
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
File: BcMvXW_ZVny3AAWx10pBqFtb5xI.mft (raw, json)
Hash identifier: aGUN73/AvjhHhHXbjXml7FOfDwPiMXa8wuiP0bLZgZU=
Subject key identifier: 51:02:94:AB:1E:B8:D0:C3:5A:9A:2C:65:82:29:69:64:F4:70:76:E8
Authority key identifier: 05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12
Certificate issuer: /CN=A91BB5D3/serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
Certificate serial: 067A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
Manifest number: 066E
Signing time: Tue 04 Nov 2025 22:41:24 +0000
Manifest this update: Tue 04 Nov 2025 22:41:23 +0000
Manifest next update: Tue 11 Nov 2025 22:41:23 +0000
Files and hashes: 1: BcMvXW_ZVny3AAWx10pBqFtb5xI.crl (hash: Xa47zKRVeJUdqF034H37bObWNVBk31db7TEK2aFjV+s=)
2: F164038CBBE211ED8685DC61C4F9AE02.roa (hash: NBdHfFLz3DL0xp9ly121d+fttg0f9aauvwFg8/4e9ds=)
3: 27B648124C9C11ECACB77370C4F9AE02.roa (hash: LKITiJ4ISd4LnGgW0YqiQuvoGRC1GVrRJfh2GhffjxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl
rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:41:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1658 (0x67a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB5D3, serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
Validity
Not Before: Nov 4 22:41:23 2025 GMT
Not After : Nov 11 22:41:23 2025 GMT
Subject: CN=690a8114-e96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:41:5e:86:0b:30:c6:8a:dd:f4:62:0f:1b:fe:
66:74:02:8c:69:91:a3:8d:d7:70:a8:c9:d9:0c:83:
c6:a6:7a:d4:3e:b5:5b:a0:8f:b0:3c:57:50:20:f6:
41:75:7d:d7:ce:1f:8d:66:5c:14:9b:28:14:52:f8:
ac:db:5f:95:e6:5e:d5:34:4c:0d:08:e3:5b:18:c6:
ac:36:c3:07:ba:d1:ed:e3:b1:da:d7:7b:a9:5d:cc:
47:65:7d:0d:00:8d:2d:3e:27:bb:d3:89:48:f4:fb:
f0:4c:1e:b9:86:38:3f:5c:5c:f9:62:47:e8:4d:8c:
e6:0c:90:ab:9b:2b:16:1b:dd:bc:91:28:76:a3:69:
44:78:79:13:08:90:d1:36:77:94:a6:c3:4f:20:9c:
23:f8:46:6b:4d:99:9c:bf:b7:07:9d:8e:c3:f1:9f:
8c:9b:2e:2e:38:b4:49:57:cf:4c:62:e7:ac:c9:7c:
a1:57:e6:d5:80:81:da:2c:28:3b:1f:31:55:ee:bc:
f4:1f:4e:e1:d1:7d:02:45:ca:ac:fb:ee:6a:74:22:
95:36:ec:b2:fb:86:fa:fc:00:26:c4:16:56:fa:b9:
95:65:12:fd:9b:cf:e3:37:e0:1e:b2:8d:35:1d:f5:
f7:7d:dc:45:f3:72:3b:64:d0:b6:5b:38:b4:74:89:
0e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:02:94:AB:1E:B8:D0:C3:5A:9A:2C:65:82:29:69:64:F4:70:76:E8
X509v3 Authority Key Identifier:
keyid:05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:1a:ea:22:fd:d4:1f:40:7f:ae:51:c3:6a:3a:3e:67:52:76:
76:09:c5:fa:95:d8:2b:b0:5a:b3:b7:5c:8b:5f:40:00:25:78:
71:69:c4:77:04:88:a8:c1:e1:cc:5d:55:50:73:86:3a:bb:4c:
d4:23:5e:44:21:40:8c:42:4a:4a:71:8f:84:c3:17:6b:1a:f8:
b1:ee:13:39:d6:d2:93:90:01:b1:16:08:40:bf:53:ff:22:5b:
06:15:9d:37:ce:d8:bb:b4:34:6b:da:84:45:b9:1e:c7:9d:65:
6e:1a:71:87:c0:a5:5e:d0:1e:21:3f:66:0c:23:bd:7e:9d:6d:
75:fd:37:5c:61:43:62:09:8e:0c:ab:96:c7:fa:1b:62:18:87:
e4:20:0d:3c:b4:83:c1:8a:16:aa:37:5a:30:52:db:5c:f4:00:
e5:3b:46:81:69:5e:d7:1e:4d:a9:8b:b5:b0:b1:da:6c:8b:17:
3a:36:9b:a4:8d:58:dc:46:45:a7:a3:9a:8a:fe:50:04:4b:dc:
0d:96:31:03:47:3d:0e:d5:2e:48:df:c4:30:bc:13:68:2f:45:
71:1a:72:9c:53:1e:39:08:f0:22:61:20:66:e6:33:33:77:1d:
61:a4:80:c0:bc:29:26:80:10:af:d4:eb:e8:c4:0e:29:09:4b:
51:93:bd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:47:03 2025 by rpki-client