
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
File: OSQdwqlJIur_mC2bQID4vkD3tr0.mft (raw, json)
Hash identifier: 4NO3HY/WT1EUd87TY2E48+ziGLqIjPQrNcL/0aKxF/U=
Subject key identifier: 27:BD:04:F5:A0:42:8B:89:93:73:8B:B2:BD:DE:E5:4E:55:6A:58:58
Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD
Certificate issuer: /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
Certificate serial: 82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
Manifest number: 7D
Signing time: Mon 03 Nov 2025 06:48:25 +0000
Manifest this update: Mon 03 Nov 2025 06:48:24 +0000
Manifest next update: Mon 10 Nov 2025 06:48:24 +0000
Files and hashes: 1: OSQdwqlJIur_mC2bQID4vkD3tr0.crl (hash: xm41ho+fWGm8iqdQ83wALWFcSar/GtR3BVvRxZBdsbs=)
2: B0C47BF26CFE11F09B124778C4F9AE02.roa (hash: n88ojmtdqrdiflLIe0+SBb0jpSl3tXT/vbn9UpYcLtE=)
3: 7B3E74A6025011F096E34819C4F9AE02.roa (hash: WR0rb26sSd7NNnmbaBSVENCtgD1Go/mwg9p/vOPLcpI=)
4: 16105334922D11F087917886C4F9AE02.roa (hash: D5KaIdGc2ZrurRFfjIe8sBVZ5qr9BavnbZqsjgwmDZ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl
rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
Validity
Not Before: Nov 3 06:48:24 2025 GMT
Not After : Nov 10 06:48:24 2025 GMT
Subject: CN=69085039-2dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:41:55:81:17:19:c8:f7:09:34:be:12:92:
3a:01:60:08:27:bd:ed:a8:35:c8:12:94:a3:83:a0:
1d:e0:46:19:15:be:1a:7c:3e:fe:7d:b0:09:75:b9:
cd:8e:0a:7d:10:59:f3:e9:27:6c:35:c8:b8:6a:5a:
22:fe:46:e1:00:82:f0:49:c8:2c:78:0d:3c:10:35:
e5:b9:1b:92:de:fb:b2:26:e9:5e:de:67:36:75:99:
37:3a:15:b1:ab:57:fc:5f:a7:91:11:53:3d:16:e4:
46:8d:53:52:b5:ce:80:b4:3b:57:55:55:eb:93:54:
83:73:ae:91:5f:24:ea:f2:46:97:37:cf:61:75:1d:
1a:3a:7d:27:34:fa:3a:c1:ae:6e:b7:1a:c6:d4:fa:
7d:d3:fd:90:d7:e2:b0:cc:67:bf:31:e9:3d:13:d4:
f0:80:06:c6:cb:12:5f:cc:ee:22:80:c8:bf:b5:52:
55:a9:84:bb:aa:ed:1f:bc:5c:da:cd:9a:1c:79:1e:
8d:5e:af:e0:57:70:2c:fa:7a:c1:5e:b8:5c:dd:01:
7c:13:27:74:79:00:84:91:f9:e6:5d:a2:ab:63:04:
c9:be:44:e1:57:9f:75:03:e8:b8:49:ad:56:ea:5e:
48:64:7a:95:a6:43:09:fc:ee:80:0f:42:cd:b6:cd:
42:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BD:04:F5:A0:42:8B:89:93:73:8B:B2:BD:DE:E5:4E:55:6A:58:58
X509v3 Authority Key Identifier:
keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:53:c1:a0:75:9f:7b:0a:fa:0a:3e:99:bd:ee:c3:bb:77:13:
b1:56:25:76:4c:32:fc:62:7c:81:f4:75:4a:7f:3f:48:0f:a7:
fb:4e:47:c8:17:d0:b9:dd:94:e1:68:e0:da:c8:11:08:16:7a:
55:a2:23:e4:69:ee:f7:39:fb:5a:85:b8:7d:64:de:89:8e:e0:
89:c0:2a:e9:93:ab:ab:71:24:50:25:1b:8e:df:15:a5:96:f1:
c5:c3:62:33:e8:06:9e:a1:e1:a3:15:24:24:f2:3c:1f:6d:50:
25:72:11:e6:63:c0:1f:c4:39:4f:74:b0:63:30:13:0e:5f:b8:
f9:b5:1c:01:77:1f:c9:0b:de:65:05:2e:f2:82:61:80:fd:50:
e3:d4:a9:cc:57:a1:28:ba:f8:f0:83:20:58:80:33:18:15:7e:
16:ee:97:67:de:43:7d:d7:9e:83:e4:37:e8:5d:12:11:68:09:
35:2a:72:34:64:ea:57:3d:cf:30:f5:bc:75:9c:8a:96:30:3b:
2e:af:fd:d4:d1:a8:4f:ff:a1:b1:f7:e0:f6:b6:99:2d:ec:8a:
15:b8:a8:a0:fa:ca:31:8c:7d:e6:23:66:34:31:1e:dd:16:3b:
63:5c:8b:50:a4:96:fb:a2:21:e7:4d:00:5f:6e:84:90:d3:22:
07:53:9b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:58:39 2025 by rpki-client