
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
File: OS824KRQBTw9xm0uOJThDKcz3aY.mft (raw, json)
Hash identifier: 2Hm0EQAqyFEotvKXjmSOydnJQgkpDhBhtafZFxSNkZg=
Subject key identifier: BB:74:A3:AD:2C:8F:C0:78:B2:FE:91:D9:3D:6F:46:92:E1:47:21:83
Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
Certificate issuer: /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Certificate serial: 074B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
Manifest number: 0721
Signing time: Tue 04 Nov 2025 21:59:41 +0000
Manifest this update: Tue 04 Nov 2025 21:59:40 +0000
Manifest next update: Tue 11 Nov 2025 21:59:40 +0000
Files and hashes: 1: OS824KRQBTw9xm0uOJThDKcz3aY.crl (hash: jv/WPYVgwC2Lypf2ovI7c6r6eSZacPyHPhfZWrk7AOo=)
2: DE6E8CA8257F11F0823F9E46C4F9AE02.roa (hash: o5gUgXmaKSWEv0MLbiES70rfGmATgfeJQNOpimJu/i0=)
3: 539DCE8CB96711F0A4534519C4F9AE02.roa (hash: T1UinSJPlgyqj9vieRpzECJMaK5yxF/I35rOPxKOZe0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl
rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1867 (0x74b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C326F, serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Validity
Not Before: Nov 4 21:59:40 2025 GMT
Not After : Nov 11 21:59:40 2025 GMT
Subject: CN=690a774d-aaac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:51:1d:07:18:03:30:1e:64:70:4f:eb:66:
91:a4:0f:49:49:28:91:36:ad:18:56:c5:28:b4:a4:
4a:fa:10:2c:36:cc:0c:6d:ca:74:6b:bf:92:f2:e1:
ee:64:c5:94:67:37:89:04:cb:d1:56:7f:93:04:4c:
0c:00:51:ae:00:de:bd:59:79:fd:31:35:50:0a:e4:
ce:5f:2e:68:29:bc:f1:d8:60:1a:e5:b7:95:cb:54:
38:47:34:e7:cf:62:e4:bc:42:63:34:6e:bc:de:1e:
a8:7b:bb:7c:34:bf:fe:f0:65:34:f6:56:0c:d4:f4:
01:db:5a:d1:49:c6:7e:69:3a:d8:af:da:37:e9:2a:
4f:57:18:be:0c:cd:01:ff:08:45:2e:c8:80:11:e4:
8f:42:25:b1:88:62:55:8a:83:bc:2c:93:f4:99:6d:
51:80:4b:9b:ba:2f:0e:78:8f:7f:d3:fe:11:2a:79:
4f:f1:4e:05:92:1f:34:f1:0b:f0:45:48:d2:6a:b5:
4b:ec:ba:7c:1b:f3:cf:db:3a:c9:2a:0a:19:c9:05:
fd:28:71:e2:9a:f8:b7:1f:f1:c5:2a:9c:24:08:5c:
2b:4c:9b:41:17:04:79:31:c5:4e:21:dc:ca:73:86:
a7:17:93:d8:45:bc:7a:54:5b:50:98:f2:3f:95:b3:
52:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:74:A3:AD:2C:8F:C0:78:B2:FE:91:D9:3D:6F:46:92:E1:47:21:83
X509v3 Authority Key Identifier:
keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:ae:8d:08:65:3c:ee:c0:d5:76:20:87:b4:0b:2f:44:d0:6f:
c1:a7:db:d1:ab:99:e6:79:25:3e:8f:47:eb:04:2d:8a:47:e5:
81:2c:f7:05:54:16:e2:31:09:0e:f3:cd:14:ee:db:24:27:49:
ba:3c:3a:d9:ca:f7:92:49:56:fc:4b:4c:f9:91:29:8d:47:f8:
ac:40:36:6e:b5:35:7a:4e:03:8c:47:95:a6:28:57:46:2a:27:
e2:0f:e8:87:b2:c5:dd:a0:79:9a:8d:f4:ee:5a:68:ef:87:fd:
ae:24:97:e8:2d:be:01:80:83:5f:0d:47:9f:a3:cc:f3:2b:2e:
e1:d4:60:33:a8:2b:59:0b:94:c0:70:cd:38:47:dc:39:a1:56:
76:97:87:d3:c7:b8:30:f3:0f:33:c3:b9:b8:c0:27:42:b8:a3:
f8:5f:20:a2:d7:cc:30:3c:9a:f6:56:ed:c9:b0:4d:25:be:4d:
4e:4a:2b:f8:a1:fa:eb:db:01:5b:94:1b:bb:39:af:d5:ae:be:
f6:cc:ca:6b:87:8e:64:6b:31:03:00:43:50:26:bc:26:31:2d:
43:7c:ca:bc:79:a8:8c:b5:39:6b:23:b4:74:81:43:0c:2f:d1:
9f:b1:75:59:4d:65:2d:84:67:18:5c:47:66:20:8d:c3:4d:f8:
3b:60:6b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:03:10 2025 by rpki-client