
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
File: b3tF49x2JsN_igHgq46krwVfSYo.mft (raw, json)
Hash identifier: oahMZ3TMmH/LGnWnWPbn3r53QxN/F+/xHG/zBlg/gEs=
Subject key identifier: 10:50:B2:27:12:E5:40:10:10:A8:26:07:E2:9A:F5:C8:1D:86:C4:26
Authority key identifier: 6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A
Certificate issuer: /CN=A91F0AF0/serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A
Certificate serial: 1172
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
Manifest number: 1E22
Signing time: Tue 04 Nov 2025 17:19:13 +0000
Manifest this update: Tue 04 Nov 2025 17:19:12 +0000
Manifest next update: Tue 11 Nov 2025 17:19:12 +0000
Files and hashes: 1: b3tF49x2JsN_igHgq46krwVfSYo.crl (hash: EqbTZis31HTfOZ/nE0GYMAIejLeUb6fIANwSXIFPgiw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl
rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 17:19:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4466 (0x1172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0AF0, serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A
Validity
Not Before: Nov 4 17:19:12 2025 GMT
Not After : Nov 11 17:19:12 2025 GMT
Subject: CN=690a3591-b2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ed:53:bb:9c:39:af:12:5a:6d:f8:8d:18:dd:
56:f5:9c:7a:63:d5:54:c4:42:a2:82:78:77:38:fa:
40:33:5b:ff:16:7c:42:d1:2a:24:b6:2a:0e:f8:33:
8d:1c:b9:e9:eb:bf:81:2e:74:92:0d:f1:fd:fe:3e:
0f:bf:e8:4b:16:0d:b2:47:30:1e:d9:58:af:1c:34:
d2:43:2f:0b:c4:85:67:eb:31:ae:83:5b:f0:d3:4d:
56:b8:a1:2e:51:61:d4:cc:01:1c:bd:d4:cc:23:5c:
03:e5:51:76:b1:82:dd:03:cb:2a:87:3f:66:f3:20:
11:6c:35:e0:94:65:b2:b5:ab:20:c9:46:4f:ec:2d:
e8:7c:b0:64:fc:77:71:23:f6:38:f4:51:25:7e:3c:
65:8f:db:4f:eb:0d:07:d4:07:7e:79:7c:b6:10:bb:
48:b2:28:1d:00:a5:43:3e:c7:af:56:95:40:3a:f3:
2d:f8:06:6d:92:43:9b:71:f7:fb:49:f7:41:90:74:
fd:77:bf:ae:f2:21:ab:0f:4e:38:22:8e:ce:44:51:
cd:15:1c:6b:3e:38:e2:b8:75:68:8c:00:41:bf:68:
30:22:f1:fb:fd:d3:a1:77:dc:fe:6d:88:6a:cb:e0:
c2:25:66:23:27:1c:81:26:ca:85:ef:8b:04:56:ca:
3b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:50:B2:27:12:E5:40:10:10:A8:26:07:E2:9A:F5:C8:1D:86:C4:26
X509v3 Authority Key Identifier:
keyid:6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:61:77:a1:9f:80:3b:32:6d:b6:dc:17:41:06:ad:3e:5f:55:
29:d9:40:73:ab:4e:36:9d:ff:6e:f3:b9:89:5b:ff:78:3b:12:
27:c0:76:e6:f8:35:2c:2c:6f:f3:85:38:d9:46:c9:8c:de:66:
50:99:b0:a1:f1:40:13:e4:d0:44:57:b7:c4:2c:05:38:d4:3c:
fd:6f:06:27:87:90:59:1a:75:43:6c:4f:92:14:a3:fa:22:2b:
62:88:b0:27:5d:e2:c9:79:85:80:1f:c5:cd:0e:62:e7:1e:37:
ba:56:3a:86:af:1d:bf:26:82:34:c1:f4:0d:0b:81:9b:8a:65:
9b:8e:c9:72:c4:37:a8:51:5a:d8:b7:d4:69:0c:cc:e8:fb:28:
82:bb:62:f0:9f:53:ae:c0:e5:4b:56:41:ca:9a:42:95:68:03:
9a:8a:6d:64:49:a3:8e:16:87:4f:40:89:27:aa:0e:21:01:42:
70:de:f0:e1:c6:73:44:84:8e:16:03:b3:01:8a:23:5d:b5:f7:
11:9e:a5:3e:70:6d:76:b8:e4:39:17:0f:75:f9:50:38:fd:2f:
a8:a3:73:2a:80:13:58:f7:2f:9a:86:78:e8:32:6c:bf:79:41:
f2:f2:63:ed:63:ba:3a:a3:52:d2:3d:9f:55:2a:a1:8d:d4:96:
c8:19:26:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:47:05 2025 by rpki-client