
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
File: T8Rg8J-QqobK9GfCha149DEnILA.mft (raw, json)
Hash identifier: O4yn70M8Cf+mZXgd7+4hvhzRqEDOpTU4PoLrsjBt3J8=
Subject key identifier: C9:BA:F2:5F:2D:DE:31:50:38:38:4B:ED:96:72:9C:A9:95:8A:62:D7
Authority key identifier: 4F:C4:60:F0:9F:90:AA:86:CA:F4:67:C2:85:AD:78:F4:31:27:20:B0
Certificate issuer: /CN=A91EDD99/serialNumber=4FC460F09F90AA86CAF467C285AD78F4312720B0
Certificate serial: 011A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
Manifest number: 0115
Signing time: Wed 05 Nov 2025 05:03:19 +0000
Manifest this update: Wed 05 Nov 2025 05:03:19 +0000
Manifest next update: Wed 12 Nov 2025 05:03:19 +0000
Files and hashes: 1: T8Rg8J-QqobK9GfCha149DEnILA.crl (hash: +qQP2ugMNBuxSXwRkHTeFZ6+qVuszES7C048zRsyHh4=)
2: F394D822271911EF86EB1C09C4F9AE02.roa (hash: Qh8PjLgGSm0UikgzIoT2yOicsZXmat+tWnCt5geWY08=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.crl
rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDD99, serialNumber=4FC460F09F90AA86CAF467C285AD78F4312720B0
Validity
Not Before: Nov 5 05:03:19 2025 GMT
Not After : Nov 12 05:03:19 2025 GMT
Subject: CN=690ada97-e3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:08:d4:ed:cf:96:cf:3c:6e:04:ee:09:a7:a1:
b4:15:85:4f:71:83:16:17:c3:c0:00:ef:27:31:a9:
77:57:2b:43:a8:26:6c:33:db:ed:96:76:be:d6:bd:
ce:64:83:be:19:86:09:c8:50:09:65:ee:b9:20:92:
07:2c:3d:88:5f:34:b1:4a:48:5f:f4:10:c8:ba:5b:
57:fb:07:20:17:3d:01:e3:1a:00:60:01:6b:61:be:
80:38:e8:65:a7:e5:d0:be:ea:4e:c0:07:62:8b:62:
85:62:b2:e9:aa:da:21:ab:72:c3:db:47:a9:69:0e:
3b:76:98:1a:f1:a5:b5:35:80:7a:72:8e:b9:9f:ae:
27:d5:67:4c:b7:70:6e:a4:38:ae:c6:9a:6e:fa:bf:
ac:12:8c:68:81:9b:7a:22:bc:36:db:b6:14:a1:ae:
df:ce:c8:68:3e:05:b3:f1:05:a2:5b:1c:0a:61:bc:
c1:58:96:7a:d8:b6:b7:1d:ad:6b:d2:f4:69:da:fa:
ee:17:7a:03:44:21:25:ec:d8:a1:c7:0c:79:1b:4a:
6b:45:d1:9f:8e:d3:e6:a5:d0:4f:0e:6f:ec:68:e2:
78:2d:4b:0e:7e:4f:8a:db:f5:dc:7f:75:ca:46:47:
2c:79:5e:9f:fa:3b:cb:af:f2:8b:1b:9d:4e:6e:cf:
3f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BA:F2:5F:2D:DE:31:50:38:38:4B:ED:96:72:9C:A9:95:8A:62:D7
X509v3 Authority Key Identifier:
keyid:4F:C4:60:F0:9F:90:AA:86:CA:F4:67:C2:85:AD:78:F4:31:27:20:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:36:35:97:28:17:d4:b7:cb:cd:58:ef:ff:51:8b:18:28:94:
9a:36:85:67:4b:eb:74:63:73:48:24:f7:6b:12:89:a0:d0:e9:
02:68:fa:f6:79:6a:f2:48:94:f3:9f:5e:01:84:99:50:a2:cc:
ea:b2:1b:77:d3:55:15:e4:eb:66:d7:30:aa:33:9b:76:cb:ad:
e4:b1:e9:ef:d7:4c:36:e8:e8:37:9f:a4:09:11:0d:ec:aa:98:
8d:c0:05:54:a0:75:08:66:8e:a0:4f:fe:de:0c:4a:06:ea:dd:
56:de:9d:6f:35:e1:60:5d:dd:ca:07:40:93:2d:fa:0c:b8:ab:
bf:a9:67:f4:0e:87:03:6d:45:36:e2:7c:fe:e1:88:4e:3b:28:
0c:92:1f:f0:83:38:27:ee:19:b0:27:3b:62:fd:d7:d5:c1:7e:
e9:c8:6e:93:04:6c:7d:5e:c5:d6:2d:d6:9e:5f:40:fa:72:9f:
93:d2:85:6f:97:97:01:77:4a:40:6d:83:e7:4a:df:7a:f9:e6:
be:32:8c:81:f5:7a:2d:69:b5:9d:34:bf:9b:19:85:08:69:06:
45:bf:1c:7e:54:af:ce:53:33:8a:38:3f:3e:d7:56:54:a1:7e:
1a:3e:fa:f7:98:5f:52:f0:93:8a:3e:5a:c0:da:92:a2:5c:57:
26:0f:8e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:59:40 2025 by rpki-client