
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft
File: mvCw748-tT8U2E-jphBr5kvXgnI.mft (raw, json)
Hash identifier: pbh01JmrpPHBp6wn5/jsndFf0CAne6ca3++lYtGXbwY=
Subject key identifier: FB:91:8D:F1:94:B8:BF:F5:5B:C7:E2:6A:DB:2E:57:2A:B9:CD:44:45
Authority key identifier: 9A:F0:B0:EF:8F:3E:B5:3F:14:D8:4F:A3:A6:10:6B:E6:4B:D7:82:72
Certificate issuer: /CN=A91B06CA/serialNumber=9AF0B0EF8F3EB53F14D84FA3A6106BE64BD78272
Certificate serial: 044D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft
Manifest number: 0448
Signing time: Wed 05 Nov 2025 00:18:39 +0000
Manifest this update: Wed 05 Nov 2025 00:18:39 +0000
Manifest next update: Wed 12 Nov 2025 00:18:39 +0000
Files and hashes: 1: mvCw748-tT8U2E-jphBr5kvXgnI.crl (hash: Vu+mIieOiwEZBdGsWjEwOLS3l91h3/OwohlZtEO1Xlg=)
2: 8EB98374776E11ECA05F7133C4F9AE02.roa (hash: VmrxYzvVkdO/i8G3xK4fpHSWBTRD5+zxdo/h6L8f+7g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.crl
rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:18:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1101 (0x44d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B06CA, serialNumber=9AF0B0EF8F3EB53F14D84FA3A6106BE64BD78272
Validity
Not Before: Nov 5 00:18:39 2025 GMT
Not After : Nov 12 00:18:39 2025 GMT
Subject: CN=690a97df-4eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:64:14:90:06:17:50:74:d5:24:8a:86:3a:
8b:67:d3:53:37:4c:e3:a8:de:93:d7:b2:36:6f:dd:
02:3d:a8:b1:92:d1:30:47:39:de:6e:55:2c:9b:09:
a8:d0:26:40:5a:2e:9d:7c:58:55:4b:42:6c:03:c8:
14:8e:1c:16:1c:aa:56:cb:d4:03:33:d3:d9:09:2d:
f2:20:f5:d0:82:b3:a3:72:1a:7f:b1:e2:c0:f0:87:
48:70:dd:22:53:3b:d8:2b:95:78:8f:07:64:15:a2:
43:44:0a:1c:68:a5:2a:9b:6e:8d:c0:ce:50:1b:3f:
ba:d4:cf:d5:ad:a1:90:06:dd:bb:c2:5a:67:7a:52:
12:87:56:0a:8a:c6:b9:9d:80:52:b9:d2:85:27:95:
50:84:97:00:7a:9c:83:f9:37:3b:a9:23:d7:f0:12:
6f:bc:5e:e8:95:9c:b1:c9:8a:9c:38:6e:6d:aa:a2:
dd:cc:6e:c1:70:72:c6:f6:ef:19:6a:41:47:5c:63:
67:81:c3:74:c3:af:61:e3:59:52:62:d3:d6:0f:cc:
e2:b0:f7:ed:8e:0c:46:fa:96:d0:6b:af:ee:2c:20:
80:68:3c:72:00:ea:68:51:58:44:d3:f9:97:32:0d:
c2:32:28:30:f4:d7:df:dc:de:98:c2:cc:b3:46:e4:
26:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:91:8D:F1:94:B8:BF:F5:5B:C7:E2:6A:DB:2E:57:2A:B9:CD:44:45
X509v3 Authority Key Identifier:
keyid:9A:F0:B0:EF:8F:3E:B5:3F:14:D8:4F:A3:A6:10:6B:E6:4B:D7:82:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:99:33:f1:fe:ec:b9:f4:ed:7a:22:27:56:b7:96:f2:3c:e1:
01:bc:fb:f8:12:15:0f:07:22:22:65:da:3f:a8:31:c0:01:6e:
e8:6c:32:a1:7f:2a:f7:3e:ea:d2:4d:8a:67:b9:cf:c4:58:f8:
d2:8d:8a:64:cd:65:ed:2b:27:7b:e9:7a:39:f7:a4:a2:97:d0:
21:01:52:ed:e5:86:1a:4d:74:b7:5c:3b:6b:7a:0c:0b:f5:55:
c5:2b:1a:bc:11:68:66:0e:c7:46:6f:4f:8e:ec:a1:6f:4f:d6:
58:e8:a1:62:df:63:fc:15:a7:11:0d:a2:23:42:a7:28:ef:db:
a2:70:49:16:a7:af:df:3a:11:15:1c:ca:d8:bd:56:87:6a:47:
54:af:cb:61:5e:d2:50:29:67:5e:1e:17:1e:04:17:51:e1:3b:
84:54:9c:6a:be:ff:da:91:0e:07:8b:dd:f6:32:4b:08:10:c7:
df:06:61:84:68:cb:5f:a3:98:1b:be:60:df:b5:d4:19:9a:a3:
f8:22:b6:f5:3c:ef:96:88:c6:88:47:f9:bc:40:f4:f9:03:c2:
18:75:c5:cc:94:23:78:bd:2e:9c:0e:da:25:8d:07:eb:54:27:
f4:d9:ff:c1:c3:03:b3:41:1c:ce:80:45:8e:55:c1:41:52:bc:
62:a2:bc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:17:59 2025 by rpki-client