
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
File: 77aQcOLEAaX3cTPS27G6NB0X5h4.mft (raw, json)
Hash identifier: AQTMAXmAXToqzi3Afjvszgg9l398ngMiUqv4lFTmosE=
Subject key identifier: 91:E3:13:01:64:5E:B1:BC:92:FF:07:27:EF:3D:AA:87:CD:1F:0B:DB
Authority key identifier: EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E
Certificate issuer: /CN=A91D359E/serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E
Certificate serial: 0C6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
Manifest number: 0C65
Signing time: Tue 04 Nov 2025 18:39:00 +0000
Manifest this update: Tue 04 Nov 2025 18:38:59 +0000
Manifest next update: Tue 11 Nov 2025 18:38:59 +0000
Files and hashes: 1: 77aQcOLEAaX3cTPS27G6NB0X5h4.crl (hash: X2LlRJurXU9szcLMKZ0F2jgi7zN7OdqMtRsqUej3JLc=)
2: 606EE7BC0DED11EA88AC0A29C4F9AE02.roa (hash: WgtMqOXutoCTVgnfA2uL+HiTE6KoWpCNsapDLYeBrco=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl
rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 18:38:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3180 (0xc6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D359E, serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E
Validity
Not Before: Nov 4 18:38:59 2025 GMT
Not After : Nov 11 18:38:59 2025 GMT
Subject: CN=690a4843-fcdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:25:99:b8:11:5b:e0:fd:a4:0b:b7:68:53:
12:dc:d8:1d:2c:25:7c:5d:b4:bb:c6:5d:b9:f3:b0:
cc:18:08:bd:ab:41:62:1b:46:4d:ed:f4:93:ad:04:
17:b1:b0:33:80:8b:af:19:84:66:2e:28:66:00:18:
2b:21:52:67:59:87:8c:85:db:c6:1b:85:3c:f9:b1:
9b:f5:b3:b4:c5:1f:5e:9f:d9:88:6f:93:34:4f:8c:
04:53:ef:15:9c:7e:73:79:c0:8b:fd:69:12:e8:49:
23:d0:8e:60:22:1e:cc:07:eb:b5:bc:e4:61:81:fe:
5a:ff:48:d3:20:eb:27:5a:66:89:7e:2d:db:df:24:
ab:a0:e7:a3:40:39:45:a5:43:cc:85:9d:71:e7:ee:
9f:c4:19:fe:e7:a5:c8:ac:41:7e:7a:bb:88:03:9c:
b0:46:4b:77:71:29:d5:bb:e4:13:fe:21:c8:99:d4:
a5:3c:d9:6d:09:d0:42:ed:dd:ae:90:b6:1c:e1:af:
94:a6:cd:c7:12:ad:63:ec:1d:ee:c2:eb:84:ea:2d:
7e:e0:8d:a4:e7:ab:8f:05:78:bc:c7:e7:0d:30:08:
31:d0:f8:9f:a4:c8:c9:64:66:ad:eb:1b:c4:f8:ac:
a9:89:ed:db:e8:f5:06:44:34:f6:b7:32:7f:33:28:
0a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E3:13:01:64:5E:B1:BC:92:FF:07:27:EF:3D:AA:87:CD:1F:0B:DB
X509v3 Authority Key Identifier:
keyid:EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:83:89:4a:1b:03:20:b6:c3:a2:3b:66:26:d0:18:1a:01:61:
f6:11:de:7d:88:9f:26:9b:bb:ff:3f:df:5d:7c:28:87:5c:d9:
62:16:a2:25:e3:b8:c0:47:60:05:94:04:46:8d:fa:08:57:97:
b2:d7:9a:38:d3:b3:84:e0:80:21:19:cf:db:88:30:4c:36:63:
eb:07:c1:4c:6b:ac:76:dd:82:6d:6e:7f:8a:54:60:74:1c:b4:
fe:85:50:8c:32:ef:23:49:5b:ea:7d:8a:43:69:b4:65:7c:e4:
2a:f6:5f:89:95:12:1c:b6:58:8b:14:1d:67:1a:90:78:d0:a2:
8f:9c:ab:b3:ca:3d:21:70:ab:1f:5f:89:fb:63:a3:6b:9b:9f:
32:a7:c4:26:ae:e6:07:12:b5:6b:33:0d:69:7a:86:21:64:0f:
41:b0:b8:0a:f6:bb:9a:b9:0d:db:ef:ab:6d:ce:4c:9f:e6:cd:
dc:f0:1d:d2:4b:f9:5a:70:29:c7:38:69:dd:f1:04:eb:58:c0:
92:2f:7e:8a:e3:b5:ee:c8:6a:e4:36:e1:10:19:e2:28:7e:50:
6d:27:d2:61:dc:65:76:81:79:3b:0b:29:72:b1:eb:37:50:68:
6b:b6:a7:79:9c:34:8f:3a:92:aa:a0:a4:8d:a0:28:bb:7d:c8:
14:3c:a8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:18:20 2025 by rpki-client