
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft
File: Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft (raw, json)
Hash identifier: LH1iIMKZGUqsJNEsYVgyOnhbdpf51I8Zdj5k+z1NtkY=
Subject key identifier: 15:85:D7:86:33:9C:9A:F1:89:7B:2F:65:89:03:0C:47:CE:47:9C:87
Authority key identifier: 1E:FE:82:9F:16:00:78:C0:6C:9A:15:69:65:42:57:96:87:45:0B:74
Certificate issuer: /CN=A91B7046/serialNumber=1EFE829F160078C06C9A15696542579687450B74
Certificate serial: 0122
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft
Manifest number: 0122
Signing time: Wed 05 Nov 2025 00:52:22 +0000
Manifest this update: Wed 05 Nov 2025 00:52:21 +0000
Manifest next update: Wed 12 Nov 2025 00:52:21 +0000
Files and hashes: 1: Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl (hash: ag1VXTzFA9J7jvXfUgr3cULroF/mPXyz+Ecq4kwEjFE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl
rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:52:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7046, serialNumber=1EFE829F160078C06C9A15696542579687450B74
Validity
Not Before: Nov 5 00:52:21 2025 GMT
Not After : Nov 12 00:52:21 2025 GMT
Subject: CN=690a9fc6-a677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8a:96:97:7d:d1:f3:e3:26:c8:7f:2e:cf:85:
f0:66:84:ac:6f:3b:74:1d:97:1e:7a:64:ef:f0:62:
cd:aa:b1:4d:d9:a3:49:62:f8:5d:0f:e7:42:8a:fc:
ac:48:b3:83:ac:d2:0e:db:c6:5a:e2:b6:95:48:5b:
16:b7:a2:d4:39:2d:69:33:7b:8d:ea:cc:86:34:63:
4a:54:59:ca:05:30:04:86:c2:51:5c:30:0b:f5:a5:
bf:17:e3:8d:a0:f2:ce:4a:92:eb:d2:a0:df:d3:df:
08:f9:ed:94:bd:45:02:d9:e0:1c:c2:17:22:71:98:
09:b9:e8:c9:3f:fe:ef:13:22:53:a4:b1:22:4d:1a:
d4:30:6d:68:8e:fc:d9:12:2e:22:83:26:5b:f7:3d:
ef:07:c5:66:f1:85:80:5b:63:8b:28:71:f6:3c:55:
60:13:a5:6f:e6:b6:6e:40:61:c7:9a:86:ca:f4:52:
93:31:6c:41:4e:a4:28:fa:70:75:18:fe:4b:c6:ca:
ff:21:9a:01:16:0e:94:b3:c7:af:14:d3:79:a0:fa:
6f:8e:b2:2d:46:8a:d6:67:a8:a0:b7:04:02:90:c5:
95:49:88:5d:54:aa:c0:c3:6f:b7:d2:49:2d:c1:48:
40:21:dd:f3:a4:da:e9:aa:2b:01:e9:43:31:d6:05:
3c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:85:D7:86:33:9C:9A:F1:89:7B:2F:65:89:03:0C:47:CE:47:9C:87
X509v3 Authority Key Identifier:
keyid:1E:FE:82:9F:16:00:78:C0:6C:9A:15:69:65:42:57:96:87:45:0B:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
f1:23:cc:af:d2:dd:dd:64:cb:e7:84:eb:6b:59:36:fd:16:ac:
58:29:2c:ca:c8:9b:3d:66:70:9d:cf:7c:d0:76:e0:c2:ad:2d:
a3:ce:8a:a0:ff:9b:c3:c2:7f:5c:b8:75:f5:24:8d:84:0c:e4:
05:64:b1:10:c4:a6:a4:68:61:8a:e4:8e:4d:fd:4b:9b:d2:e6:
38:12:28:b1:49:55:cc:88:cb:58:5a:09:0f:75:2f:8a:cc:4d:
df:02:89:42:db:de:96:1c:39:72:ec:92:60:ca:74:17:af:f3:
7a:c7:5a:c5:4f:78:22:96:63:5c:ee:d4:3b:2c:48:e4:ca:f1:
ba:86:70:91:a5:20:96:5b:40:32:8e:10:78:09:6b:f8:66:00:
08:c0:d1:fb:85:df:30:91:e9:67:ae:eb:14:31:4f:74:66:19:
3e:dd:a9:6c:a7:bd:3a:05:e0:33:71:e8:15:2d:59:d9:5e:b1:
ba:84:01:ea:70:87:3f:8a:f2:22:35:c5:10:21:3b:23:a0:94:
eb:14:0c:f7:1b:6c:60:57:34:26:ca:27:d1:e4:89:1e:7b:d0:
bd:bd:d9:9d:b5:7d:8a:8e:bd:ec:78:62:13:14:c0:3c:c1:5b:
dd:f6:10:8b:e8:9d:01:89:78:61:c8:26:b7:c5:14:41:17:6d:
c9:5b:28:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:47:23 2025 by rpki-client