
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
File: bV1Q6IudZeiv2ijCzqYVAScDhgg.mft (raw, json)
Hash identifier: 03HGOxrbC0WKFOAMKU1VDzJZrTp2sswIkh1A+xVBaRc=
Subject key identifier: E4:45:9F:10:00:3D:21:41:DE:28:CD:C1:AE:FF:0B:F6:67:05:9C:1B
Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08
Certificate issuer: /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
Certificate serial: 039E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
Manifest number: 0372
Signing time: Wed 05 Nov 2025 01:05:41 +0000
Manifest this update: Wed 05 Nov 2025 01:05:40 +0000
Manifest next update: Wed 12 Nov 2025 01:05:40 +0000
Files and hashes: 1: bV1Q6IudZeiv2ijCzqYVAScDhgg.crl (hash: Zgn8waPZqy/lNK3JBBm4NrdeKUiD2zEbVMjaI+u9Jcw=)
2: 142EA3A84FEF11EF9A822A21C4F9AE02.roa (hash: PsC0/VUJuwAMkmEBhdJkaydKW8CflQBB5EZOYU0cJtQ=)
3: D1A4CFBA4FBE11EF97812B80C4F9AE02.roa (hash: /TyJbdztz4Y61/Gz2zhowON+Tt9+b5wqgCKpbZ339lw=)
4: 328C9E7CDC1A11EC89244C2FC4F9AE02.roa (hash: SwY/Crs5L/QLrOTdNtWGBh9zEFcoCIW07axxQKOSACI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl
rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 926 (0x39e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E91BC, serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
Validity
Not Before: Nov 5 01:05:40 2025 GMT
Not After : Nov 12 01:05:40 2025 GMT
Subject: CN=690aa2e5-83f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:da:c3:fb:41:26:41:9e:02:19:94:40:6b:9f:
80:7c:78:61:f1:ac:f0:ef:9c:57:0e:d5:13:22:f1:
13:8a:a9:ac:ff:1c:d3:94:49:cb:dc:30:3f:6a:3a:
54:4a:0a:8f:ab:a4:9b:8b:cb:78:ea:0d:b1:ae:4b:
92:7a:af:72:04:66:b2:4e:8a:ec:10:d7:bd:3f:08:
bc:f3:50:a0:66:3e:43:5c:0d:26:f8:93:8f:62:d5:
7a:c4:71:80:e2:00:bd:d3:02:fb:ae:58:22:9a:e9:
9c:25:f0:ae:e3:1f:3c:33:df:b2:41:b8:c6:20:09:
a1:2d:f5:46:10:ce:7f:44:b8:89:50:2b:83:b3:fa:
e9:7d:83:53:07:6c:01:d3:db:0f:3b:9b:28:4d:6b:
a5:c0:a5:75:71:29:11:c5:99:55:29:86:c2:1c:b2:
17:96:76:c8:5d:76:5d:62:87:0f:12:83:c5:43:ca:
92:bc:34:fc:1d:37:a5:73:de:5b:00:02:9a:34:16:
29:de:56:82:b6:a5:80:a2:2b:f4:b1:b7:c6:27:fb:
ca:a8:57:00:21:44:f4:a5:73:82:86:aa:a2:34:1b:
9b:14:21:b7:b3:2e:73:b1:a2:7e:fe:cb:c8:af:dc:
27:af:d1:22:79:81:60:ef:9c:f3:a0:e7:9e:6e:16:
95:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:45:9F:10:00:3D:21:41:DE:28:CD:C1:AE:FF:0B:F6:67:05:9C:1B
X509v3 Authority Key Identifier:
keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e7:41:03:2e:af:90:ba:c3:86:2d:a2:91:e7:0d:ab:77:45:7e:
dc:db:f2:d1:f3:92:a0:5f:ad:37:52:47:19:aa:1d:a9:ea:64:
00:b1:7b:c8:2b:b1:a9:90:d1:24:d4:05:f5:8a:df:09:a4:19:
b5:a7:36:fb:78:20:6c:45:7e:c4:77:5b:0d:e5:08:26:4a:81:
c8:99:7f:dc:e1:06:e6:f9:1e:0e:29:da:4c:78:58:bf:8c:be:
3b:7a:98:3b:53:15:20:53:67:01:45:30:50:01:d4:dc:e9:b2:
fa:99:92:9d:c4:9e:ca:0e:3d:45:5a:cf:d6:36:37:64:ab:94:
9b:82:58:25:d4:10:22:7a:13:c4:64:73:b9:c8:5f:89:76:db:
34:2f:a7:b5:88:c9:a7:c4:60:4e:50:29:b9:5d:10:f7:8b:2c:
37:9d:d7:32:19:67:37:79:1d:01:df:26:0f:d3:04:62:f4:20:
f4:16:e2:e1:1c:76:dd:f6:72:b7:9e:0a:a2:3e:3f:37:f0:50:
e7:ca:64:8c:09:48:9a:f4:1d:8a:2d:c1:75:bd:ff:65:d9:e1:
e4:84:27:ac:46:fd:e7:2d:85:47:24:38:06:f0:64:72:75:ef:
1d:15:87:73:e6:a4:ea:b1:fb:db:cc:1c:72:bc:14:c1:c2:0d:
a0:04:8e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:29:05 2025 by rpki-client