2:f0:
a3:40:70:cb:52:e1:c4:22:6d:34:86:ea:c6:3a:14:
29:7e:d4:2b:87:99:96:10:1c:8d:71:3c:b9:88:db:
50:48:b5:95:4c:7e:0f:c5:1c:f0:4c:d0:c1:d5:6e:
91:4d:7d:76:a0:f4:97:4a:74:9a:7d:8a:22:15:39:
7f:f7:15:96:09:61:1c:0e:a5:61:40:94:c2:30:1e:
6d:16:80:3c:df:da:59:76:e1:8f:f5:b0:24:b5:f1:
68:bc:46:3b:f7:7f:14:b6:27:56:47:89:c1:fe:c5:
6a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F1:7F:57:0A:17:A3:B3:6D:32:49:22:5A:EF:A3:35:0B:BC:4E:C7
X509v3 Authority Key Identifier:
keyid:85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:75:cb:93:2b:ad:29:2b:96:01:6d:1f:25:c3:80:21:38:bd:
67:41:c0:ae:2c:e8:19:ac:8b:32:a5:da:15:4e:69:70:b7:8d:
d0:20:f5:0f:f9:6c:73:af:ee:3e:e5:9c:08:f6:90:16:37:6a:
10:d3:89:0b:f3:a7:59:6a:b1:cc:d9:fe:fe:85:14:24:11:d8:
4d:09:4e:5d:47:11:e8:84:a9:c8:fc:de:6f:c2:f4:7e:fd:a2:
51:e7:d9:a0:f3:93:f9:fb:1d:5c:60:64:34:83:d4:2c:49:fe:
2a:8f:23:be:9c:e2:5f:cc:dc:33:ee:2c:b0:dc:8c:df:5a:2c:
90:5c:db:3a:61:47:5f:87:e4:07:b7:9a:a3:41:39:3b:de:48:
37:ab:d5:14:3f:fa:f4:e6:64:6a:7f:cc:1f:cb:08:01:4f:5d:
2b:5e:1d:2a:34:c6:72:7a:1f:b8:fc:f8:a9:54:39:64:e6:38:
80:91:62:47:04:a3:ba:ae:d9:7f:22:06:a3:2b:78:5e:c8:a2:
f0:a1:a5:ee:b4:f1:d3:52:2c:15:41:12:6f:fd:bf:95:aa:0d:
88:be:c9:c4:47:16:10:c4:b1:47:2d:3e:74:05:db:1a:d1:49:
13:6e:05:11:7f:b1:e5:e5:2f:1e:9f:dd:6b:8e:eb:06:54:aa:
eb:ba:10:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:38:31 2025 by rpki-client