
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft
File: dBZmaL52tzdXYxblXZ5kOeZxz0c.mft (raw, json)
Hash identifier: 3j6Fceo6a+7Re6Mh60tzJxFNKm3GyJ7IpPpa8zY/Dus=
Subject key identifier: 22:99:CE:6D:D7:9A:8C:53:31:A9:7F:D2:A9:8C:9B:FB:6A:FD:5D:07
Authority key identifier: 74:16:66:68:BE:76:B7:37:57:63:16:E5:5D:9E:64:39:E6:71:CF:47
Certificate issuer: /CN=A91CD281/serialNumber=74166668BE76B737576316E55D9E6439E671CF47
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft
Manifest number: 83
Signing time: Mon 03 Nov 2025 06:40:22 +0000
Manifest this update: Mon 03 Nov 2025 06:40:21 +0000
Manifest next update: Mon 10 Nov 2025 06:40:21 +0000
Files and hashes: 1: dBZmaL52tzdXYxblXZ5kOeZxz0c.crl (hash: TwHWmDnJwkZKGqZpwRn7yziEKin8mOtUedi+6VHZ0Gs=)
2: 7CC6D634F27311EF9AAECC3CC4F9AE02.roa (hash: H0Gt6hkw2JpHPGPBgwlKru1+nCswYpwJdtuwdjPnKvk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.crl
rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:40:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD281, serialNumber=74166668BE76B737576316E55D9E6439E671CF47
Validity
Not Before: Nov 3 06:40:21 2025 GMT
Not After : Nov 10 06:40:21 2025 GMT
Subject: CN=69084e55-8a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1a:ba:e4:a5:55:f8:b2:e9:0b:d9:b8:ae:02:
a8:38:84:81:ea:9f:46:93:31:32:d6:a8:b6:a9:43:
f2:c5:09:fa:3f:67:bb:74:e8:df:90:b4:e3:31:a6:
46:6b:1e:ce:9a:ef:48:51:45:d7:2a:cf:c7:6a:4b:
e2:13:cd:fc:17:c3:f6:1a:23:d8:be:38:db:cd:f5:
94:87:27:af:80:a4:b7:0b:2f:83:a4:b5:40:ee:ef:
1c:f1:0e:39:6e:74:58:18:d3:d7:9f:d9:74:3b:44:
13:eb:ee:7c:61:8b:9b:5b:17:81:5f:55:47:8b:61:
4b:66:51:47:61:50:9d:3b:31:ea:a9:88:87:d3:b5:
28:5e:63:05:9c:d6:c0:7e:81:8f:29:22:c5:b3:d4:
9a:96:ee:13:11:33:6c:10:c7:90:b6:f7:53:4c:4c:
af:82:9d:d3:c9:0f:72:3d:40:b7:5c:50:da:3f:13:
53:45:c2:37:51:ef:df:22:4f:dc:4b:13:9b:3d:7f:
af:3c:70:39:3a:0d:c0:8a:82:16:79:63:89:5d:d8:
17:51:68:d7:14:f4:81:ec:65:d2:0b:b8:be:80:6f:
d8:d9:36:e7:53:f0:58:02:74:b7:f1:12:2e:8a:c5:
17:b1:cf:44:36:77:5b:fb:88:b2:e5:3b:53:34:b6:
c6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:99:CE:6D:D7:9A:8C:53:31:A9:7F:D2:A9:8C:9B:FB:6A:FD:5D:07
X509v3 Authority Key Identifier:
keyid:74:16:66:68:BE:76:B7:37:57:63:16:E5:5D:9E:64:39:E6:71:CF:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:8b:c2:c6:19:d1:50:5a:30:50:d1:91:5c:71:e1:13:21:7a:
d1:b7:c3:fb:88:fc:04:62:67:10:a9:e9:c6:15:b5:dd:d9:d0:
7c:59:c5:c9:c9:17:76:8b:13:e4:a8:40:af:53:44:37:b2:fb:
5c:3f:e9:a7:c0:71:63:7b:a2:be:d6:90:39:89:97:88:ff:1c:
d9:81:da:23:b6:5e:85:6a:92:d5:e2:57:b0:a2:d5:cf:fa:2d:
08:1e:2a:e1:4f:4f:0a:44:e7:d5:73:a7:9f:4c:da:d7:37:c4:
3e:35:14:01:c8:87:97:6b:b0:2b:9c:f9:65:86:e7:8a:f4:73:
c2:02:48:c0:ba:ff:53:61:02:bc:5a:ec:56:01:c9:42:bc:c8:
59:2c:1d:34:59:81:dc:e0:b5:89:82:24:b0:a0:96:7f:eb:72:
c5:7b:4b:56:c9:40:2d:12:5b:c3:2a:1a:71:6d:f0:8a:c9:d6:
9d:d9:87:11:bd:73:b0:d9:8f:36:2c:4d:fc:bc:a2:f5:a1:10:
6d:9a:ec:84:c0:de:1f:97:5b:98:50:8e:13:a8:e6:8c:cf:41:
46:e9:f8:b1:08:49:23:d4:27:77:21:07:04:e0:89:ee:94:c6:
a6:f6:19:ec:69:66:5a:09:90:f2:d6:14:6f:37:29:57:73:6f:
26:17:e0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:21:47 2025 by rpki-client