
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
File: dyhBomMmMU6i5Dg0dd4xttzn26U.mft (raw, json)
Hash identifier: rObxY1b5NNCKCw2BE6CiL5FR480G6I3FH+Ojyb3Vohw=
Subject key identifier: D4:75:1E:24:34:29:7F:FE:AF:68:66:5C:93:A0:1A:AA:26:18:B2:E5
Authority key identifier: 77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5
Certificate issuer: /CN=A91C9324/serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5
Certificate serial: 039A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
Manifest number: 0381
Signing time: Wed 05 Nov 2025 01:00:10 +0000
Manifest this update: Wed 05 Nov 2025 01:00:09 +0000
Manifest next update: Wed 12 Nov 2025 01:00:09 +0000
Files and hashes: 1: dyhBomMmMU6i5Dg0dd4xttzn26U.crl (hash: 0k66xr3mr2qhiMLWOivt5IEXGKcRhCLrCevyy3LBplI=)
2: 73E82004BCA111ED914D176DC4F9AE02.roa (hash: 6J/+qa4ndqIy2bgiH0rAtIyRGJ9+5Tg7hxefbddl5wU=)
3: 81F21152D1BD11EC9D8FBC52C4F9AE02.roa (hash: z1jWyE7wTAG+vUUdvi1jzxdBdVQ+/IwxY3FhiW3xUxE=)
4: B5A58DFAA1DB11EDA7229653C4F9AE02.roa (hash: 4bJR1ae0CXmv08R9QhnGSRGtLcQpBgDCwnqDFh7A4l0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl
rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 922 (0x39a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9324, serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5
Validity
Not Before: Nov 5 01:00:09 2025 GMT
Not After : Nov 12 01:00:09 2025 GMT
Subject: CN=690aa19a-a0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:99:dc:67:4f:d5:05:97:5f:76:df:ea:8e:
2c:ce:8d:c1:44:b8:23:e3:44:a3:ec:ff:a2:b1:1f:
5a:cc:9a:44:5b:b7:de:1c:39:c7:e4:20:9a:00:b0:
16:b7:aa:78:bc:f9:5a:ed:0f:a8:ed:1c:29:ca:06:
d0:d6:a7:dc:b6:d4:52:11:88:9e:01:94:37:ec:a0:
9c:0a:cb:8f:53:d7:1b:d5:33:67:b0:47:3c:bb:cb:
0f:39:10:77:e4:95:30:75:b6:85:04:5a:da:f2:2a:
f6:fc:58:1b:02:38:83:1b:47:ca:38:18:1a:f8:5a:
41:02:cf:37:42:0e:be:72:77:c2:e6:9f:ee:74:e0:
38:9f:65:f7:2b:ae:a4:40:9d:1b:8d:2f:34:ae:bb:
37:32:e5:25:bd:4d:ba:13:58:2b:8f:67:eb:c0:57:
e7:ea:c8:9a:26:2b:47:00:0c:ec:7a:08:6a:52:94:
99:f2:61:f2:4b:39:fe:3b:ac:7e:22:f5:51:20:e4:
53:e6:6a:75:d4:11:0d:2c:99:e3:75:6d:c5:8b:ca:
f2:01:35:2a:12:20:2b:ae:05:52:af:2f:5c:c1:e3:
cb:d5:0f:18:b8:71:97:05:11:e3:8e:89:cd:2b:03:
e8:b6:a8:89:70:48:30:4d:c8:13:e5:2f:93:86:72:
ed:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:75:1E:24:34:29:7F:FE:AF:68:66:5C:93:A0:1A:AA:26:18:B2:E5
X509v3 Authority Key Identifier:
keyid:77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:4e:d5:8a:29:f5:e7:b8:e2:42:13:63:04:ee:f6:2d:7b:3a:
c9:e6:bb:2a:b1:86:26:d6:3a:78:ec:ae:bf:d9:d7:47:29:4e:
89:07:e2:4c:70:18:c2:d7:4a:bd:a8:6d:90:fb:93:97:b9:f5:
11:73:8f:3a:ef:45:e9:7a:47:fc:6e:0b:bb:e2:9c:2e:a9:9e:
f4:77:ba:18:29:0d:7f:48:9e:81:6d:c7:a6:50:be:7d:d6:82:
0e:4b:70:d1:25:4a:ea:15:f6:04:41:54:d1:45:e0:3d:ac:af:
fe:b5:de:89:61:d4:94:f3:1c:c6:ad:d9:4a:d5:8f:2d:94:29:
2b:bd:9b:aa:4e:1f:2c:ff:c8:43:bd:6f:9f:d2:55:ad:d2:a4:
5e:f4:08:8d:9c:b3:00:56:a6:b0:e7:56:5f:da:3d:a3:65:cb:
40:3a:50:1f:06:06:aa:d5:bf:ab:8b:3a:4a:e6:01:0d:ec:0b:
78:7a:60:3a:0b:87:21:bd:3c:c6:af:3f:3a:f8:38:e7:2f:39:
0a:74:1c:2e:5d:7a:9e:7f:64:71:66:16:69:ee:92:c6:e3:db:
af:7b:6c:e8:0a:ab:21:05:d1:6a:9c:e4:b4:72:f0:5b:61:bf:
66:41:24:f9:4a:79:8e:74:a5:08:54:15:04:66:b0:68:19:d6:
30:c4:5d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:47:15 2025 by rpki-client