
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
File: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft (raw, json)
Hash identifier: QKsNtd+VFLEWRDLXIf7io2YRkzfVElSbBWusiLDZlmg=
Subject key identifier: F9:29:5A:33:14:9F:14:15:ED:56:09:95:2A:0C:F4:05:B4:1C:1C:B9
Authority key identifier: EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE
Certificate issuer: /CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
Certificate serial: 0159
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
Manifest number: 014C
Signing time: Wed 05 Nov 2025 00:06:32 +0000
Manifest this update: Wed 05 Nov 2025 00:06:31 +0000
Manifest next update: Wed 12 Nov 2025 00:06:31 +0000
Files and hashes: 1: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl (hash: 8T09uyZfRYXzTnOEAQRueIwGLieuPn3XbdoML9BocS4=)
2: D66D72562EAB11EF9B369566C4F9AE02.roa (hash: CNHdYxX0Gq5u4Blz4lZshKjYS5M126ch5WfH88c9eRk=)
3: 5D184494AFD811F0873CFA2CC4F9AE02.roa (hash: jPRyyaXR31sdXHmUiJynWWmJ+koQIPK5lf3hW9dz0Y4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl
rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:06:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345 (0x159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7BDC, serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
Validity
Not Before: Nov 5 00:06:31 2025 GMT
Not After : Nov 12 00:06:31 2025 GMT
Subject: CN=690a9507-1605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4b:ee:f9:92:2c:5f:70:52:c6:b0:d0:de:7f:
f6:ec:95:e8:8a:26:15:83:e9:f5:94:aa:55:3b:a7:
0e:14:65:85:01:ad:2b:eb:e7:ea:71:35:18:ed:ac:
12:95:3f:83:b2:11:f8:cc:2a:d7:7b:28:17:42:ce:
3c:64:0a:fc:fc:4e:c6:f5:43:46:a8:ee:3d:a2:da:
9e:46:fe:95:4f:00:55:b0:f6:47:19:58:3e:77:aa:
5b:d5:1c:4e:81:9e:04:f9:51:ba:c4:8c:f8:e6:16:
43:e0:94:be:44:ad:2a:a4:b4:be:f9:6b:35:53:81:
18:3d:55:7b:ce:74:b3:3f:81:b6:d6:75:dd:8a:81:
94:02:b6:b4:2d:1e:f8:34:18:87:8c:e5:03:01:f8:
e5:cb:89:88:48:f1:71:29:11:33:0d:c9:7d:27:a9:
ea:7a:ab:e6:90:cf:92:33:dc:77:3b:8c:5c:74:76:
c2:d0:3f:93:0f:98:a0:73:cc:7a:e8:7c:a1:04:d9:
8a:3e:6c:bf:17:7d:99:5c:02:4e:0c:ee:75:58:d9:
71:3b:17:5e:d7:dc:5a:af:72:e6:60:c9:4f:42:3e:
43:23:95:d6:d7:cb:2e:d1:41:b4:4c:59:f5:0d:bb:
a3:b5:4c:67:6f:c6:6f:e2:82:a0:4a:12:50:02:e4:
fe:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:29:5A:33:14:9F:14:15:ED:56:09:95:2A:0C:F4:05:B4:1C:1C:B9
X509v3 Authority Key Identifier:
keyid:EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b4:b4:b1:49:f7:61:87:88:51:ea:7d:cb:28:3f:7c:e2:78:
a3:f9:09:78:63:97:33:2f:3c:47:5a:f5:1b:81:bf:5e:5f:64:
cf:fb:89:0c:5a:e6:41:01:1c:82:7d:f9:cd:af:36:8e:35:02:
c8:84:c2:ed:38:9e:13:65:1a:7b:bd:4e:46:51:5c:07:2b:fc:
91:bc:21:08:e0:4e:db:42:35:1f:1d:37:22:df:57:01:1f:c2:
08:be:c7:8c:96:61:4b:d3:bb:73:b6:0f:da:39:70:03:42:0b:
6a:f1:fd:18:ee:0f:cf:be:04:88:95:ec:7f:e4:7c:d9:8f:84:
3d:9f:9a:f8:31:b0:24:e9:6a:7a:b7:e5:62:47:47:7f:58:8e:
c7:cf:70:06:77:29:17:b3:c1:43:d6:5e:ce:08:84:4a:9e:77:
52:74:0c:4d:dd:24:50:a3:4d:07:b4:c5:c9:d2:4e:3b:e8:37:
45:f3:15:f8:3e:ac:83:43:96:51:8f:4f:ee:26:a2:b8:e9:68:
22:67:47:62:8e:58:57:30:15:19:62:36:ac:8c:8b:ef:d7:45:
5b:a0:c4:c5:08:4c:dc:63:3f:fd:62:c2:57:38:30:2e:cf:0e:
ec:74:f1:65:fc:48:74:dc:80:2f:da:7d:ac:89:f6:ef:42:fe:
21:ce:e0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:47:47 2025 by rpki-client