
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
File: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft (raw, json)
Hash identifier: 6F9g7BC0b42KfVJ3IA6BnDX3bPqZdTFPsW4mqVT9eoU=
Subject key identifier: 1A:0E:FE:59:6F:1D:72:FE:69:F6:6C:56:B3:5C:4D:81:32:A3:83:9C
Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
Certificate issuer: /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Certificate serial: 03AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
Manifest number: 03A0
Signing time: Mon 03 Nov 2025 00:43:09 +0000
Manifest this update: Mon 03 Nov 2025 00:43:08 +0000
Manifest next update: Mon 10 Nov 2025 00:43:08 +0000
Files and hashes: 1: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl (hash: miijrZLUKDW+9qvrjruDvhq4dJYDzfhGNYrxHH4/OqU=)
2: F8400A20C80811ED9ADBA05EC4F9AE02.roa (hash: F6jPBh9YlNU7RVZYywXLeNlWgnFuc8x8f5OICDCdyXk=)
3: A6168350176711EFA13E2C6DC4F9AE02.roa (hash: 2CbWH78pD8qfhUqfDIT0bY8YAkS+SCmh9qliGFNOvyU=)
4: 9ABED502176711EFA0260C6DC4F9AE02.roa (hash: vsntEPAhq1q52SAuxi87DOT8T6ZFM5p3hlzlxYIzgx0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 00:43:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 943 (0x3af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4DC7, serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Validity
Not Before: Nov 3 00:43:08 2025 GMT
Not After : Nov 10 00:43:08 2025 GMT
Subject: CN=6907fa9c-43b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:62:ce:68:6b:c8:98:8f:32:4a:4d:b9:a9:
ad:37:78:4e:b0:30:75:07:4b:2a:ae:04:b7:b1:2d:
5a:19:c9:fb:3c:6d:2d:5f:3e:ce:f8:f8:e5:55:14:
a0:9d:5e:19:a7:a3:48:71:56:26:0e:27:f9:12:dc:
8f:26:1c:e8:2d:f8:43:20:9d:1b:6e:6e:74:e4:ca:
d3:dc:1f:a9:5d:c2:ce:62:29:f8:63:54:fe:c4:51:
5b:dd:a7:a5:22:66:66:1a:5d:f1:10:bb:86:eb:5f:
34:dd:cc:89:5c:a4:22:76:99:fc:52:f6:ce:83:94:
81:01:50:c0:28:a8:e9:97:ba:87:e9:2f:fe:c7:f1:
57:a0:03:97:30:0d:b6:92:87:f6:7c:46:00:84:74:
8e:ff:10:a0:39:61:50:62:5b:4d:8d:92:52:94:dc:
9c:b5:36:0b:09:05:4b:f8:e3:70:b8:20:18:8c:9a:
ab:5d:be:85:d7:1b:aa:9a:e5:4c:41:a0:b3:a9:e4:
e2:83:0b:76:1b:80:33:0b:f8:47:9a:8b:ad:99:7a:
6f:2b:15:25:9e:1d:84:5f:2a:3d:92:3d:7f:1a:95:
4a:70:45:b9:eb:4d:a8:0d:0f:7d:a8:83:93:25:25:
88:4a:45:39:bb:09:f6:4c:b2:09:3c:5f:ef:b7:a2:
93:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0E:FE:59:6F:1D:72:FE:69:F6:6C:56:B3:5C:4D:81:32:A3:83:9C
X509v3 Authority Key Identifier:
keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e7:1c:0c:4c:91:1f:3b:00:91:5f:72:fd:fc:69:16:c3:d7:
40:a6:ff:2e:b2:66:62:76:89:be:82:5f:47:71:85:92:c6:26:
ac:2f:d5:39:0f:41:b4:13:7b:4d:72:83:f6:62:11:6f:7c:a1:
59:da:03:eb:f4:3b:10:94:f0:99:a3:fe:ed:46:7a:b0:28:9b:
9c:7c:dd:15:82:31:52:c0:60:7b:15:3d:7d:77:67:56:a8:81:
26:c2:f5:b5:91:b0:07:a2:60:39:e0:23:01:5f:56:ed:2b:c9:
89:87:2e:5f:fc:e9:f9:83:d2:93:8e:5e:55:fb:9d:e2:e0:ec:
8e:cb:56:b5:1e:6b:93:92:76:d1:65:ff:44:85:a8:db:89:8c:
67:72:6a:59:a3:13:d4:45:f9:ca:c5:43:a2:28:f6:8e:3b:05:
34:6d:99:2f:26:57:e6:72:17:92:29:1f:86:a9:9b:dd:57:38:
f3:4c:75:a4:48:58:f6:60:98:07:1f:d6:6e:91:35:d4:39:16:
46:0d:ab:61:bf:b9:ed:f5:4d:91:b3:cd:89:40:b1:2d:e1:3e:
c1:fb:cc:b5:95:79:86:c7:b9:b5:42:ba:82:cf:1d:d4:e3:59:
a9:1e:ab:52:48:55:7e:d0:28:63:c2:8a:d6:12:e5:70:ba:a9:
9b:00:be:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:21:41 2025 by rpki-client