
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft
File: uXgEM1AwWT1tlle8RdvRFLEpHSg.mft (raw, json)
Hash identifier: k9u/tIrFIblIHQtp/uG1SmgVVtXGQM1KW3EAamOKIwI=
Subject key identifier: 82:8F:1D:C0:20:E9:74:2D:EA:1D:6E:E4:7B:BD:BA:24:2A:30:FA:1C
Authority key identifier: B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28
Certificate issuer: /CN=A91E9310/serialNumber=B97804335030593D6D9657BC45DBD114B1291D28
Certificate serial: 04AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft
Manifest number: 04A5
Signing time: Wed 05 Nov 2025 00:03:42 +0000
Manifest this update: Wed 05 Nov 2025 00:03:42 +0000
Manifest next update: Wed 12 Nov 2025 00:03:42 +0000
Files and hashes: 1: uXgEM1AwWT1tlle8RdvRFLEpHSg.crl (hash: GnLbA8Sdx4nI7aHubX4WzEZAu8i1yTipPrrxnGicelk=)
2: 785EB284773D11F0AB969921C4F9AE02.roa (hash: 8Zp/aagGSHH88DTb+DNr1X++0HtBH9A2tNVSmLSIRBM=)
3: E985185E773D11F0B023A932C4F9AE02.roa (hash: mISRfVX+s35IuBCQPh+4h139jbl1K2kLytqStI4mDZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl
rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1197 (0x4ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9310, serialNumber=B97804335030593D6D9657BC45DBD114B1291D28
Validity
Not Before: Nov 5 00:03:42 2025 GMT
Not After : Nov 12 00:03:42 2025 GMT
Subject: CN=690a945e-cbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:52:14:f1:c1:fd:8c:f5:b3:e9:9c:82:f7:
80:bd:81:60:12:26:4e:46:93:33:6f:ac:e6:6c:b4:
dd:7a:36:51:be:80:81:bd:6a:5a:6e:06:d4:5f:69:
9b:d3:af:43:7a:31:9f:3d:ef:53:ed:cf:ab:ab:6a:
fd:d8:4f:94:50:7d:95:93:5d:1b:61:43:ba:1a:78:
23:19:29:7c:a1:42:fe:6c:ee:25:28:7b:c3:ce:e2:
ce:50:03:40:d3:fa:93:47:e9:1d:89:64:f6:35:86:
2d:06:4f:69:c4:65:b2:b7:e7:3c:b7:8e:f9:a6:15:
d1:9b:40:1e:f3:b0:b7:15:2a:d3:f2:7f:34:ca:eb:
7c:79:9f:8c:0e:97:cb:d5:90:78:ae:a6:08:26:69:
32:9f:2c:7f:bc:3b:3c:f8:8a:af:2a:66:10:78:f0:
aa:0e:f8:97:19:a9:2a:09:9d:a6:66:ed:cf:c0:c0:
6e:a6:ff:03:7a:88:58:92:f0:83:cc:31:db:7f:26:
0e:42:7d:97:7f:fb:16:05:3f:ac:f7:94:72:19:d9:
7a:59:5a:d6:00:cf:c1:c8:60:af:90:3c:70:d5:08:
cf:72:dc:6d:94:99:f2:44:a6:c9:b9:18:00:54:c3:
7d:d1:1b:a4:09:46:2b:66:e2:d0:d0:5b:24:60:ea:
16:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8F:1D:C0:20:E9:74:2D:EA:1D:6E:E4:7B:BD:BA:24:2A:30:FA:1C
X509v3 Authority Key Identifier:
keyid:B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:72:eb:e6:b3:08:6d:7b:63:5c:45:fd:f0:75:48:ce:e0:42:
ad:35:18:f2:b2:c8:e3:f0:ed:b4:43:60:ab:1d:31:e4:66:94:
62:94:22:95:c2:61:4f:35:15:f0:03:ab:33:df:93:7c:c8:2d:
94:de:e3:1f:90:a9:a9:d0:85:c6:a5:41:ce:13:41:8d:51:24:
e3:00:d8:27:ae:b6:43:74:7d:03:38:46:77:c2:85:ea:1b:d6:
ce:df:6b:12:14:85:45:76:80:f5:b7:d6:02:68:32:73:b3:97:
df:d5:3f:98:4a:6c:6f:72:b2:9c:b6:5c:ca:78:3d:e4:6a:e1:
ec:69:85:04:36:22:db:e6:1d:61:c8:8c:94:d1:e4:bf:9d:98:
b7:a6:36:fb:70:e8:b6:4b:bb:1a:1b:04:16:ef:a5:af:7b:77:
af:4d:55:3f:9c:68:67:42:cd:04:cf:32:6e:ff:3b:71:b0:20:
df:8e:8b:55:f8:c8:8f:b0:f5:43:d6:e7:ad:99:74:4b:92:8f:
32:7f:1b:31:c4:e8:89:d0:1e:49:bb:f9:7c:9b:b5:87:e3:f0:
04:e2:a0:91:c1:bf:6d:24:97:71:f9:4e:ad:df:fe:dc:ea:cb:
f5:02:2d:a2:78:37:a8:04:eb:d9:a9:2e:87:c2:16:ab:50:ef:
a7:88:fd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:50:37 2025 by rpki-client