
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
File: hrKx0eeCRIuE9pgY8WofcHtUyGw.mft (raw, json)
Hash identifier: mIxR2o3ERzqAgX0JoVfVTLLpcTG4YdiMqb/i2K4HuxM=
Subject key identifier: 75:3B:9B:11:5B:F6:95:98:C8:55:78:F2:3C:64:F6:4F:90:4A:58:8E
Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
Certificate issuer: /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Certificate serial: 072A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
Manifest number: 0716
Signing time: Tue 04 Nov 2025 21:59:48 +0000
Manifest this update: Tue 04 Nov 2025 21:59:48 +0000
Manifest next update: Tue 11 Nov 2025 21:59:48 +0000
Files and hashes: 1: hrKx0eeCRIuE9pgY8WofcHtUyGw.crl (hash: XQdmpA9aQNsAq1vIxJbuVszvzH3U5o6rYablDFf8Uz4=)
2: E658D57AAB4111F09E35ED65C4F9AE02.roa (hash: Hd39KMCP5bAeu+noj7ulmTIBQfRBGl83787l/+OHLDU=)
3: 8A5AA9BAAB4111F09E531265C4F9AE02.roa (hash: 5nVofohvG6M+3k2sujdcV8yvkToMkKYigEUYnGzho5Y=)
4: 7A27A6E45FDB11EBA5C9EA7CC4F9AE02.roa (hash: W63Eb+30MCK+wn3+q84oKaizsJ4BNesWyN0s9mJY3b8=)
5: 06E6952AAB4211F08DC86D66C4F9AE02.roa (hash: KCCPcPWsDKv1DRkqBbiUhd//6nA7nvgYDQUksRP6Wns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:59:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1834 (0x72a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC979, serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Validity
Not Before: Nov 4 21:59:48 2025 GMT
Not After : Nov 11 21:59:48 2025 GMT
Subject: CN=690a7754-1556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f3:d3:43:3f:11:52:53:a8:42:c4:5a:fa:73:
25:57:04:b5:92:86:f4:a5:09:d7:d6:23:5b:78:4c:
17:7a:9f:c2:5f:02:e3:a8:7b:19:11:77:12:c6:16:
2d:35:b8:97:cb:bf:0a:74:6c:86:89:5a:04:d1:35:
93:e1:6c:5d:35:1b:bf:de:43:6a:73:af:69:86:e4:
6b:67:ba:70:15:cb:6a:a6:a0:f0:9d:ab:2c:2d:6d:
2f:4f:a0:68:cd:c7:c0:1d:07:89:f0:c2:91:d2:6e:
f5:fa:c0:c0:33:00:f4:2a:24:2c:fe:96:ad:c4:e9:
7b:eb:ea:4a:8a:11:b5:17:04:9a:69:63:da:ce:b6:
e5:19:15:02:56:a1:42:48:be:d4:34:76:a3:f1:a2:
1c:99:62:fc:08:11:82:be:92:cd:c6:e7:c8:88:36:
38:79:f7:ed:d0:8b:5f:80:e3:2c:1c:0d:db:c7:22:
c6:a8:ec:0d:ac:89:82:88:4f:81:11:61:33:15:28:
3d:57:6a:ce:6f:02:74:44:d3:87:9a:ce:a5:dd:cc:
a5:71:d6:a0:3d:45:9a:75:ab:74:46:53:c3:4e:f3:
84:7d:5b:f7:5c:68:3b:96:cb:61:3e:6a:f0:fb:29:
5a:fd:65:c6:86:27:bb:d5:99:99:88:a6:03:60:48:
f0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3B:9B:11:5B:F6:95:98:C8:55:78:F2:3C:64:F6:4F:90:4A:58:8E
X509v3 Authority Key Identifier:
keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:70:9b:43:5b:f2:81:5d:0d:b7:9e:ff:f8:20:ee:16:3e:37:
6c:0a:34:b3:e3:6f:e5:c7:14:99:79:45:b7:6a:d2:03:95:b9:
44:92:4f:59:61:8b:25:ee:2f:19:1a:19:6c:5d:c8:10:c6:8d:
5a:e9:00:b4:a1:60:9d:42:9c:ae:78:d4:22:c4:f0:7e:7e:35:
c0:5c:8d:02:61:96:5e:1a:28:da:cb:c2:c9:31:39:c5:fc:36:
98:19:7f:82:d0:c0:f1:59:d1:4b:4e:fe:6a:df:6c:90:9b:1f:
d4:20:86:ca:e9:cb:41:b3:ab:7d:3a:1e:09:f7:f2:9a:e1:fc:
ef:81:30:e9:26:d0:e3:b4:2a:46:ae:9e:16:5c:10:65:35:1d:
c9:9b:0a:c1:be:15:56:f9:e0:26:89:2a:bd:72:84:27:73:8d:
82:24:a7:c2:f4:a8:2c:07:22:5d:36:a3:90:f0:9e:b5:be:5c:
75:92:a0:78:b5:94:da:59:bc:96:86:6d:10:0f:78:c8:7e:fa:
99:b4:38:a1:cb:ca:bf:a9:26:81:27:67:39:a8:27:4b:cc:7e:
2c:11:ea:fd:e8:5c:ba:24:df:06:71:af:93:ac:b4:8f:c8:12:
83:dd:af:31:3b:65:bd:36:d8:49:f3:0c:59:b5:b8:93:e8:f5:
08:b7:54:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:28:46 2025 by rpki-client