
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
File: 9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft (raw, json)
Hash identifier: QTrPW/beRauClTeXwacLr5zy5RK6idfO639yM3mYNF4=
Subject key identifier: B6:79:EE:C8:58:51:3D:BE:24:1B:19:ED:DE:10:5D:D7:CB:D2:AB:C1
Authority key identifier: F6:BA:6E:63:0A:6A:A9:8D:82:15:68:26:4E:02:7B:98:8D:F5:C9:BA
Certificate issuer: /CN=A91AF3E2/serialNumber=F6BA6E630A6AA98D821568264E027B988DF5C9BA
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
Manifest number: EB
Signing time: Wed 05 Nov 2025 05:35:24 +0000
Manifest this update: Wed 05 Nov 2025 05:35:24 +0000
Manifest next update: Wed 12 Nov 2025 05:35:24 +0000
Files and hashes: 1: 9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl (hash: DbWlYuvKJmuwNtOd0rtLn8oyR6M29zpQTFi2DS9Zsdo=)
2: 3B5B829EABF511F08C00BC38C4F9AE02.roa (hash: Gd8+TlZwI+CWI44n+3dVbfrQ9bdj7BmOFxbH2WqP5KI=)
3: 50D93D94459A11F095E57A12C4F9AE02.roa (hash: lyi982HtKiog06ZDmqBvveNUhmcMavwQ9wBsxDa+hxc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl
rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:35:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF3E2, serialNumber=F6BA6E630A6AA98D821568264E027B988DF5C9BA
Validity
Not Before: Nov 5 05:35:24 2025 GMT
Not After : Nov 12 05:35:24 2025 GMT
Subject: CN=690ae21c-693f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:18:c8:44:ee:b6:e1:61:ed:69:d0:22:1d:78:
af:36:d0:a5:55:e9:16:19:26:35:ef:e7:2a:ed:50:
59:a3:ba:1d:33:7c:5c:7c:f8:33:23:34:49:71:95:
d3:dc:8d:07:7d:16:c0:13:9e:05:a5:39:47:17:f4:
b1:59:df:43:16:e4:1c:1b:e7:7c:a2:d9:e8:76:21:
77:28:65:77:53:ca:8b:ce:06:3d:b7:dc:6f:cd:44:
0a:61:5c:f4:4f:b4:2a:ce:4a:3c:ea:3b:21:1a:9e:
57:bc:f3:45:fb:6d:d1:a5:ec:91:c9:58:3a:f9:96:
29:f1:39:e7:35:b6:19:3f:2d:a6:23:83:30:23:e7:
75:08:ec:1a:ba:ac:47:00:7a:ba:01:26:c7:c5:13:
22:33:97:ff:71:38:44:fc:13:62:48:49:41:f5:e2:
d2:49:db:48:ad:e4:1e:cc:64:b2:9b:b5:28:61:33:
20:ec:9a:2d:29:bb:96:e6:6c:df:1d:c2:e5:89:08:
af:bb:6e:d9:5e:39:f3:46:ca:03:63:f0:3b:b8:9c:
88:3b:47:0b:5d:4b:12:2c:9d:6d:6a:fa:e5:7b:78:
2c:cb:3f:e2:83:5c:8b:63:e0:1a:2d:79:8f:de:1f:
c5:96:d1:9b:1e:26:56:74:80:cd:86:93:8e:9d:57:
8b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:79:EE:C8:58:51:3D:BE:24:1B:19:ED:DE:10:5D:D7:CB:D2:AB:C1
X509v3 Authority Key Identifier:
keyid:F6:BA:6E:63:0A:6A:A9:8D:82:15:68:26:4E:02:7B:98:8D:F5:C9:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:05:0c:f2:31:65:23:28:7b:be:cb:84:6a:c5:b1:85:a5:91:
e0:44:fe:5a:77:1c:a2:b1:8c:30:5f:5d:12:f1:db:7c:68:8d:
5d:92:80:72:56:62:83:08:05:f0:43:99:0e:8c:f7:34:cb:d0:
10:c6:e1:1b:57:39:cd:0c:e8:3e:90:b5:df:b5:7b:88:13:cf:
58:a3:58:8f:73:30:9e:98:42:0c:41:44:1d:b0:22:48:38:a6:
a4:31:72:a9:c4:5f:47:4b:f0:5f:36:3a:ae:6f:26:a5:ff:5f:
36:5d:3e:d8:6a:a2:53:1b:21:4e:4c:2e:3d:e9:1f:02:ca:82:
a2:4b:c1:5f:f1:f9:f4:e3:40:34:ab:d2:7d:2b:04:fb:e8:8e:
19:9b:83:53:5d:bc:f3:75:d5:c4:6c:d6:a5:f8:95:f9:64:3a:
0a:79:9a:f8:b9:24:fe:f5:a8:38:1a:a7:d8:16:8b:51:83:60:
b2:db:8c:33:8e:a6:53:ef:2d:67:b7:df:bd:2d:0f:b6:3a:f2:
fb:79:ae:42:2d:c2:1e:9f:5f:c9:11:79:32:d4:1e:a6:0b:51:
1b:2e:e9:8c:af:26:69:01:08:5a:db:27:ae:71:cf:28:71:90:
6a:5f:64:fb:dd:5e:84:4c:0b:0f:47:3f:64:7b:04:ca:ee:b8:
57:84:9e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:29:52 2025 by rpki-client