
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
File: A4qG82KyVX-Uvncu4MX9MYRf4mM.mft (raw, json)
Hash identifier: pl1rgtDPA67EnOl+S1524zdnoiOrmoAyyvEn+elPVE4=
Subject key identifier: 92:F3:D5:F1:99:9C:CB:54:A8:6E:FC:F2:B7:90:34:02:8A:C7:F0:25
Authority key identifier: 03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63
Certificate issuer: /CN=A91C4003/serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263
Certificate serial: 0C42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
Manifest number: 0C2D
Signing time: Sun 02 Nov 2025 18:41:35 +0000
Manifest this update: Sun 02 Nov 2025 18:41:35 +0000
Manifest next update: Sun 09 Nov 2025 18:41:35 +0000
Files and hashes: 1: A4qG82KyVX-Uvncu4MX9MYRf4mM.crl (hash: CBPmJzEnoSp8BSIMjkmY4XHpPq7NirRhLRSHSfG29n8=)
2: 711115241AD911EA97EF1C30C4F9AE02.roa (hash: If6A0dtzlgPVB4CBNXQ4TMiF5xMEzeKvLljq5QFI3bk=)
3: 398848523A0011EFB7007939C4F9AE02.roa (hash: Zlhwy82VHpRYLPT4enDdRaV9Hjue+wnu8x2KNE0lTzk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl
rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 18:41:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3138 (0xc42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4003, serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263
Validity
Not Before: Nov 2 18:41:35 2025 GMT
Not After : Nov 9 18:41:35 2025 GMT
Subject: CN=6907a5df-3fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7c:8c:04:1d:65:f2:23:9d:4a:45:de:f2:f5:
35:33:ee:d4:d5:91:75:66:09:5d:1c:89:25:22:35:
0f:10:62:dc:23:9a:97:e0:ab:2e:b9:3d:f3:23:91:
14:5a:8f:60:4e:09:7f:2d:88:81:79:9b:8c:e5:e4:
b9:12:52:d7:44:b8:ff:67:10:0c:4c:2c:a7:55:a1:
81:2a:9e:fa:49:6b:27:b0:ac:49:23:cf:c8:59:c5:
f7:13:ed:6d:6e:51:a7:26:74:bc:b1:b0:0e:8f:fe:
f0:21:c6:95:41:47:38:cd:b8:9c:29:ce:d3:72:b1:
e6:3b:57:27:6d:36:71:fd:ad:cc:0f:51:73:14:a1:
9e:e1:33:2c:2c:6b:94:4c:f9:50:56:92:98:35:47:
18:b0:ca:88:f9:a0:11:ef:b4:cb:85:b8:9a:36:97:
5a:c1:25:24:d7:6c:49:9f:9a:86:13:cc:82:38:ed:
4c:52:d3:99:5c:d8:06:dd:e0:17:64:1e:8f:90:ae:
8d:e4:d1:6a:26:dc:37:92:95:27:76:2e:c3:29:ba:
69:cb:5f:4d:20:ff:cf:f8:72:ab:7e:bc:b8:3d:97:
c3:65:be:d7:eb:d3:3d:de:2a:d9:f0:16:37:22:86:
88:a8:4a:f8:28:d1:66:f5:9f:16:96:e7:ea:b6:23:
c9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F3:D5:F1:99:9C:CB:54:A8:6E:FC:F2:B7:90:34:02:8A:C7:F0:25
X509v3 Authority Key Identifier:
keyid:03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:eb:50:ea:e1:e1:11:58:e1:36:20:98:ba:63:58:69:bd:8f:
be:e6:e2:78:b1:40:d6:7d:6f:60:96:6f:f7:ac:1d:4d:ad:a6:
02:b7:9c:77:19:25:52:17:26:d1:23:1f:17:6a:e0:b7:9c:c4:
9b:01:9d:87:91:88:22:da:02:04:3a:bb:11:3b:1e:0f:e1:91:
4f:03:34:b7:cd:fe:f8:4f:5d:2d:b9:04:dc:f6:b8:28:9b:88:
46:96:ae:bd:cb:25:e0:af:6b:79:94:17:90:fd:83:f8:d3:d0:
19:93:3b:84:ac:a8:b7:33:e3:7b:ae:d4:d2:9c:da:4d:73:00:
8e:c6:1f:34:3a:0e:f9:46:a8:4a:ae:cb:0a:ca:d9:be:14:d6:
29:7e:92:7c:f9:f0:82:a4:65:e2:b2:cd:21:ed:86:29:94:03:
89:e8:57:7d:f9:a7:70:9e:39:17:f9:91:46:79:28:52:5b:e5:
78:1a:1e:59:82:86:c0:ae:10:fd:64:4e:35:7e:62:49:61:ba:
a3:4a:dd:ef:ed:69:20:44:1a:f0:37:f0:ff:6e:09:f8:62:25:
8d:44:2c:92:be:47:c9:a2:96:ee:82:c3:cc:47:73:ed:f5:43:
77:31:e5:5a:c3:f6:87:3c:8b:01:a7:59:a7:70:2c:0d:01:3a:
9d:17:b1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:04:58 2025 by rpki-client