
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
File: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft (raw, json)
Hash identifier: 0a41PeNePvrLlsZa2NectJuQizmBOt8G27Miax6ePM0=
Subject key identifier: 2F:F6:33:32:82:66:D4:F0:B3:42:21:5C:83:03:BD:E9:16:71:F0:46
Authority key identifier: 52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45
Certificate issuer: /CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845
Certificate serial: 0505
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
Manifest number: 04D8
Signing time: Wed 05 Nov 2025 00:02:25 +0000
Manifest this update: Wed 05 Nov 2025 00:02:24 +0000
Manifest next update: Wed 12 Nov 2025 00:02:24 +0000
Files and hashes: 1: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl (hash: gqmMY4n/RmMeHbbZo/GsuY6RkXuZbZUhAgoYxat/M00=)
2: F63AA888900F11ED8B4CB41DC4F9AE02.roa (hash: 4GFmq+y/6BnQNNwGjl1gbuy3YynLJ9fv1uZb3cM+3cw=)
3: 9D9B2E7A6D3211F0A68A8A58C4F9AE02.roa (hash: jhSTY2DYnMEsMBx0x/zPRVJM0gPx3FVGm0Ptw4y3rcw=)
4: 213E93FE8E0B11F088E57287C4F9AE02.roa (hash: XvQlmCL/lUe7ZYDky8HxuV3wqFx2+yxYoZ/we9Jj4bk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl
rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1285 (0x505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9467, serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845
Validity
Not Before: Nov 5 00:02:24 2025 GMT
Not After : Nov 12 00:02:24 2025 GMT
Subject: CN=690a9410-5987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:98:d6:c6:33:bc:8c:b7:c8:44:6c:46:9a:2a:
f7:4f:30:93:14:54:9f:b7:f9:27:cd:14:d3:1c:6e:
5c:83:b4:17:f5:0e:64:59:0a:ea:d3:c7:99:b1:fa:
ad:4d:66:40:b7:09:bb:94:4b:77:2c:0d:0c:65:cd:
ba:62:6a:bf:e5:54:8b:96:cb:d0:78:44:ed:bf:b5:
f7:20:d2:1d:41:a6:85:84:33:c8:ba:ca:94:18:a9:
16:2f:46:c3:27:7b:19:b2:0e:67:e1:8a:bd:43:0d:
ac:46:85:31:67:6c:04:9d:78:8f:80:ab:5c:77:59:
ae:b4:7a:35:94:ec:0f:35:8a:c4:d0:07:85:aa:ef:
3f:0b:27:4e:68:e9:82:b3:9a:2f:54:92:3f:5a:ad:
17:b3:c7:4f:e4:38:85:ce:26:d9:71:c5:23:67:10:
b0:19:fa:21:e3:4c:96:e6:3e:85:c4:00:94:c4:47:
a6:6f:fb:5c:df:00:3c:27:43:5d:91:8c:34:2c:1e:
1a:fa:fc:b1:e4:65:67:7a:77:a5:02:11:09:2e:af:
cb:ef:61:70:98:aa:e8:54:54:13:36:fd:b7:97:2a:
ea:17:e8:08:55:37:72:b2:f8:33:e8:6f:ca:3f:b2:
d9:ea:8b:46:3b:af:ac:9e:33:27:0d:06:c6:0c:a6:
4a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F6:33:32:82:66:D4:F0:B3:42:21:5C:83:03:BD:E9:16:71:F0:46
X509v3 Authority Key Identifier:
keyid:52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:31:a4:60:54:a2:f6:c1:96:9b:69:cb:d4:e2:85:eb:ed:ee:
e7:49:d7:71:65:aa:e9:51:c8:c5:1f:60:ff:9e:b2:1a:69:f3:
41:59:50:b2:0b:00:3a:d4:8e:a0:a6:6a:f6:73:0e:46:b6:af:
ea:ef:b3:13:39:73:68:fa:0d:fe:6c:6b:35:b7:ca:4c:e7:be:
d1:e1:af:39:ad:0e:0f:55:23:aa:a5:ad:1d:c1:49:0f:2b:2c:
15:72:97:3f:d3:db:1a:ca:dc:ce:29:1a:e6:6c:cc:c7:f0:7e:
69:0d:1b:65:37:cd:49:98:e5:b1:77:87:a8:a1:71:f6:d0:8e:
7a:45:93:d0:0a:81:ea:f5:9d:00:b9:93:0f:c6:d2:3c:54:a0:
b6:96:69:f2:3b:2d:1c:fe:5f:e8:da:54:f9:99:67:76:0f:e1:
7a:5f:79:57:24:74:1d:66:58:d3:d3:92:42:30:5c:7e:b0:ce:
12:01:35:01:55:6d:57:70:58:73:32:0d:92:af:cb:c8:23:4d:
d3:2b:ef:8e:3d:24:3b:bf:78:31:83:10:d9:ce:1e:fa:4d:f2:
4a:7b:46:e1:48:d7:d9:ef:62:73:ba:27:4c:98:85:0e:4a:2f:
a9:c4:09:7d:bd:d5:37:0f:54:b1:3a:21:da:ef:69:3d:e8:64:
70:c5:5b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:49:37 2025 by rpki-client