
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
File: S630I4efFU256siNFgtOEW9mzak.mft (raw, json)
Hash identifier: fKXhwCuwbfCkNuQtasko8hC/DIeVU3/pMlC9xJI9jH0=
Subject key identifier: 16:E1:BA:86:36:0B:A6:0B:F5:93:8D:A3:DA:98:59:4F:35:88:59:57
Authority key identifier: 4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9
Certificate issuer: /CN=A91B30E5/serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9
Certificate serial: 0219
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
Manifest number: 0216
Signing time: Wed 05 Nov 2025 02:18:41 +0000
Manifest this update: Wed 05 Nov 2025 02:18:40 +0000
Manifest next update: Wed 12 Nov 2025 02:18:40 +0000
Files and hashes: 1: S630I4efFU256siNFgtOEW9mzak.crl (hash: szdkJdjEJkqAQZT+hQIRqusZrp3SeI91xpdgwZhDcJs=)
2: 0F1061D0868911EDA888A96CC4F9AE02.roa (hash: aGKXoopb0arb0ntbaAeX9hZshlxruOuTWjBQoFMqiCw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl
rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:18:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 537 (0x219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B30E5, serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9
Validity
Not Before: Nov 5 02:18:40 2025 GMT
Not After : Nov 12 02:18:40 2025 GMT
Subject: CN=690ab401-61ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:72:cb:32:22:4c:57:81:ba:95:74:ea:1a:
0d:73:5a:22:1a:29:b9:52:f6:a9:cf:b2:fb:6d:78:
51:7c:76:0d:cd:fe:d9:b1:ae:91:92:d8:76:c5:dd:
94:af:bf:47:a2:de:63:b4:50:c3:53:da:e6:c4:9a:
63:0f:e0:f5:5c:cf:8b:1f:e1:d0:04:97:ba:c1:21:
73:66:14:c6:4b:18:89:ba:0c:ca:96:04:89:9b:8c:
63:76:17:94:ac:f1:15:fe:18:f6:ca:30:5d:f5:83:
a6:de:50:ee:0d:47:86:c0:65:4f:18:dc:6c:03:a4:
25:8a:2f:87:ef:51:55:48:81:49:00:f3:af:90:13:
7a:9c:23:f0:31:5b:7b:0f:0e:9c:17:5e:5b:e2:f0:
c9:f8:f7:bf:da:52:14:f9:b5:8e:63:a7:82:71:b5:
fa:cc:40:80:da:97:18:2c:6d:74:b9:c1:cd:ae:41:
20:1c:84:70:67:72:12:a8:26:55:94:c0:49:b6:05:
98:5e:43:e4:33:2d:58:78:f7:4b:b1:b6:be:ab:e4:
90:b6:4a:52:8c:9c:cd:55:c5:a8:fd:cb:52:f2:55:
f6:ab:68:b8:4a:1b:c1:51:61:50:f0:0e:bc:08:55:
bc:9e:44:1f:f6:30:35:61:3c:a2:a0:4e:5f:ca:d0:
83:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E1:BA:86:36:0B:A6:0B:F5:93:8D:A3:DA:98:59:4F:35:88:59:57
X509v3 Authority Key Identifier:
keyid:4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:96:f7:e5:1a:46:bd:8e:ce:30:14:2e:40:27:f6:08:60:1b:
7f:d9:54:3c:c8:8f:3d:cb:3c:c9:40:a4:73:fa:8c:f1:09:11:
34:1a:c7:b0:16:64:20:41:80:0b:98:2c:78:c6:95:eb:82:cd:
41:a5:c3:ae:21:34:d4:7e:3c:4f:b6:fc:c3:13:9c:03:6a:9f:
5a:16:41:3d:f3:fb:e8:fb:c1:b0:3c:8e:c9:a0:18:4b:e1:bd:
c9:c2:f8:00:50:3e:28:b1:51:bf:1e:17:d3:07:a3:e7:0e:0e:
e0:a1:69:aa:db:b5:2a:3c:d0:89:01:0b:9e:d6:e9:ed:bf:3c:
0a:70:2b:ae:31:37:1b:ab:14:42:ee:19:e5:72:49:f6:03:62:
4b:3d:f9:94:d1:a5:8e:21:ba:71:bd:c5:9c:83:b4:fb:67:4e:
08:bc:19:1c:e6:bd:8b:79:7d:4c:ec:e8:8a:a6:45:c6:78:05:
d7:fd:94:ca:d0:47:5c:52:03:d7:d3:0b:8d:85:44:aa:bf:a3:
3b:46:8b:33:7c:00:cb:bd:6c:c9:30:5b:2e:d9:15:69:8e:4a:
b7:49:1b:f2:49:d7:6b:a5:eb:bd:76:53:5d:38:6e:11:f2:15:
f3:7b:00:3d:f2:7e:0e:a1:44:a5:23:be:e9:dc:77:a1:50:2c:
fc:54:a8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:27:08 2025 by rpki-client