
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
File: gL6TDjBkmxKs7o3EC1dat93mSUU.mft (raw, json)
Hash identifier: 3MQOyk0mgJnivHPSfZsev4q7M0t3C++iMiZqWX8pHlg=
Subject key identifier: A2:9D:E8:0C:73:1A:92:E9:8D:D3:7D:27:1A:A1:37:80:46:F6:FA:70
Authority key identifier: 80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45
Certificate issuer: /CN=A91E0C33/serialNumber=80BE930E30649B12ACEE8DC40B575AB7DDE64945
Certificate serial: 0197
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
Manifest number: 018D
Signing time: Mon 03 Nov 2025 03:36:26 +0000
Manifest this update: Mon 03 Nov 2025 03:36:25 +0000
Manifest next update: Mon 10 Nov 2025 03:36:25 +0000
Files and hashes: 1: gL6TDjBkmxKs7o3EC1dat93mSUU.crl (hash: UMZ0/2uHNQRtwT6tKIvwxBweXrnfbwNuVlrAQhyWuYI=)
2: F43FF9A8AA7511EE9BF3CC35C4F9AE02.roa (hash: iIgu2YCDJNBMVFAfxHOYOBXqDgtqnG2sQcvAv4/N21A=)
3: F0FB94ACA95611EEA6E7DB7AC4F9AE02.roa (hash: MEW0G3vOg9trhSdFIvvfCuuUeDbhhXHLhPTz+oibzFY=)
4: 17A27C7E116211EF8FC7E061C4F9AE02.roa (hash: cztAbxO48iiXYnmlMNinP2Teys3bNMwe8+H32sjLLV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.crl
rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 03:36:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407 (0x197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0C33, serialNumber=80BE930E30649B12ACEE8DC40B575AB7DDE64945
Validity
Not Before: Nov 3 03:36:25 2025 GMT
Not After : Nov 10 03:36:25 2025 GMT
Subject: CN=69082339-3d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:0b:fe:1b:13:ca:91:6f:67:cf:df:0e:7f:
c9:03:4b:8e:ca:c3:27:14:5a:54:bb:0a:29:06:fa:
02:6c:a2:6c:9e:b7:27:fa:9d:48:9b:4b:4a:2e:07:
2f:60:cc:28:1d:3f:cf:e7:c6:a2:66:d0:5f:f8:bd:
8b:b9:92:ad:a2:2d:2f:ed:da:c4:31:25:9a:63:6d:
4d:aa:58:20:74:36:13:f5:54:f3:37:13:c1:b9:96:
47:b2:23:c0:b3:96:ed:f0:3d:27:33:09:60:c7:38:
98:09:55:89:ea:8a:06:4f:7f:b9:00:03:a2:9a:bd:
e3:fc:96:69:13:cc:94:3b:20:23:24:60:b2:17:60:
e7:02:f4:fd:77:bd:08:bd:b9:97:de:69:67:36:c5:
bb:c7:90:bd:5e:e0:ac:eb:32:92:82:8e:52:b1:2d:
e4:4b:79:08:16:81:ef:01:63:2b:49:8f:ee:da:0c:
9d:ee:4f:65:f8:30:a6:a9:b0:3e:e7:52:33:4d:9b:
10:48:aa:42:ac:84:36:0d:d9:3e:20:c9:b1:ad:39:
92:43:53:86:19:9f:06:5e:e6:09:2c:84:49:84:b8:
87:10:82:e2:98:2e:90:e5:33:a7:bd:1b:df:f2:b8:
a9:60:c4:2a:c6:90:d6:dd:62:26:d7:f0:0c:29:7e:
ed:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9D:E8:0C:73:1A:92:E9:8D:D3:7D:27:1A:A1:37:80:46:F6:FA:70
X509v3 Authority Key Identifier:
keyid:80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:22:3b:63:ca:84:b9:a1:0f:bc:24:cd:fc:b1:39:e7:27:16:
b9:63:9c:3b:9d:9a:4a:6c:2e:43:b9:43:87:c2:d0:b0:41:51:
3b:82:a0:44:69:31:11:90:08:8a:d0:bc:d6:53:1d:9e:fc:e6:
f8:40:49:69:fc:1a:5c:bc:47:f1:cc:f2:ef:42:e7:f4:48:fc:
f5:30:fc:2a:35:85:b9:b7:c2:88:66:f1:51:63:f7:8f:3a:32:
66:e5:b9:11:22:15:71:86:e4:f6:5a:b3:26:d6:df:8d:1b:d0:
1d:b6:a4:f5:74:d8:cc:ad:0d:c4:ff:ea:e0:90:5f:5c:b3:96:
ed:38:43:e1:96:ec:ed:98:ee:6a:9b:56:95:ff:77:6d:d5:b9:
6c:90:6e:f9:0d:53:28:e6:a3:e1:18:c9:61:2c:ea:da:ee:12:
79:f9:84:ad:42:e5:7b:b9:a6:dc:fc:81:c1:08:33:25:92:2f:
a5:58:7b:8e:9a:38:85:04:66:b6:73:3a:53:2f:f4:c7:06:14:
54:1f:60:b0:7c:76:35:62:e0:ea:f8:de:8b:dc:79:95:39:8c:
6c:79:2d:b7:0b:b7:9c:ea:aa:7e:c3:76:46:00:7c:b0:44:f3:
ee:96:13:b6:8f:2d:2c:4b:ba:bd:ac:96:de:70:91:48:ea:85:
68:72:28:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:47:05 2025 by rpki-client