
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft
File: V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft (raw, json)
Hash identifier: SVPyLkCLmkL6YbNy1XlWJYrD+oSsJWbG8DqkZWDafag=
Subject key identifier: 8C:0C:87:50:8D:06:6D:37:EA:DC:82:CF:24:B8:E2:FB:66:F2:6A:23
Authority key identifier: 57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33
Certificate issuer: /CN=A91B7A3F/serialNumber=576C5447C09B597107B770C101C89327F105BD33
Certificate serial: 0408
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft
Manifest number: 0402
Signing time: Mon 03 Nov 2025 00:24:19 +0000
Manifest this update: Mon 03 Nov 2025 00:24:19 +0000
Manifest next update: Mon 10 Nov 2025 00:24:19 +0000
Files and hashes: 1: V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl (hash: hdM9R9tiMmLEs46mRxZ2Jo/utG/Xsr3M4oPK9DWuVmI=)
2: 821CAFEE923811EC955B7A3AC4F9AE02.roa (hash: 9KQWUlz6QNm+2IJYVtG7dsHf8uD3C5dcvLfvCk8SVA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl
rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 00:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1032 (0x408)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7A3F, serialNumber=576C5447C09B597107B770C101C89327F105BD33
Validity
Not Before: Nov 3 00:24:19 2025 GMT
Not After : Nov 10 00:24:19 2025 GMT
Subject: CN=6907f633-e740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:e4:11:79:4e:56:63:5c:98:1b:00:b9:cf:
15:db:90:4f:2f:6d:78:14:38:a5:13:e8:0d:1f:28:
b7:0b:b0:3f:8f:36:a5:90:66:3c:df:8c:8a:50:c1:
9c:dd:86:43:23:5d:b9:36:80:d0:32:e9:d6:df:4a:
74:4b:3f:3c:7c:d6:d1:39:8a:57:37:32:a8:21:c1:
5b:26:7b:e0:f2:3f:39:19:21:13:e4:f1:ae:da:00:
36:4c:5c:36:c7:42:de:e3:68:5c:8d:3c:ac:b9:f9:
b0:3e:af:e9:45:04:76:6e:6e:7c:49:eb:6c:72:62:
61:05:e3:50:6b:99:70:57:96:8f:e9:76:c2:62:c8:
ad:36:f5:37:c3:fb:88:fe:05:7c:0c:ab:cc:a5:39:
bf:7c:15:34:56:e2:50:82:c2:b4:c2:d1:a7:f6:e4:
af:64:b6:9c:38:8a:54:c8:0b:d5:e2:b7:6c:13:92:
b4:23:88:2e:54:02:e0:5e:23:d2:cb:f5:6a:17:38:
be:92:45:b2:e8:28:9c:f6:0e:d6:fd:4f:e3:79:18:
86:13:ef:ef:4f:2a:88:83:78:6c:d2:16:82:24:7e:
d3:ad:f2:e2:56:e5:e5:80:56:cf:fc:e4:bf:1c:c5:
e0:e3:4d:08:87:70:f4:3c:8b:2c:f2:ab:95:a7:f9:
97:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0C:87:50:8D:06:6D:37:EA:DC:82:CF:24:B8:E2:FB:66:F2:6A:23
X509v3 Authority Key Identifier:
keyid:57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4b:ff:35:9d:fb:0a:33:5d:9e:7a:23:cb:68:d6:ac:8e:fb:
f2:0b:ed:71:95:e0:5b:01:27:35:e7:05:26:4f:62:a0:a0:dc:
d8:96:e9:4f:05:f9:b9:e3:09:c4:20:7d:75:de:ae:a6:ac:9f:
e2:b7:f2:dd:6a:98:fd:91:3d:17:f4:2f:1f:83:b5:02:f8:ab:
1b:1f:0b:09:a6:67:0c:61:5e:8b:cf:48:1a:3d:15:be:d0:8a:
b4:53:ad:d6:1e:ce:ed:17:9b:06:67:34:01:f1:7f:6a:95:06:
0a:da:92:e8:9d:55:f9:af:11:31:c6:46:a7:a8:40:4c:17:0a:
6c:d1:5e:62:4e:70:52:0c:4f:ad:eb:3d:76:dd:9b:44:af:7b:
b0:9a:7a:15:52:bc:c8:22:fa:46:dc:be:21:55:c0:e8:e0:b3:
71:db:27:38:d9:50:25:6d:96:cb:cb:27:43:5e:be:32:f9:cf:
80:18:ad:51:b0:54:8e:06:5d:69:ce:8f:63:6d:90:e6:e7:df:
ea:25:47:dc:51:35:9e:3d:89:4b:21:a3:7a:ca:76:a4:62:51:
5b:d1:ce:b4:12:e5:20:4a:b7:52:fe:47:2d:09:cf:30:3f:61:
01:14:80:a5:cc:85:70:ed:79:23:9d:d5:b9:24:1f:b7:db:35:
72:e6:7d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:13:58 2025 by rpki-client