
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
File: acgZi9o_0JBT9CVT1z7qFRIdJBw.mft (raw, json)
Hash identifier: mtkEI9xKP24hjqvgCCLotJRQxVDy7DWnXGAgiDAWqPQ=
Subject key identifier: 13:3C:86:B2:74:4F:72:80:42:A1:EE:BD:7A:36:16:91:64:F4:78:5C
Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
Certificate issuer: /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Certificate serial: 0BAE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
Manifest number: 0B9E
Signing time: Tue 04 Nov 2025 19:05:53 +0000
Manifest this update: Tue 04 Nov 2025 19:05:53 +0000
Manifest next update: Tue 11 Nov 2025 19:05:53 +0000
Files and hashes: 1: acgZi9o_0JBT9CVT1z7qFRIdJBw.crl (hash: DJ0jTypHhykFyFF14dYyNA01IhuDYF//SKtPluxwxG4=)
2: A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (hash: pyQz1D6782Rt8rbYkLjsLImtzM5OVg/DTRlj4Kga3+Q=)
3: C53629FEEACE11EEA8513D34C4F9AE02.roa (hash: fM914915Khakkai2qWkeTKAeeQDgBvP101R4o1zFbdM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 19:05:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2990 (0xbae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4F66, serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Validity
Not Before: Nov 4 19:05:53 2025 GMT
Not After : Nov 11 19:05:53 2025 GMT
Subject: CN=690a4e91-92c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c1:09:3a:bb:98:2b:14:be:18:82:16:e9:62:
c3:88:f0:63:4b:4a:87:85:5b:15:84:20:be:44:49:
4f:d5:9a:48:c5:59:3b:e2:52:62:8e:b2:17:cd:36:
bd:da:6e:ea:53:e9:c9:52:86:d1:9c:f2:e8:b2:38:
b4:62:41:04:93:cc:93:38:44:c7:02:b5:9e:84:27:
c3:fd:ba:fa:5e:a4:a2:a6:8f:5b:fc:c3:90:d3:32:
c1:33:50:de:a2:f3:ab:e5:02:60:b2:3e:13:cd:88:
4e:1b:0d:80:23:b7:58:8e:39:5e:e1:cf:4e:b7:46:
cc:bd:64:8d:4e:ef:df:70:f6:0f:c2:3b:62:f0:0e:
ef:34:88:14:27:3c:dd:bd:f8:6d:c9:c9:6a:11:9d:
34:3a:a3:1e:26:d8:5d:ea:fe:ee:57:57:03:40:8b:
8d:ee:cf:3b:8d:d1:ee:69:59:f6:79:74:4b:84:a8:
74:83:eb:cf:8f:80:b8:8f:ef:22:6b:c8:eb:5f:a5:
58:13:a2:64:65:df:c6:26:74:ca:62:97:58:94:4b:
1e:b9:b2:20:27:4a:ef:9a:9f:8c:a0:bc:72:01:ae:
1c:79:b2:6f:3a:d4:09:e2:be:c0:fe:0d:62:c2:96:
f6:66:6b:9e:f1:a4:01:cc:b4:e5:64:28:d7:d4:b7:
7c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3C:86:B2:74:4F:72:80:42:A1:EE:BD:7A:36:16:91:64:F4:78:5C
X509v3 Authority Key Identifier:
keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:ce:b9:fb:d8:5e:df:f6:98:32:16:63:53:b5:0b:de:92:b5:
3f:fd:02:7d:b9:2c:f7:e3:c1:ad:22:5e:fe:97:2f:e4:fd:5f:
17:08:db:e3:ec:82:b4:89:41:41:a2:52:a2:37:e4:19:94:61:
6f:9d:e6:7f:9f:75:bf:f8:52:bf:c8:52:47:93:f9:5d:ae:da:
09:17:44:92:c1:2e:72:f0:ff:fe:29:4d:b8:75:d9:c3:c8:a8:
9b:f7:4a:9f:89:3e:b3:3a:ed:7a:42:3e:d2:19:bd:e9:51:75:
3f:54:27:2c:cb:99:fc:eb:26:75:11:61:f6:6e:13:1e:33:0e:
29:94:2e:06:c2:57:6d:86:dc:98:a7:a1:29:75:6b:46:d4:b9:
32:53:fb:0b:6f:23:93:fd:d5:37:68:d7:e0:4d:d7:5c:a8:74:
fb:73:30:b1:63:3b:87:8b:1d:9a:de:c6:d6:d9:1d:7a:64:43:
fa:82:f9:88:fb:1a:1f:ca:c5:be:55:a0:46:ed:dd:26:49:99:
fb:1c:bf:83:81:68:e1:eb:c7:3a:25:f5:25:59:c2:32:08:5b:
ea:5f:96:1e:44:04:a3:86:52:71:81:58:2d:00:c8:d0:49:7c:
1d:ed:03:f7:b1:63:4e:3e:20:b4:b1:e6:f1:4f:3f:51:31:8c:
35:e7:74:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:34:33 2025 by rpki-client