
$ rpki-client -vvf rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
File: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft (raw, json)
Hash identifier: +1UwBiY3Xq7pbl8B7Fqr+F2Tk5AE/tmPW4z3Ku6YiOY=
Subject key identifier: 22:6C:83:15:06:7B:45:39:03:5D:A5:DD:1A:CB:68:C5:CC:BF:B6:6A
Authority key identifier: 02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16
Certificate issuer: /CN=A91147EF/serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016
Certificate serial: 09AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
Manifest number: 09A0
Signing time: Tue 04 Nov 2025 20:07:33 +0000
Manifest this update: Tue 04 Nov 2025 20:07:32 +0000
Manifest next update: Tue 11 Nov 2025 20:07:32 +0000
Files and hashes: 1: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl (hash: lwQ7vGOsWrVChJ82eLawxJ5Qtr3uF8sRYuIoW+BFBSQ=)
2: 84D32F2AE32411EA800C6724C4F9AE02.roa (hash: DaSUtI7cCFZVDFGMxaMRlNVdC4PaCp9TfzAzL8z3Ug0=)
3: 38EC4D321F2711EB93A71042C4F9AE02.roa (hash: bvQWUn/Y7cckd5n8bfNYd/nHmrLV3J+fhc4s5WO5wQQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl
rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 20:07:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2479 (0x9af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91147EF, serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016
Validity
Not Before: Nov 4 20:07:32 2025 GMT
Not After : Nov 11 20:07:32 2025 GMT
Subject: CN=690a5d04-da6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:1e:8e:a3:86:6e:87:d8:33:aa:b5:3f:9b:
c6:58:d3:41:5b:3e:e9:ca:46:c0:db:4b:ff:a6:34:
24:1c:94:79:2e:00:49:8c:fd:37:1b:da:e1:64:0b:
60:ab:06:99:c5:0e:d7:7d:0d:a1:46:10:7d:e3:bd:
0a:98:27:77:50:23:a6:63:20:83:c2:0a:41:3b:32:
bc:df:0e:9a:3d:41:d4:dc:32:38:e8:bd:91:e4:2f:
dc:b6:ed:a4:ae:9d:87:8c:81:4f:2d:99:bb:63:8b:
0d:b2:a2:ae:1f:0e:f0:2d:4e:02:7b:7b:8f:3c:60:
58:cd:40:62:cf:f4:1a:92:6e:35:8a:db:f0:04:0b:
4c:19:9c:7f:e3:c1:74:5f:77:f2:fd:72:9c:cb:bb:
5f:db:65:36:3d:50:df:b6:20:1f:eb:be:1d:72:35:
df:4c:46:77:5f:74:e5:bf:0b:c0:af:9e:ec:5c:77:
7d:ca:22:ba:84:f8:c1:76:9e:9c:34:06:29:ae:50:
5d:d1:26:61:71:f2:ae:2b:1b:0a:71:55:17:0f:ea:
82:4f:b7:61:f3:f9:6b:a7:81:f1:b7:74:70:c3:41:
b8:38:a7:1c:25:85:4f:02:c7:9d:30:98:58:a7:c1:
22:89:d8:83:5e:b2:c8:71:9c:7b:07:2f:41:ff:63:
f5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6C:83:15:06:7B:45:39:03:5D:A5:DD:1A:CB:68:C5:CC:BF:B6:6A
X509v3 Authority Key Identifier:
keyid:02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:81:d6:06:15:52:a1:ef:d7:9d:42:01:27:32:87:9a:34:04:
8d:0a:ad:b3:bf:10:4e:d7:b9:4d:f5:19:84:37:89:35:ed:d6:
c3:ec:46:ae:ae:fd:81:b7:c9:30:f3:5c:4c:73:12:9a:88:e2:
43:4d:ed:28:f5:ef:6b:ac:24:69:de:ac:6b:77:0d:a2:be:cf:
0c:62:67:74:a6:d8:fa:d5:08:08:22:26:a6:29:07:e1:a0:35:
2f:22:7b:47:24:9a:87:a4:e6:d4:a9:0e:fd:ef:76:f6:de:63:
47:fa:2d:43:4f:3e:28:22:53:5e:31:38:95:bd:24:0d:79:7d:
66:92:e0:6b:99:ff:f9:b9:81:65:d2:d0:46:53:01:42:9e:b0:
26:83:3b:96:42:d7:bd:58:6a:69:12:4c:02:eb:c8:4c:c2:0a:
a8:b5:fc:d7:4e:3f:e3:db:e4:43:14:2d:e4:13:47:f1:eb:1b:
97:fb:2f:93:af:a1:69:75:98:bf:07:dc:91:67:02:6c:44:31:
eb:7b:4d:8a:20:9a:0a:fe:d4:7f:37:62:66:ff:a7:32:7f:d5:
d1:83:39:ee:18:84:33:f8:3d:43:69:55:8a:21:60:53:8d:79:
9c:d7:e5:5c:4f:fa:69:0b:94:e8:69:e8:af:be:31:ae:00:b3:
3c:49:c8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:10:18 2025 by rpki-client