
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
File: lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft (raw, json)
Hash identifier: CYwPwRrwT9ihvM4n+33RB1+Odmkdy4VAJjtuEQTpqiQ=
Subject key identifier: F5:F1:E5:86:EE:AD:F5:54:8E:4D:80:26:64:B9:11:88:C7:14:AA:C0
Authority key identifier: 96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10
Certificate issuer: /CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810
Certificate serial: 0BC2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
Manifest number: 0BB3
Signing time: Tue 04 Nov 2025 19:03:45 +0000
Manifest this update: Tue 04 Nov 2025 19:03:45 +0000
Manifest next update: Tue 11 Nov 2025 19:03:45 +0000
Files and hashes: 1: lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl (hash: OQgiW2/HSuj2aGGvt2HptPeXqyqTROzP56AbuO7hkj8=)
2: CF0AE642EBA711EA8980FC11C4F9AE02.roa (hash: 45GbY96Fyb/0AZFS4Z/18mSsic13HmUraXW0dDqk/Bc=)
3: 280D2770EBB011EA8AF6012DC4F9AE02.roa (hash: vl/LhboPbfhb4po2/R+21X77qlX9wqRDDqveokiyeao=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl
rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 19:03:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3010 (0xbc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8CA6, serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810
Validity
Not Before: Nov 4 19:03:45 2025 GMT
Not After : Nov 11 19:03:45 2025 GMT
Subject: CN=690a4e11-7720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:09:9f:a9:48:5c:98:c0:a1:c3:7f:79:54:6a:
3a:d4:43:75:27:10:a6:95:0d:0f:3e:02:b9:3a:1e:
5f:3e:14:b9:0f:33:d2:62:0a:47:6e:d4:80:70:4e:
b8:b8:ac:6a:83:a6:4d:6f:4b:ca:b3:1a:de:fa:14:
43:a4:d4:24:91:7b:c1:bc:95:75:29:81:1a:84:00:
49:5b:7d:d3:27:13:55:96:c9:91:95:5b:06:de:29:
fb:69:e8:38:dd:7b:d3:ba:95:f0:3f:ef:5e:be:3d:
73:d6:1c:94:7c:b0:d4:5a:e5:9d:ca:16:dd:56:2d:
dc:fa:86:01:15:66:c9:15:02:02:a8:f4:48:40:4a:
c9:ef:80:81:5e:e8:49:22:56:bb:93:f5:f5:a2:89:
ea:58:0e:a5:3f:3c:d0:73:70:3f:f3:0d:e0:77:d8:
6b:c4:2c:c3:b8:9f:be:1a:9c:75:f4:63:a0:82:b9:
ce:89:6f:72:2e:97:e2:4a:06:e4:25:d6:f9:28:6f:
d8:6f:48:fd:e9:25:47:b1:24:cc:ac:df:6e:0d:0d:
31:df:70:10:71:6f:85:11:f3:bd:3e:b0:70:4c:67:
b0:99:59:f7:83:27:e4:3f:7d:55:61:3c:b1:48:56:
76:37:d5:f6:55:a6:16:75:0b:df:21:e7:dd:3c:6d:
b7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F1:E5:86:EE:AD:F5:54:8E:4D:80:26:64:B9:11:88:C7:14:AA:C0
X509v3 Authority Key Identifier:
keyid:96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f5:15:41:e2:86:48:a5:0f:07:c3:53:d5:e0:5d:65:57:94:
ae:73:5d:ae:7a:18:9e:3b:8d:a2:1b:c2:9c:2d:44:2e:1d:fe:
15:03:d6:50:0a:6c:bc:65:a0:56:2b:34:8a:b9:2d:1c:2f:06:
f2:ec:93:e7:23:93:13:dd:df:14:f3:49:c6:7f:17:2e:6e:29:
31:c9:21:f7:e3:5e:2c:76:f8:ea:4b:2f:1d:79:3f:62:c2:22:
54:50:5a:e2:8e:df:dd:9d:c8:40:57:92:f9:cb:18:e7:4e:9c:
9d:ae:25:32:63:de:35:7c:98:c5:df:70:08:80:42:d4:df:60:
ab:7a:a1:76:6d:ea:34:89:58:5f:13:4a:40:74:42:90:5d:63:
02:46:97:72:1a:3c:b1:bf:2c:cc:ec:4e:a1:56:af:68:d9:00:
ff:b7:22:72:37:f9:bd:67:3f:db:d7:0e:b9:b1:0a:03:bd:68:
bb:04:f2:66:9f:06:21:e1:22:cd:99:ac:ec:18:7a:ca:f2:90:
ad:c8:90:4b:34:87:18:9b:9b:f6:df:ee:85:9d:2f:25:e7:92:
6b:36:9c:95:27:08:c4:ed:f7:a7:93:aa:af:d7:aa:83:1f:55:
f3:83:9f:9d:d4:49:62:a2:8d:fa:e0:ad:21:f0:2f:54:6b:19:
11:5e:86:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:37:09 2025 by rpki-client