
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
File: U3TG518YYFJFWi2NpSkv7wCcya8.mft (raw, json)
Hash identifier: pp9nkw1EYEWuCP6vyJiOMCbCWTqYcrSJqM0HdYL62U0=
Subject key identifier: F7:57:00:37:26:98:4F:A0:F6:43:A5:AC:FA:E7:48:F6:BA:35:45:12
Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
Certificate issuer: /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
Certificate serial: 0D9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
Manifest number: 0D3F
Signing time: Tue 04 Nov 2025 18:10:30 +0000
Manifest this update: Tue 04 Nov 2025 18:10:30 +0000
Manifest next update: Tue 11 Nov 2025 18:10:30 +0000
Files and hashes: 1: U3TG518YYFJFWi2NpSkv7wCcya8.crl (hash: k9FrWNTrwawFiLoNcBy1Z/wnt5QGixx7lnbmLDubqzs=)
2: 8F6D3D583AEA11EC84E6634EC4F9AE02.roa (hash: ZyoVviYdna5gEZUP2FSAk5vLjrRPq9Nos5X+Ufxuffo=)
3: 8E61229E3AEA11EC84E6634EC4F9AE02.roa (hash: 3heY0Fr93mlyFsseOVdIpF/xnvugkikH0X2MhJsgwiU=)
4: 8BFEF29C3AEA11EC84E6634EC4F9AE02.roa (hash: /y7NWQduX3GTEc5x8Izyd0MrTIM9crgcIhmlI915KvA=)
5: 8D3BB78A3AEA11EC84E6634EC4F9AE02.roa (hash: gRIxBN9j2B92B3iu2n2M3gTz25kochUDwkxnUuXAmV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl
rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 18:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3483 (0xd9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B885C, serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
Validity
Not Before: Nov 4 18:10:30 2025 GMT
Not After : Nov 11 18:10:30 2025 GMT
Subject: CN=690a4196-7cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0e:cc:77:b3:72:66:c2:96:c3:ca:b2:a7:6b:
f9:26:94:dc:82:e9:94:b9:ee:67:07:0d:e3:08:4c:
f0:d6:51:bc:7d:c5:12:1f:f0:9c:e3:7e:a4:53:0b:
6a:aa:cc:36:25:ff:d1:fe:47:5f:18:30:ba:9b:d7:
f9:36:ab:f5:d4:f9:4a:ff:d7:00:1c:28:c2:7e:7a:
59:09:68:28:16:b1:bd:2a:06:94:0e:5e:0f:57:a3:
7c:d2:c0:43:3e:5c:8a:cf:98:9a:42:da:38:fd:3f:
8e:b0:14:1f:d9:7d:9a:ac:15:35:d3:7c:a1:d3:26:
81:1c:b6:70:18:41:a2:cd:fc:3d:3f:c6:50:3f:8d:
22:1f:9f:97:0b:7d:57:e8:09:b7:67:de:0a:a7:8c:
3e:19:c2:d6:4e:9c:95:c0:58:b6:7f:f6:0c:e8:71:
65:d7:7b:a2:ac:b7:a7:ab:76:7e:97:96:b7:57:c2:
a9:8e:f9:23:dc:31:66:95:61:da:5b:3b:5c:40:b9:
20:7e:ee:ef:1f:6e:35:ef:9b:ff:d3:d0:93:15:c3:
a3:95:f8:96:2c:a5:f0:7b:57:df:d0:cd:57:d0:18:
3e:f3:f0:46:b8:3e:ff:95:b1:97:5d:de:0e:15:53:
07:7f:5e:4a:c8:b1:ed:80:69:ba:56:82:35:94:37:
09:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:57:00:37:26:98:4F:A0:F6:43:A5:AC:FA:E7:48:F6:BA:35:45:12
X509v3 Authority Key Identifier:
keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:9f:2f:10:e6:ad:fc:9a:66:82:4b:dd:0b:3e:18:2b:03:e8:
ee:e2:a3:86:d8:5d:df:fd:41:8a:4e:46:d4:36:9f:a6:7d:8b:
a0:35:16:2e:20:f7:2e:09:bd:87:61:b5:4c:9c:b9:d6:ff:f7:
99:c0:45:a0:a1:92:f1:3b:34:84:7e:f8:59:30:aa:71:ff:d4:
6c:77:51:d4:2c:0b:7c:4e:88:ce:e3:0d:8d:18:be:5c:87:63:
16:50:a2:d6:e1:05:4c:39:ea:cd:27:b2:62:a0:ff:2e:f4:94:
e4:20:fb:68:9a:f3:4c:d0:7d:cc:6c:b4:de:c1:f1:30:06:df:
09:b4:74:f7:a0:f8:d1:4b:b7:fa:04:37:b2:b2:fb:7f:fd:12:
d3:09:3d:89:38:9f:e8:ec:cf:86:d2:b5:37:3a:a1:9b:c6:26:
60:fe:e7:83:29:d1:b9:ff:12:4f:b1:be:b3:06:cb:be:52:36:
54:97:41:ad:ab:88:8d:b7:39:6f:6f:ba:77:29:a3:d8:4d:0b:
0d:b8:2d:ee:39:be:af:8b:79:8c:74:7b:c0:86:89:9e:ed:05:
1d:52:ea:e2:10:fb:ba:f3:88:e0:91:e6:3d:8a:eb:5a:3d:67:
25:67:c9:ea:88:96:b5:2e:c0:86:84:79:26:5d:d6:13:ab:29:
fa:3d:d3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:58:39 2025 by rpki-client