
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft
File: bMOGDamHeDpQBVpRk5gw980cgms.mft (raw, json)
Hash identifier: ktF6OC+Ag8CJvy9zKZXjXgW91eu0GpamslUlbU1gLas=
Subject key identifier: 3A:03:BA:3F:63:6F:C2:B8:AF:0F:65:D5:C7:27:25:1C:FA:16:9F:59
Authority key identifier: 6C:C3:86:0D:A9:87:78:3A:50:05:5A:51:93:98:30:F7:CD:1C:82:6B
Certificate issuer: /CN=A91EA623/serialNumber=6CC3860DA987783A50055A51939830F7CD1C826B
Certificate serial: 057A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft
Manifest number: 0570
Signing time: Tue 04 Nov 2025 03:13:38 +0000
Manifest this update: Tue 04 Nov 2025 03:13:38 +0000
Manifest next update: Tue 11 Nov 2025 03:13:38 +0000
Files and hashes: 1: bMOGDamHeDpQBVpRk5gw980cgms.crl (hash: CiNRXU74YseFkz0acQCW1iglEwqVOQv6Ne3iaecdhKY=)
2: 4D336D62B53F11F09557A379C4F9AE02.roa (hash: vE9V/Y5qS78Xgv5y/9F43RWt3eLux4Isa2PTEon+j2k=)
3: A6C3D8721A9711EC88A50A2CC4F9AE02.roa (hash: 1vf9P/QtdrpBSKw8qqd8SeCC6jjDqgo10TfCx7FVFT8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.crl
rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 03:13:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1402 (0x57a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA623, serialNumber=6CC3860DA987783A50055A51939830F7CD1C826B
Validity
Not Before: Nov 4 03:13:38 2025 GMT
Not After : Nov 11 03:13:38 2025 GMT
Subject: CN=69096f62-4de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:37:06:bc:76:27:60:ef:a2:ee:8a:81:96:
ba:d8:73:9d:bf:a7:fd:2f:e7:ca:29:c6:06:77:ad:
b6:fc:fd:1c:9d:e7:3c:da:2d:c0:f8:dc:b4:cc:09:
ed:b9:cd:6d:c1:a4:22:38:01:cb:c5:2f:30:d6:51:
f0:5b:53:68:cc:48:9b:4d:20:f5:ce:1a:e1:2b:6f:
dd:64:00:4b:72:0b:22:b2:c7:16:eb:76:f1:02:60:
87:1e:e4:4a:78:15:62:da:9b:73:01:96:96:00:9e:
99:31:42:a5:02:bf:13:a7:91:4c:d0:36:ec:03:47:
17:1b:13:49:0c:98:64:05:e8:5f:7c:b4:5f:27:bc:
18:26:b1:b3:9a:41:05:ec:d3:e9:c9:86:1e:b0:88:
3c:d1:05:c0:8c:ac:75:81:6d:7a:e6:66:d6:ab:c5:
74:01:c8:82:03:24:18:ab:f4:ac:7e:e6:0a:0c:0e:
ff:44:4f:4b:60:f6:95:0b:59:56:3b:6e:2f:be:9d:
53:e8:dd:0d:ee:85:27:cd:04:c7:af:e6:4e:45:47:
34:1f:06:ea:d9:79:b7:84:b6:a6:b4:fe:a5:a0:26:
3e:cb:ad:0b:eb:82:e6:bb:1d:9e:bb:d3:57:79:a5:
6d:b5:c0:4c:f4:16:f3:fd:4e:96:68:de:d0:72:10:
6d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:03:BA:3F:63:6F:C2:B8:AF:0F:65:D5:C7:27:25:1C:FA:16:9F:59
X509v3 Authority Key Identifier:
keyid:6C:C3:86:0D:A9:87:78:3A:50:05:5A:51:93:98:30:F7:CD:1C:82:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:23:2a:45:f1:b5:59:5a:04:d7:38:10:12:c1:c4:6d:0b:37:
18:6d:31:39:93:69:5d:73:cc:a8:47:ac:73:88:d8:ec:59:28:
64:1a:25:45:48:2b:f5:43:1d:39:31:26:f0:22:0c:4a:8e:a1:
24:bf:2f:c8:15:6c:4a:6c:89:c9:50:5a:dc:d4:17:cc:71:0f:
92:18:29:41:db:58:70:98:f9:b6:f8:42:93:88:0a:b5:8a:9d:
81:03:ca:9f:f9:12:62:ca:21:06:6f:ec:ce:32:5b:1e:46:1a:
65:0c:4f:bb:3f:e5:f9:91:7a:89:3f:18:97:35:78:15:80:c5:
08:97:ca:c0:6c:5e:94:25:07:2d:10:91:6a:d1:45:49:19:5f:
f0:34:39:dd:b6:19:ee:18:66:d7:0e:9b:89:c0:c2:51:28:a1:
9d:86:92:4e:57:f4:ad:21:b1:86:ee:dd:e8:56:bd:60:c0:d5:
de:f2:cc:a8:e1:34:5c:da:01:c3:86:1d:7b:2f:0f:72:43:e2:
af:79:11:be:45:19:56:47:a4:ce:b3:a4:1d:ea:e8:29:2f:49:
62:7b:f4:3e:7b:96:43:5d:83:27:c0:82:bf:9f:6f:97:d2:0e:
90:7e:3d:ef:86:79:73:4a:60:0e:ad:ac:63:85:f0:d7:e9:a9:
71:9d:61:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:18:16 2025 by rpki-client