
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
File: 79cHaffoVdJXok1qHUkDlQqzadM.mft (raw, json)
Hash identifier: e7vow1Oqhq8rNRZkE0l6wP8PXlzUbtCDKZ5oProp4vM=
Subject key identifier: 23:F2:BF:05:5D:C4:80:85:81:43:5B:18:FF:18:8E:3F:18:52:BC:F7
Authority key identifier: EF:D7:07:69:F7:E8:55:D2:57:A2:4D:6A:1D:49:03:95:0A:B3:69:D3
Certificate issuer: /CN=A91DBE37/serialNumber=EFD70769F7E855D257A24D6A1D4903950AB369D3
Certificate serial: 06D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
Manifest number: 06CE
Signing time: Sun 02 Nov 2025 22:01:06 +0000
Manifest this update: Sun 02 Nov 2025 22:01:05 +0000
Manifest next update: Sun 09 Nov 2025 22:01:05 +0000
Files and hashes: 1: 79cHaffoVdJXok1qHUkDlQqzadM.crl (hash: k+1UyL2sMRIwoP2JY+II0EExu6QBLuRNT53fua5LFZ8=)
2: 9E924168765811EB9E261F25C4F9AE02.roa (hash: gf+XHv/B7y9fMOtlEsCMLfQ4eU62pqLRv/z7H7sAxg4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.crl
rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1748 (0x6d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBE37, serialNumber=EFD70769F7E855D257A24D6A1D4903950AB369D3
Validity
Not Before: Nov 2 22:01:05 2025 GMT
Not After : Nov 9 22:01:05 2025 GMT
Subject: CN=6907d4a1-09a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6b:00:27:b4:02:d4:1a:13:08:92:ed:b1:36:
54:3b:d4:91:db:6d:60:a7:8c:d5:d5:5f:35:ff:6d:
01:c1:12:8a:34:f4:20:b5:8c:45:f0:80:f3:ec:3d:
8d:2e:aa:e7:7f:fb:db:51:fa:a5:d9:3f:de:83:20:
09:81:6b:fc:57:41:c4:f5:af:17:12:50:b2:37:a5:
39:0b:4c:08:f4:09:fe:48:40:db:a5:c3:68:b9:0b:
df:f4:8d:cf:ac:c6:f6:e0:e2:90:6a:38:10:eb:74:
5c:ed:37:fa:5a:d8:f2:ad:66:5f:4c:29:22:16:34:
2c:16:f2:ef:94:46:99:f0:b6:17:de:1e:9a:be:76:
cf:c2:0c:b8:9f:a3:86:52:92:0d:02:94:b5:f2:bf:
5f:3c:6a:c9:41:35:5f:b3:75:2f:11:6f:67:88:49:
86:1a:f3:30:d0:6d:be:67:71:dc:e7:df:90:d2:07:
c2:6e:b6:63:03:74:55:e0:5e:7f:7e:8a:ce:79:3e:
2f:2c:d8:85:46:d0:b6:5c:b5:1d:1b:44:23:d1:cf:
af:9d:5d:ac:9a:a4:26:32:e6:74:de:0c:1b:43:54:
ed:3b:61:f6:60:ef:e8:78:f2:44:07:1b:bb:67:e5:
8f:24:81:90:7d:a6:37:a5:7c:2d:b1:11:0e:d2:82:
97:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F2:BF:05:5D:C4:80:85:81:43:5B:18:FF:18:8E:3F:18:52:BC:F7
X509v3 Authority Key Identifier:
keyid:EF:D7:07:69:F7:E8:55:D2:57:A2:4D:6A:1D:49:03:95:0A:B3:69:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79cHaffoVdJXok1qHUkDlQqzadM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBE37/6A35E3D0765711EB997DB424C4F9AE02/79cHaffoVdJXok1qHUkDlQqzadM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c2:bd:41:24:e4:d5:46:14:fd:c6:6d:55:71:9f:7d:d8:5c:
e9:b2:97:20:7b:fa:41:03:21:4c:0a:43:92:ce:a8:95:e9:7b:
42:41:e9:6a:fe:66:08:33:93:36:65:38:ae:69:e6:2d:04:33:
7d:07:66:da:32:52:50:6c:2f:ce:c0:56:16:2a:84:09:a6:bb:
aa:f3:07:d0:2a:7e:ca:72:bb:7b:e8:14:e7:8e:69:32:df:d6:
2a:07:81:4e:9e:81:cf:50:04:a7:6a:04:52:94:f5:7d:02:22:
b5:1e:19:05:50:38:66:ff:29:67:64:30:a2:16:1f:46:3c:82:
68:2f:c4:2e:f6:71:0a:e7:96:97:8c:73:c1:19:78:9e:5d:75:
e1:09:13:3e:f6:e3:7e:e0:24:60:2d:8c:2d:d0:f7:ec:3a:a2:
59:61:b8:74:9a:90:fe:e3:ed:fa:5d:da:48:f7:8e:51:46:00:
16:0c:80:34:3f:2b:00:13:ca:98:1d:e9:03:af:d7:5a:01:05:
01:ce:75:aa:e0:d8:f0:92:86:8d:f8:54:b5:8a:c3:10:21:1a:
26:db:8c:f7:bf:03:e2:68:39:c7:d7:0c:89:5d:d3:4f:82:95:
8f:32:99:a7:df:53:78:bf:ba:6b:b5:60:1a:7a:b3:be:55:61:
6c:7c:ca:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:37:03 2025 by rpki-client