
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
File: 7Y9dbJv8FI96u3CMUpHThHgcYf0.mft (raw, json)
Hash identifier: krPCx7AvEj0F9y19aUQM6UN/YKsyvnMAOYbjY9opnrI=
Subject key identifier: 06:E6:09:F5:B8:88:6A:C9:E0:21:13:14:79:DE:E5:D7:D3:82:76:C3
Authority key identifier: ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD
Certificate issuer: /CN=A91DA0AA/serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD
Certificate serial: 01EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
Manifest number: 01DD
Signing time: Mon 03 Nov 2025 02:54:11 +0000
Manifest this update: Mon 03 Nov 2025 02:54:11 +0000
Manifest next update: Mon 10 Nov 2025 02:54:11 +0000
Files and hashes: 1: 7Y9dbJv8FI96u3CMUpHThHgcYf0.crl (hash: 0fUFFqb0GUdfZ3L0l+zYZG7CqDXKYOH3ByOzBNVIp4k=)
2: E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa (hash: 2Sk6qdac85J3PHWk8OUfv3qQs5GZrJRqheFoyWeSnOE=)
3: C5AFD098167311F0916F5435C4F9AE02.roa (hash: T/t95RGiv+MhA6WaLbxmQnLnySE9uteSKwYbrk4jpmc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl
rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 02:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 495 (0x1ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA0AA, serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD
Validity
Not Before: Nov 3 02:54:11 2025 GMT
Not After : Nov 10 02:54:11 2025 GMT
Subject: CN=69081953-684e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:51:c5:db:96:45:fa:ea:d1:6a:cd:e5:c2:cd:
a5:34:a1:9b:71:fb:44:f7:ff:5b:58:93:11:6c:d9:
3e:2a:4c:c2:bc:6f:fa:de:8c:6d:78:ea:e8:58:0c:
0d:aa:66:4b:5e:55:aa:df:74:08:47:6e:43:b4:e9:
9c:c3:cb:2e:e3:ee:0c:cf:40:28:e6:20:4f:1a:43:
dd:31:9c:12:bd:46:4e:83:79:c3:08:6e:a1:60:dd:
f0:59:7b:02:c6:25:ef:86:97:39:e1:86:96:e4:d9:
37:89:38:b1:83:cd:fd:01:f1:c1:97:57:e6:fc:f4:
06:58:bd:17:64:35:c1:6d:83:52:a4:73:b8:9d:74:
cd:54:5d:25:b3:e2:e6:06:cc:73:9c:a2:cb:9a:dd:
f3:3a:6e:cb:5a:4d:1c:c7:1e:79:de:8d:78:0f:fa:
1b:9e:09:10:fd:a7:28:2d:5a:0a:4b:54:02:55:e5:
76:3a:2e:3d:8c:76:76:44:00:1e:ef:3c:9d:81:86:
73:80:97:e7:da:49:c3:00:fd:c5:49:7c:13:a4:59:
0a:3e:f2:21:dd:a5:23:29:6f:b9:8e:1e:01:78:81:
43:d0:73:0b:f5:a0:f0:5c:e7:1a:b2:c0:80:9d:e9:
ac:3c:56:11:9f:dd:49:e4:d8:2d:3f:a2:6e:ff:ed:
89:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E6:09:F5:B8:88:6A:C9:E0:21:13:14:79:DE:E5:D7:D3:82:76:C3
X509v3 Authority Key Identifier:
keyid:ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3f:98:45:40:da:c1:da:b3:48:69:65:09:bf:47:e3:91:fb:
71:82:ef:54:a9:e9:80:10:27:3a:66:23:0a:06:0d:46:51:2a:
dd:1c:13:ed:c7:7e:bd:d0:52:f2:18:92:07:70:6d:81:05:c4:
16:94:1f:63:99:ed:6d:f7:41:28:93:09:af:9a:e8:d9:7b:02:
45:24:55:08:58:09:07:66:96:63:05:fc:a2:c5:85:e3:13:07:
0f:6e:fd:d3:93:a9:50:28:61:f2:c4:82:45:21:57:b7:13:5c:
af:26:f2:7c:c2:4e:a8:20:65:72:9e:51:87:72:b0:af:04:3a:
37:bd:f1:f8:44:b3:26:83:52:16:64:00:db:cc:99:bf:16:a3:
75:67:09:e0:52:9d:36:9e:ea:52:f8:67:b5:63:5f:5d:91:d8:
d5:6f:59:f6:d3:3d:78:86:83:3f:d6:fa:c7:1c:a7:9d:58:8c:
c6:ca:67:05:d1:8c:01:4a:92:35:be:77:e9:37:ff:e6:a8:2e:
92:4e:cc:dc:d6:dd:e6:be:cc:b6:3a:ef:39:3d:d8:12:e8:f0:
3f:6f:5a:6f:50:0d:98:03:11:b6:e4:74:24:ba:87:f9:05:6d:
3c:65:c6:51:14:ef:a5:59:28:e5:43:22:da:9c:40:59:46:e6:
d4:91:3e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:44:17 2025 by rpki-client