
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.mft
File: GVeTbMpsS9l-IilhpIkhsz_6IHc.mft (raw, json)
Hash identifier: q0VWrSoANAnwoAt0z8Hj/cHN7F8+wfDTav7RBLHAXnQ=
Subject key identifier: 41:26:A8:35:FA:A4:23:3E:1C:99:42:30:31:65:42:E6:3A:AF:33:BD
Authority key identifier: 19:57:93:6C:CA:6C:4B:D9:7E:22:29:61:A4:89:21:B3:3F:FA:20:77
Certificate issuer: /CN=A91F6C10/serialNumber=1957936CCA6C4BD97E222961A48921B33FFA2077
Certificate serial: 54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVeTbMpsS9l-IilhpIkhsz_6IHc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.mft
Manifest number: 53
Signing time: Wed 05 Nov 2025 07:25:56 +0000
Manifest this update: Wed 05 Nov 2025 07:25:55 +0000
Manifest next update: Wed 12 Nov 2025 07:25:55 +0000
Files and hashes: 1: GVeTbMpsS9l-IilhpIkhsz_6IHc.crl (hash: tKvAPCpjzRwTP2HJ8cpf2XSDNVkTmzCtsrxb7qtz/0E=)
2: 7DDEB3163B9D11F08338F965C4F9AE02.roa (hash: Nx9zhfXamOV1v87PEDCD/XYv0n33Isg7pa/1D1NmyVw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.crl
rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVeTbMpsS9l-IilhpIkhsz_6IHc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 07:25:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6C10, serialNumber=1957936CCA6C4BD97E222961A48921B33FFA2077
Validity
Not Before: Nov 5 07:25:55 2025 GMT
Not After : Nov 12 07:25:55 2025 GMT
Subject: CN=690afc04-2f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6d:ec:a7:15:d5:2c:f0:4e:d0:f0:e0:cb:01:
db:6b:92:e2:11:fb:76:88:13:e1:0b:21:2c:dd:f3:
b8:38:58:bc:02:33:51:35:37:2d:48:65:92:6e:24:
f8:0d:46:45:5e:51:88:c0:fd:c1:2c:70:06:10:32:
72:97:d8:c0:c4:38:6b:ff:13:29:66:e3:f5:97:28:
72:f1:33:c0:a4:45:83:7d:82:aa:36:3c:26:e7:5e:
e0:05:66:04:65:30:fc:13:71:47:9c:19:b9:4c:dc:
08:4b:ca:3c:43:d4:b2:e0:09:82:c9:14:c3:a4:85:
bc:26:85:06:c9:07:21:84:72:3f:f0:1f:08:ef:61:
1f:89:1b:6e:f6:b8:c8:0b:6f:fe:93:ae:45:75:23:
1e:5b:31:97:7d:4c:16:79:50:4b:4c:cc:e6:af:b9:
4b:ad:a9:5e:9c:28:ec:12:66:11:5a:11:07:cc:2d:
c2:ea:0f:e2:c9:85:25:2d:cd:11:c1:89:c5:5f:9e:
9d:b5:f3:9a:a3:fe:14:a2:3e:d0:43:a0:1e:b3:ba:
50:9d:af:a0:ee:a6:8d:5f:81:1e:f9:4e:49:11:91:
df:6b:04:aa:5d:62:9e:9d:e5:e8:c3:d8:5a:b2:a0:
34:0f:f2:29:90:d7:63:2e:5f:e8:9f:37:67:00:eb:
5f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:26:A8:35:FA:A4:23:3E:1C:99:42:30:31:65:42:E6:3A:AF:33:BD
X509v3 Authority Key Identifier:
keyid:19:57:93:6C:CA:6C:4B:D9:7E:22:29:61:A4:89:21:B3:3F:FA:20:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVeTbMpsS9l-IilhpIkhsz_6IHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c3:b4:bf:f8:a0:dd:14:db:1c:ba:2c:31:d5:33:83:92:7d:
34:b9:2c:10:d1:41:1b:4a:a6:4b:5d:a5:de:09:93:14:b1:15:
2e:98:dc:6f:74:d0:95:15:c0:10:80:c3:16:07:92:1c:f2:55:
a0:d3:c6:02:a4:77:bc:73:14:25:12:d9:82:5d:47:6b:42:da:
11:b1:96:4f:2b:a6:13:b0:8b:cc:d1:37:26:da:71:62:87:ab:
1e:d8:cc:49:44:05:9f:c2:c2:0f:15:f4:80:38:db:4a:2d:10:
7b:a2:67:96:56:9c:20:f6:8e:30:31:3e:08:4b:aa:85:0f:56:
44:93:06:8c:7d:c0:92:1b:89:f7:19:84:f9:52:77:ad:db:8a:
ab:06:8b:5b:64:87:8e:57:51:b4:1d:18:4b:10:17:c5:fb:8f:
c3:6d:c0:74:cb:b4:d5:ff:97:6c:97:dd:f0:a6:e2:45:c3:48:
6d:de:06:aa:0f:81:60:e2:f5:d2:e3:f7:ea:57:ae:34:65:07:
61:05:a5:3f:34:ca:99:83:e7:ad:93:3d:92:13:34:45:7b:84:
43:7c:7d:fd:33:7a:96:39:b9:f1:cf:af:94:f4:ce:b1:68:dd:
32:88:81:79:56:96:55:5b:0a:f1:94:26:fb:4a:03:d0:91:93:
b0:82:84:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:38:15 2025 by rpki-client