
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft
File: HteCvmLXEBdmiyijJonkcO2iAfg.mft (raw, json)
Hash identifier: XS+npLHCIBqAh5t1KUflHp8pyEQNaLkwmdFs9Jdj2qE=
Subject key identifier: BF:82:97:19:4D:0E:85:E3:8C:20:05:98:69:5C:6E:1A:6A:A7:50:B2
Authority key identifier: 1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8
Certificate issuer: /CN=A91E1257/serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8
Certificate serial: 075E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft
Manifest number: 0755
Signing time: Tue 04 Nov 2025 21:47:12 +0000
Manifest this update: Tue 04 Nov 2025 21:47:11 +0000
Manifest next update: Tue 11 Nov 2025 21:47:11 +0000
Files and hashes: 1: HteCvmLXEBdmiyijJonkcO2iAfg.crl (hash: ONWkZjgm//nzibIY7QGg/jk0QxKITmGhfTknuYk3yac=)
2: D41A1814442211EBBF7D9D65C4F9AE02.roa (hash: tB96Uz17EX40eZdARikwxQwcb8AmCNS9rm6xwYx8La0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl
rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:47:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1886 (0x75e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1257, serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8
Validity
Not Before: Nov 4 21:47:11 2025 GMT
Not After : Nov 11 21:47:11 2025 GMT
Subject: CN=690a745f-006e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:56:71:1a:66:7b:89:45:0f:a0:61:7a:d7:
a2:e5:98:b5:95:36:c3:56:30:89:29:ba:3a:70:77:
89:ca:c7:1d:48:97:65:b1:61:a2:cf:7c:50:ad:57:
d9:4e:f8:62:e1:2c:79:ed:7e:a8:22:89:ba:25:71:
53:ec:cb:72:ad:bd:26:bf:b8:65:f0:21:22:1b:b7:
55:42:3c:b9:5e:1e:b6:72:40:80:9a:6b:14:b3:f2:
95:ca:7c:d2:1b:55:e6:50:8c:ab:44:89:3c:96:b3:
3c:94:2b:64:72:2f:c9:a4:1b:83:e1:5a:54:9a:bc:
a1:4f:a1:dc:f0:5b:5c:d1:ff:72:8b:30:bb:a1:aa:
1b:01:5e:89:70:a9:26:0b:f4:4a:98:de:0e:05:ed:
2c:ad:83:4a:6c:d3:d7:82:05:ac:61:f6:79:25:b6:
2f:fe:54:b0:8c:b4:51:cd:0d:fb:42:06:21:ae:e0:
39:55:05:b6:bc:8d:9a:ba:40:44:5e:04:8f:7e:62:
8b:3d:95:c8:15:36:c8:44:c2:bf:00:e7:79:6b:7b:
3b:a5:12:b2:39:b7:83:fa:fd:53:f5:dc:36:08:47:
7a:bb:8d:fd:4a:3c:41:14:d7:d4:02:72:4b:2c:1b:
ac:c6:12:09:19:11:67:f5:88:2b:d4:5e:fa:f9:0c:
89:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:82:97:19:4D:0E:85:E3:8C:20:05:98:69:5C:6E:1A:6A:A7:50:B2
X509v3 Authority Key Identifier:
keyid:1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:28:1d:e4:04:57:7c:7e:22:cb:6d:01:0b:b5:4a:ef:0d:54:
95:b4:cb:95:e0:b1:24:21:7a:e0:5d:bd:92:2d:a2:31:a3:24:
d0:56:17:d9:78:cb:5c:91:89:5a:bd:40:27:8e:14:f4:21:db:
5b:06:5d:42:31:8d:a9:04:ab:04:e3:7f:8e:21:e7:c7:8d:54:
27:79:df:e0:26:e3:be:94:1a:0f:f1:64:42:96:35:a5:e0:da:
ec:ec:8c:40:69:ca:71:46:4f:e8:44:07:2d:dd:7a:d4:bb:7f:
bf:ff:dd:19:be:18:8b:b2:6d:59:86:6f:e4:73:ae:74:84:d2:
ec:e3:28:76:b6:53:30:6b:2f:63:9d:5f:15:95:a6:a5:2b:2f:
94:2a:38:cc:b7:b9:27:34:5f:cc:f4:d5:65:c8:01:e9:84:3f:
fe:87:7c:13:7d:9d:b4:28:2e:1e:58:7e:c3:da:9a:80:f7:75:
41:61:95:d8:c2:6c:24:b3:87:97:0d:8e:ad:b8:9a:4c:06:5c:
df:a5:1d:55:3e:ff:c9:9f:a4:c6:33:b7:3d:f2:d2:a2:11:17:
fa:39:35:fc:89:99:8b:a2:4e:d4:06:9f:06:21:51:3d:7b:d5:
52:51:57:28:87:8d:9a:1c:a8:5b:58:02:a4:35:92:8c:ea:85:
55:63:3e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:38:13 2025 by rpki-client