
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft
File: 3oqNpw4WUAnRQNn2JFJNxNR51eg.mft (raw, json)
Hash identifier: IF0EC2exUJcILAyaypiuj7WBAPVsAv1vqJc0ziseQWA=
Subject key identifier: B3:C5:E6:E3:8C:36:6B:AD:D8:C1:7F:D5:5E:22:33:33:3B:90:DB:21
Authority key identifier: DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8
Certificate issuer: /CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8
Certificate serial: 081E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft
Manifest number: 0806
Signing time: Sun 02 Nov 2025 21:02:21 +0000
Manifest this update: Sun 02 Nov 2025 21:02:20 +0000
Manifest next update: Sun 09 Nov 2025 21:02:20 +0000
Files and hashes: 1: 3oqNpw4WUAnRQNn2JFJNxNR51eg.crl (hash: DG7tD5/0uZYtgGqFQQ3/wj1MTH//xD265KkwV5xwJX0=)
2: 29D6DCB2849211EE8F9C5870C4F9AE02.roa (hash: Rw6zEr6DY5Vp9Hj5tF7TI5Kq9ScA3GH+aMoga9/kLfs=)
3: B9A51B1AFA4F11EDB82FCB1FC4F9AE02.roa (hash: 5YYK0YKoDCpaklYir4k5rIBA5wPjwgrEAbtRskRmQT8=)
4: 298965AC06B611EBBBFD6B2CC4F9AE02.roa (hash: U1bQn0cREbDCYE8np1FOgxq7ZLPbZTRmflBcUUu8DFM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl
rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2078 (0x81e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA13E, serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8
Validity
Not Before: Nov 2 21:02:20 2025 GMT
Not After : Nov 9 21:02:20 2025 GMT
Subject: CN=6907c6dd-cf7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3a:40:1a:72:bb:55:ca:8a:86:df:2a:df:f2:
fb:79:f3:6c:c8:64:09:1e:60:cc:3c:4c:16:0a:1f:
6d:d8:d9:09:46:61:47:2a:3d:bc:3a:e0:58:e4:5e:
c4:61:1d:f4:37:ad:65:b2:d4:02:12:86:16:03:21:
5b:57:62:f8:8b:f6:9b:75:e0:52:80:bc:01:c9:ff:
82:75:69:0f:5f:34:12:4f:db:e0:cd:0f:43:e8:a5:
de:59:0f:7e:93:fc:da:5e:5b:24:49:f4:dc:4a:84:
93:fd:94:64:ed:1d:7d:d0:be:e1:ac:a2:29:cf:a0:
45:29:7a:2a:f9:ff:15:86:5b:a2:11:bb:bc:7a:f1:
29:f5:8c:f6:bd:55:5d:f7:73:85:a2:9d:da:c1:e9:
5d:ae:21:f7:bd:43:48:5e:69:26:bd:bc:00:bd:65:
64:11:9c:35:b4:b9:2d:4d:58:fc:db:03:46:f1:85:
f3:3d:8a:b9:26:5f:9f:5b:19:e5:75:bf:ae:b0:e0:
62:d2:c4:97:b9:c0:67:78:6b:15:50:84:93:60:93:
d2:c1:e0:9c:44:de:19:4c:55:b9:70:61:bf:d8:6b:
bc:bd:8a:3d:1f:05:61:be:62:80:52:e3:4b:87:07:
df:40:f7:40:42:27:ac:c9:4b:50:54:a9:9c:ea:de:
e2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C5:E6:E3:8C:36:6B:AD:D8:C1:7F:D5:5E:22:33:33:3B:90:DB:21
X509v3 Authority Key Identifier:
keyid:DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2b:6c:47:4a:12:94:83:e3:21:5a:75:33:f7:a6:b5:22:3d:
f7:6c:28:4d:2f:50:8e:b9:6b:66:47:ba:fb:6c:ff:29:31:15:
df:45:c1:54:ea:f3:87:d1:1b:e0:ad:9d:a2:63:b3:0c:cb:ac:
c6:6b:c5:9a:9c:d2:92:e3:d2:06:1e:55:eb:50:62:15:ea:78:
84:5a:ca:30:37:4a:30:df:ac:b9:19:33:8c:6a:b8:5a:a8:41:
79:7f:d1:38:98:d3:e1:94:2f:51:09:5e:27:f6:3b:9a:74:80:
7b:f6:a1:6f:95:6d:c7:0f:9a:c0:e8:fd:e3:62:83:93:9e:fa:
fa:a9:69:c0:5d:0c:e5:fc:b2:b9:12:55:92:74:4b:15:12:48:
99:7e:47:89:2e:a2:be:93:5a:d4:30:0b:0c:eb:e6:8a:c3:75:
f7:c2:9c:99:d8:83:1a:c6:22:d2:e1:09:44:6d:1e:33:d8:b1:
02:39:4f:0f:84:f6:b3:1b:63:75:da:99:5f:c0:3c:4f:17:a1:
c9:0f:1e:89:92:77:17:40:6c:bb:50:14:58:23:94:fb:ca:46:
84:eb:a0:da:37:16:2f:9f:9b:19:f8:19:a2:86:b7:93:07:2a:
d9:38:60:91:7c:3a:b7:ab:11:1c:28:dd:43:1a:e4:41:3a:d9:
63:ba:23:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:18:17 2025 by rpki-client