
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
File: l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft (raw, json)
Hash identifier: 9otr4RNFRV6dri8BGSzMVfPvHA/DWHnwhorPlWYfUxo=
Subject key identifier: FD:FD:5A:4F:96:BD:70:62:CB:00:EE:1F:79:33:4A:5C:25:91:4A:70
Authority key identifier: 97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6
Certificate issuer: /CN=A91D46B0/serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6
Certificate serial: 07FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
Manifest number: 07EF
Signing time: Tue 04 Nov 2025 21:11:18 +0000
Manifest this update: Tue 04 Nov 2025 21:11:18 +0000
Manifest next update: Tue 11 Nov 2025 21:11:18 +0000
Files and hashes: 1: l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl (hash: /UJsz/4BJlVg7gMxedHNXbwwlaWFhamsMazVMN25jFc=)
2: 63B4DD1ADA2311EB8A4EC13BC4F9AE02.roa (hash: Xox0RKn25c/NtUoE1hfxgdRKbyAd4ZoK4OD14DUbhsc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl
rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:11:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2043 (0x7fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D46B0, serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6
Validity
Not Before: Nov 4 21:11:18 2025 GMT
Not After : Nov 11 21:11:18 2025 GMT
Subject: CN=690a6bf6-a8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b1:05:2c:18:3c:39:5e:01:26:9a:1e:01:03:
48:d8:0c:4e:db:90:61:cb:0a:5f:18:24:ef:a8:af:
6d:26:f1:bc:19:e6:69:ce:5f:b7:3a:3e:ab:16:c3:
cb:11:4c:46:92:41:95:ed:e3:9e:96:9d:3e:e8:9e:
73:2a:e9:99:7f:e2:8d:65:ca:29:01:c3:af:d2:16:
40:11:15:db:fb:1f:47:63:ab:ab:9b:12:bf:6d:3c:
1a:b3:11:2d:83:cc:aa:19:a4:01:7c:aa:2f:ed:b4:
e4:09:6f:ed:0a:44:a3:7c:59:2f:3d:30:94:30:9a:
07:67:77:e3:d0:27:34:c9:a9:f1:3a:14:24:75:2b:
14:46:51:5a:3c:2c:78:a5:03:e0:50:65:65:74:2d:
b6:27:ed:b3:a2:d9:bb:75:ee:d5:77:b0:5d:b3:b0:
fb:50:81:b1:5e:e7:e1:f8:4c:c7:f5:7f:06:d1:e8:
e0:50:40:39:de:1b:4e:71:65:8d:25:7e:bf:be:2b:
f5:ae:77:eb:5e:d7:72:30:f4:6a:ff:be:96:11:d7:
36:44:6a:a7:46:97:34:ec:eb:60:ef:0f:66:62:a1:
0b:fe:3e:3a:de:04:d1:1b:b3:31:ad:1f:86:a1:dc:
14:d1:2c:41:b4:24:53:7a:62:42:e9:f0:33:7d:64:
64:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FD:5A:4F:96:BD:70:62:CB:00:EE:1F:79:33:4A:5C:25:91:4A:70
X509v3 Authority Key Identifier:
keyid:97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:47:f4:93:fa:8a:92:41:e3:20:6f:e2:1b:19:1e:41:8a:0b:
91:09:96:c8:0e:38:f4:72:96:69:35:46:e7:93:b6:8f:c9:f5:
67:bd:52:f7:41:32:62:45:b4:a2:d2:9c:c9:0e:b6:8e:5c:a4:
be:9d:3e:46:eb:ce:54:e5:a5:1d:6c:a6:18:26:b2:9f:3d:ea:
7f:79:27:c9:3d:17:b0:2f:f9:10:99:91:dc:86:c4:f7:8d:d0:
3b:bb:2b:af:57:90:d9:fb:46:d1:b5:8b:d6:19:e2:ec:9d:0a:
31:33:33:1d:89:ae:cf:07:06:1e:d8:ef:3e:16:3a:7c:00:ff:
a0:45:4e:9d:e0:ac:d3:5d:77:bd:9e:97:b1:f0:0c:66:63:6b:
63:b9:15:6b:0e:80:2a:5b:02:41:e1:7a:89:1a:b2:4d:0a:5b:
ea:19:5e:f6:45:33:d2:54:2e:0d:78:a7:22:9f:57:80:3e:b7:
4f:c8:70:c5:e2:d5:42:7f:7b:1f:fa:83:c5:c9:6d:ef:2e:56:
df:f1:95:c2:10:e9:62:53:6a:62:0c:32:51:67:74:d2:95:94:
a7:82:2a:40:fa:27:9e:4c:f9:b6:dc:f3:34:01:1b:1c:7d:a1:
bd:5b:1d:69:bc:fd:03:bb:e2:6e:ce:2e:17:75:d1:c7:b0:96:
61:a5:e7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:57:12 2025 by rpki-client