
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
File: MMRROGeLe9mvTFyk6xpdPiBhxcE.mft (raw, json)
Hash identifier: 0m3hYWuUUOJXjHx2yZVNByAl0ojFQTDaXg1mWI/UAYQ=
Subject key identifier: 46:7F:7F:F4:67:28:FD:B0:52:8C:F4:A8:8C:02:68:90:C1:23:18:56
Authority key identifier: 30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1
Certificate issuer: /CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1
Certificate serial: 0D61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
Manifest number: 0D44
Signing time: Tue 04 Nov 2025 18:07:56 +0000
Manifest this update: Tue 04 Nov 2025 18:07:56 +0000
Manifest next update: Tue 11 Nov 2025 18:07:56 +0000
Files and hashes: 1: MMRROGeLe9mvTFyk6xpdPiBhxcE.crl (hash: W4tiqn+fKgfC0mG3FCiBn0uRQFRMXHoE7SI9atmWs1g=)
2: 82A69048E5E611E9A31D0F15C4F9AE02.roa (hash: qEkECxoCgKBKTnw3bchzSUCu8r6TBFUP4UAPJP8qzMY=)
3: 813F208AE5E611E9A31D0F15C4F9AE02.roa (hash: +TPxOAHNAMtvnIcGRR6E+FNpj29vW6xe3VQISwdy/bw=)
4: 81D3C438E5E611E9A31D0F15C4F9AE02.roa (hash: 0SPtnF49m4JXYvDmELKfCYTUI/b5FZMwuniRPfNINfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl
rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 18:07:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F59A6, serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1
Validity
Not Before: Nov 4 18:07:56 2025 GMT
Not After : Nov 11 18:07:56 2025 GMT
Subject: CN=690a40fc-8b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:aa:80:0d:d5:2b:ca:f9:a4:73:90:05:c0:a6:
90:39:7c:5e:20:b1:7b:d9:68:23:b5:7e:f9:9b:28:
af:8b:94:79:ca:51:b4:8c:b7:18:62:6b:df:78:69:
99:fa:00:3c:05:fc:af:8f:1d:15:15:be:43:de:c1:
f2:28:d1:7b:47:e5:a3:91:8c:1d:70:ef:e6:fd:11:
d4:8c:80:6a:1c:1b:12:7a:64:fa:4e:ad:80:a0:31:
2a:c3:7b:8b:19:d6:4b:7e:37:bd:ff:c8:52:c5:ab:
ea:38:78:3f:99:dc:6a:15:9f:3e:97:81:41:2b:8d:
ef:9f:9f:9b:ed:45:97:6e:38:5a:9d:6d:ce:5b:b0:
63:df:45:c2:5a:02:5a:71:dd:25:6a:0f:19:9a:e1:
87:21:0b:b5:41:f6:11:35:e1:b6:59:ac:e2:f4:62:
bc:02:31:3d:35:c9:86:e0:b3:d9:54:27:ac:2e:a9:
00:b5:c2:f3:82:8b:40:a6:93:f4:a5:41:d1:ef:f2:
02:f7:26:81:4d:19:70:01:bf:e7:ad:49:b1:ef:62:
2e:a4:ea:01:67:7f:75:1c:f8:ec:69:f2:51:ba:3a:
53:db:0e:70:eb:92:c9:ca:2a:2a:76:91:44:92:7f:
b6:98:e5:b9:b7:62:5c:62:48:2b:20:f4:f0:01:08:
ed:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7F:7F:F4:67:28:FD:B0:52:8C:F4:A8:8C:02:68:90:C1:23:18:56
X509v3 Authority Key Identifier:
keyid:30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:d6:03:2b:af:2e:8a:6b:e8:24:39:e0:51:fe:67:c7:cc:63:
8a:af:43:e1:1a:19:42:16:9b:34:48:f2:94:7c:4e:af:04:8c:
b5:22:d7:67:25:55:45:1b:49:2a:20:e4:09:46:28:ee:f2:98:
c2:a6:5a:90:26:6a:d0:d7:37:00:53:7b:52:d0:6c:51:01:d1:
08:af:d2:8b:f4:53:f8:80:06:8c:1a:87:35:f5:50:04:a1:7c:
f3:32:fa:cd:2d:60:d3:08:58:ea:71:b6:92:6b:31:a2:88:5d:
ed:ff:53:8a:70:f5:64:e4:14:cc:9a:76:d3:85:d2:cd:fd:28:
55:65:dd:91:a6:3b:33:96:2d:db:53:dc:1e:26:7f:9d:a7:eb:
fb:60:41:29:fd:1a:30:d1:bc:e2:4d:d0:9a:86:76:bd:11:f4:
3e:a9:14:b0:12:3b:e0:5c:4c:3a:22:77:99:93:de:67:e9:01:
16:f0:52:8f:60:12:ad:6a:32:43:de:31:b4:23:a6:a5:5e:97:
6e:bd:00:52:75:59:30:2c:b9:81:37:a6:8a:39:73:e1:6a:4a:
37:cb:0c:7b:2b:be:b0:bd:16:85:7d:cb:be:64:1f:29:13:3e:
d2:36:04:7d:8a:82:d9:4a:f8:20:41:2f:32:43:31:9c:ce:72:
be:cd:20:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:52:34 2025 by rpki-client