
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
File: 7unhDCkeVsgtdwcgELDlgAg_5yk.mft (raw, json)
Hash identifier: ydXMnrVNoTVn1Bf7s8iPxw98Fk/TLLOf+8nngKUH+co=
Subject key identifier: 5D:C1:1D:8F:91:E1:C4:F7:E0:49:D3:15:1C:EA:36:06:7B:0F:FB:A4
Authority key identifier: EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29
Certificate issuer: /CN=A91E82F0/serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729
Certificate serial: 016F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
Manifest number: 016F
Signing time: Mon 03 Nov 2025 03:49:24 +0000
Manifest this update: Mon 03 Nov 2025 03:49:24 +0000
Manifest next update: Mon 10 Nov 2025 03:49:24 +0000
Files and hashes: 1: 7unhDCkeVsgtdwcgELDlgAg_5yk.crl (hash: 2QXuC8IgLtpTzBsKqHGPURRlw+gnZkcvOAV37CE+HwI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl
rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 03:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367 (0x16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E82F0, serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729
Validity
Not Before: Nov 3 03:49:24 2025 GMT
Not After : Nov 10 03:49:24 2025 GMT
Subject: CN=69082644-08b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:60:c5:23:76:70:d1:11:83:b6:33:13:ee:a1:
b9:60:f0:a4:77:19:5d:a5:f1:70:83:2e:fb:31:4f:
51:9b:d0:3c:f6:a2:75:ee:0b:11:ff:f5:7f:18:c1:
b0:89:da:44:a9:dc:8f:27:d7:e6:c3:c0:4d:6c:d7:
2e:80:76:64:21:2c:05:52:06:33:70:63:a6:0d:b9:
e6:82:9e:31:bf:97:7e:f7:90:56:a3:5f:da:f1:64:
3a:89:85:d6:0c:7c:ed:2b:ea:c2:ef:ed:da:82:fd:
c7:a9:df:e3:dd:c7:15:87:6e:0b:44:a0:a9:5d:33:
b9:cc:bc:e3:6f:7b:6b:8b:bd:d1:27:f1:dd:cf:3e:
75:f1:de:60:7d:be:35:c3:11:74:63:2e:a7:54:0a:
7f:3a:ae:a6:94:af:00:d3:19:9e:73:8c:ee:44:23:
65:78:cb:e1:56:95:04:2a:ff:7b:95:6b:50:68:eb:
bb:b8:b6:32:18:6d:72:3d:e5:c4:da:39:10:ef:38:
95:0c:47:b8:dd:02:6e:fc:6f:49:27:46:96:2b:be:
e0:7e:ca:88:9f:9e:de:c2:be:2b:dc:f1:2f:36:83:
b0:36:ba:f9:21:b8:43:0b:57:82:cb:2b:b9:d6:92:
aa:0c:a1:98:68:38:46:d0:07:f5:26:ff:d9:ed:37:
70:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C1:1D:8F:91:E1:C4:F7:E0:49:D3:15:1C:EA:36:06:7B:0F:FB:A4
X509v3 Authority Key Identifier:
keyid:EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:73:26:d0:90:93:42:b9:01:ed:81:50:65:85:13:31:5c:0b:
9b:c6:e3:ea:c6:7e:45:99:d8:42:52:4e:7f:e9:f5:6c:aa:2e:
ad:10:a2:af:f3:ea:18:7a:92:e4:e9:22:04:2f:69:24:fd:84:
4e:a0:aa:10:b1:ef:b0:2c:e4:f9:f9:46:42:cd:c5:1b:cd:d0:
d2:80:68:e9:b9:75:19:da:d0:e3:28:f2:0a:d7:e2:6c:f2:aa:
b3:9e:fa:ae:86:5a:22:22:87:4f:0e:16:c7:a1:3e:86:8e:62:
c3:75:da:f1:6f:e9:91:ca:69:63:cf:41:0c:99:22:5e:f4:51:
7a:c0:6f:85:81:7b:ed:e5:07:e9:18:37:4c:66:4f:0a:b4:ac:
4e:3a:eb:af:7a:5c:45:80:db:5f:47:7f:6a:f8:fc:c7:ef:0a:
48:ec:16:c2:18:e2:86:a1:72:0d:52:83:e6:71:d3:44:92:81:
1a:86:41:c1:70:f5:b5:2c:8d:20:bf:2c:5a:fd:c5:ea:9b:fb:
47:d9:61:2f:14:78:7e:fb:25:b4:50:b6:e3:c9:eb:29:1a:b5:
a4:00:3d:de:50:5c:3f:09:8c:bc:a3:92:76:ee:63:90:f2:67:
3b:e9:85:4a:85:5c:98:b6:df:b0:b1:f0:5d:de:a7:af:af:08:
60:c2:04:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:04:46 2025 by rpki-client