
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.mft
File: _6CVovSifKRjG8I55X56QFtFa_8.mft (raw, json)
Hash identifier: o1l7VUC+P3jNLPhcgFZPMNczrGoxjJ+qg6sSFCXdXXg=
Subject key identifier: F7:AF:C9:3D:45:71:93:79:89:F7:7A:8E:B3:EE:B9:CC:3C:36:1E:90
Authority key identifier: FF:A0:95:A2:F4:A2:7C:A4:63:1B:C2:39:E5:7E:7A:40:5B:45:6B:FF
Certificate issuer: /CN=A91B346D/serialNumber=FFA095A2F4A27CA4631BC239E57E7A405B456BFF
Certificate serial: 05FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_6CVovSifKRjG8I55X56QFtFa_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.mft
Manifest number: 05F3
Signing time: Tue 04 Nov 2025 23:01:41 +0000
Manifest this update: Tue 04 Nov 2025 23:01:40 +0000
Manifest next update: Tue 11 Nov 2025 23:01:40 +0000
Files and hashes: 1: _6CVovSifKRjG8I55X56QFtFa_8.crl (hash: aL1NbCrHN0e5ARcU26NtoZs0alrFlXkEVCwhpmSomM0=)
2: C05B301CB1DF11F082E88220C4F9AE02.roa (hash: iL1mAVACdSGOCRtNJJuiM/SyULhNM9mQShseHyNcZPo=)
3: C708809CD06E11EBBBC4C43DC4F9AE02.roa (hash: yOgljvPhlJfq06U7oKLYib7/GJzDf+ZYOoVC0PAr/6Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.crl
rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_6CVovSifKRjG8I55X56QFtFa_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 23:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1534 (0x5fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B346D, serialNumber=FFA095A2F4A27CA4631BC239E57E7A405B456BFF
Validity
Not Before: Nov 4 23:01:40 2025 GMT
Not After : Nov 11 23:01:40 2025 GMT
Subject: CN=690a85d5-33ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:82:5f:70:9c:d4:cc:a3:13:60:68:21:d2:ad:
88:8f:93:01:ba:a3:f2:cd:c9:25:ec:69:e1:63:a7:
be:35:6b:03:50:5a:21:a1:c2:70:30:03:f7:2b:d3:
0c:68:d8:2a:65:8f:f7:82:3d:70:f8:93:e5:e8:ce:
7a:5a:5f:2d:d0:ca:db:fa:c5:87:56:75:be:b2:67:
ad:ed:a8:2e:74:84:65:01:99:bd:73:07:0e:9c:96:
ff:1e:68:b5:9d:73:de:da:a0:21:db:d1:7b:39:f5:
24:fd:2f:55:a9:76:99:38:98:0e:40:b8:c6:dc:80:
66:6d:f0:4e:45:ea:9c:4a:09:28:4c:95:69:fe:17:
b4:5a:fd:b1:2b:ac:aa:b9:37:00:34:d3:de:52:92:
4a:97:f4:23:3f:aa:48:8e:94:f5:8c:f5:65:9a:8b:
7b:ae:c9:63:fc:18:af:93:7c:5d:63:59:7e:3a:9a:
1d:de:90:d2:d4:b2:7a:14:2d:51:dd:36:03:45:c4:
dc:74:18:fd:e5:c7:d0:7d:c7:0a:fb:a9:8b:dc:5b:
f7:5f:dc:5e:72:50:20:46:f9:52:9d:07:f1:4b:b3:
7a:79:63:97:f1:f1:7a:31:ee:33:b6:8b:46:3c:25:
e9:ff:8c:c2:6e:e9:70:6b:41:77:12:33:45:e0:5c:
7a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AF:C9:3D:45:71:93:79:89:F7:7A:8E:B3:EE:B9:CC:3C:36:1E:90
X509v3 Authority Key Identifier:
keyid:FF:A0:95:A2:F4:A2:7C:A4:63:1B:C2:39:E5:7E:7A:40:5B:45:6B:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_6CVovSifKRjG8I55X56QFtFa_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:10:81:8c:d1:bd:06:91:40:be:15:99:5e:5f:bc:ed:a5:ad:
71:d0:c7:dd:6f:cf:59:a7:96:1c:9b:ea:55:ca:42:07:80:30:
14:ef:3b:c4:a8:7d:d0:3e:15:14:52:1d:2d:16:3e:33:2f:3d:
ed:02:c5:c3:33:1d:ca:5f:ee:9a:d1:37:df:5c:6e:b8:e6:7c:
0a:2d:c5:99:4e:e6:6c:9f:cd:3d:77:71:d8:f6:01:65:7f:da:
03:f9:88:33:92:6f:87:a1:2a:03:72:ef:af:1e:5a:e7:55:2e:
a7:ff:ab:27:be:ec:b6:b6:88:c1:20:11:48:df:79:a9:b3:5c:
d7:43:a5:28:b6:a4:08:66:34:70:63:cc:b8:ec:1a:34:bf:cf:
9f:33:d9:85:59:46:f4:71:8e:69:19:95:27:91:7f:87:b6:17:
76:89:08:17:ea:48:7d:1d:b4:13:37:a6:e1:d6:d8:32:f0:40:
04:45:c6:26:92:8a:a4:a2:6b:5a:ad:96:6e:ce:13:59:b8:6e:
0d:fe:fe:de:0f:50:97:3e:d2:ae:93:cf:99:ae:66:b0:e5:cf:
9f:27:bb:32:e7:4f:a0:3b:50:38:f0:07:c7:62:d2:7e:6f:90:
9d:a7:6b:10:94:8c:4d:ab:18:90:8a:cc:5c:29:1c:1a:33:ec:
99:23:e8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:32:21 2025 by rpki-client