
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
File: gcJvPY9BNuUZDMehfWr3IkIutm8.mft (raw, json)
Hash identifier: ZEIMJgJUBxoFVqpQK3MPf5NTA68VmAbFZhl/rL63c3M=
Subject key identifier: C1:44:AB:78:32:78:91:AE:34:21:C9:C1:14:E2:8B:2F:47:05:C5:3A
Authority key identifier: 81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F
Certificate issuer: /CN=A91B8E70/serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
Manifest number: C2
Signing time: Mon 03 Nov 2025 05:55:36 +0000
Manifest this update: Mon 03 Nov 2025 05:55:36 +0000
Manifest next update: Mon 10 Nov 2025 05:55:36 +0000
Files and hashes: 1: gcJvPY9BNuUZDMehfWr3IkIutm8.crl (hash: eh0Gyrwih0/U/mcaxVyw5qHdEMJy5K5WdCmj8qiKj6o=)
2: 20B2721A955B11EFBF0F5669C4F9AE02.roa (hash: b7PxFokUIXPBGz+iss/nauBD0ImGfyI3acw64tuMWC8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl
rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 05:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8E70, serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F
Validity
Not Before: Nov 3 05:55:36 2025 GMT
Not After : Nov 10 05:55:36 2025 GMT
Subject: CN=690843d8-f5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3b:ab:2f:d6:f0:dc:14:da:6b:10:87:55:18:
a2:c0:9c:4a:0c:3f:a7:17:7f:60:0b:28:5e:96:a5:
9d:71:f8:55:7f:c3:a6:1b:5f:29:a7:38:e3:0c:63:
b6:a0:c1:52:a0:06:37:7c:13:ea:2f:d2:57:57:d4:
56:cd:42:d3:c6:0e:3b:cb:9a:f7:2c:96:13:41:d0:
0c:52:e3:cf:ea:ac:d9:f4:3f:ed:02:6d:66:fc:1b:
fa:45:8f:52:7b:4e:c4:b2:a5:4c:b6:22:65:70:4a:
79:22:58:03:d6:cb:67:7c:77:5f:80:17:ab:90:d2:
7e:b2:a0:3d:69:0e:c6:60:2a:23:38:7c:5c:98:94:
4f:34:70:86:97:33:f0:c9:6c:4c:d1:5c:39:74:1c:
ad:f1:cf:44:2c:28:12:12:01:88:a6:76:4f:b0:1c:
f9:24:46:40:00:c8:87:29:ba:a1:cd:fb:16:1e:c3:
a0:80:01:1b:f1:44:52:ec:60:b8:96:65:7f:31:54:
66:e4:b8:c3:b8:ca:9e:d2:9a:e0:fd:a3:71:09:c4:
16:92:ab:69:2c:ff:e6:f2:42:fb:18:cf:1d:04:9b:
33:c2:6d:27:ba:90:76:4e:e7:46:af:a3:ca:2a:5b:
fb:26:14:d9:9d:b2:b2:b7:1a:79:ee:10:b5:e9:bd:
e7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:44:AB:78:32:78:91:AE:34:21:C9:C1:14:E2:8B:2F:47:05:C5:3A
X509v3 Authority Key Identifier:
keyid:81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e6:dc:61:4d:22:34:78:ba:82:f0:bc:a9:ab:bd:bb:a3:dd:
98:22:28:5a:8f:2d:20:43:98:fb:e0:11:6e:bb:27:c6:af:df:
d8:29:60:d7:80:57:8b:df:eb:c6:3e:95:c6:10:aa:c5:cb:5b:
eb:d6:89:32:22:f6:8b:2e:a3:d5:a5:77:f1:a9:82:45:ea:49:
eb:44:42:d5:cb:c8:e8:22:57:3c:56:2c:9d:85:f6:00:28:78:
eb:8e:4e:17:54:71:61:78:e7:e6:b4:e5:09:dc:d7:b8:a6:1e:
a7:38:56:1a:ac:36:dc:01:f3:16:b5:0e:b3:71:0c:a9:73:61:
3c:01:31:26:67:d0:79:d3:d6:2a:ec:47:e6:14:8a:96:45:a8:
b8:f9:52:ef:a1:83:a6:d2:8f:42:00:1c:d9:1b:c7:20:c7:42:
17:68:58:ce:e8:d8:65:c6:40:12:59:a9:34:ab:83:4e:4b:82:
54:a7:49:0b:5e:a9:bf:08:f6:3f:93:fe:16:73:71:71:1e:ba:
43:30:ca:6d:97:4c:e5:30:02:05:30:dc:60:9c:d0:15:ed:a5:
88:e2:f5:28:50:45:90:4b:09:95:84:26:24:0b:d1:2d:7a:6d:
8f:d1:5d:01:17:b6:6a:54:95:22:6c:70:2d:b1:01:48:9c:d3:
f3:20:2b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:05:00 2025 by rpki-client