
$ rpki-client -vvf rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
File: gVvw7iCl3LowV8PTW1jsFHcuj-8.mft (raw, json)
Hash identifier: c5lLYsraOoKzMrtwL760h/mscgqDGoXYYwI/JOnHEFM=
Subject key identifier: C2:F4:00:75:CF:91:DA:B1:6F:78:7F:1B:B7:61:82:2A:AF:1A:59:89
Authority key identifier: 81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF
Certificate issuer: /CN=A91149E6/serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF
Certificate serial: 031F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
Manifest number: 031B
Signing time: Wed 05 Nov 2025 01:11:58 +0000
Manifest this update: Wed 05 Nov 2025 01:11:57 +0000
Manifest next update: Wed 12 Nov 2025 01:11:57 +0000
Files and hashes: 1: gVvw7iCl3LowV8PTW1jsFHcuj-8.crl (hash: 1pwpUaWEe2Wsdd7SSuEJEsqvbHoeDZ5OO9U2BZFQCqY=)
2: 54FEFAA2ED4C11EC821F3D84C4F9AE02.roa (hash: X6/WL2Fb6NLT/TbbuE2SKgksYwkJEDYC9NLRzws0bWY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl
rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:11:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 799 (0x31f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91149E6, serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF
Validity
Not Before: Nov 5 01:11:57 2025 GMT
Not After : Nov 12 01:11:57 2025 GMT
Subject: CN=690aa45e-c88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1e:44:fa:c0:e6:9a:3d:9d:a6:97:10:51:53:
6b:5a:39:20:27:e2:93:0f:d8:48:0f:8b:67:c6:b3:
b5:be:75:61:77:1d:97:7b:cc:57:5c:97:82:4e:26:
92:6c:9f:5d:db:d9:0c:79:39:0b:6a:40:23:09:59:
d6:80:07:da:a5:c0:98:49:94:fb:4a:df:c8:e6:c4:
73:8b:e8:a2:ec:be:33:59:20:38:02:27:a6:d0:f9:
d5:9e:e7:75:0b:55:6f:44:14:e1:73:e0:b2:23:2a:
8e:12:8d:c8:21:b0:ea:99:5f:0d:c8:ad:2a:f1:a0:
84:08:26:cd:b0:ca:b3:f3:18:15:29:2b:bd:76:f2:
a8:cf:43:1f:38:2a:98:b7:13:fa:7e:fb:5e:78:f6:
1f:fc:e5:a9:04:27:dd:ab:80:29:87:77:32:77:6b:
c7:d3:fa:8d:41:05:a4:1b:dc:30:4e:ea:9d:94:5b:
e8:a3:31:76:f0:10:9c:58:eb:22:c2:d7:d4:85:20:
38:5c:fd:40:2f:92:76:0b:53:25:39:f9:fa:7f:ea:
e0:ce:b5:72:45:0a:96:e5:5a:d9:fc:01:97:d8:e7:
87:f8:c8:3c:db:65:76:08:6b:62:04:6b:38:3f:9d:
29:4c:4b:db:d5:50:8f:e8:9a:67:7c:c5:ee:f3:88:
69:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F4:00:75:CF:91:DA:B1:6F:78:7F:1B:B7:61:82:2A:AF:1A:59:89
X509v3 Authority Key Identifier:
keyid:81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:65:34:19:68:32:b0:27:94:13:0f:b2:92:05:ea:d2:eb:61:
0b:3f:0a:83:c6:f8:a2:a9:0e:97:e7:65:11:7d:04:fa:6f:ad:
24:4f:a5:99:5a:81:b2:b5:d7:9e:bf:f0:ee:b8:3f:92:7a:21:
0b:31:af:cb:16:4a:89:92:ed:39:c1:12:99:ad:32:4f:dc:8f:
2f:e8:a6:ef:c5:b7:91:d2:ef:78:da:31:f5:14:39:72:ae:42:
0c:50:64:31:e4:09:3f:3d:7a:33:9b:19:aa:0f:ec:e1:b7:67:
95:be:61:63:09:ae:d0:49:80:51:84:60:d0:bc:d5:20:a3:d0:
d5:e7:05:9f:79:40:a0:78:a3:bf:c8:30:49:d7:00:99:d5:ff:
11:3c:5c:6a:e6:00:48:52:af:74:59:b5:ff:dd:af:29:92:4b:
ec:43:3f:58:56:d7:98:c3:a5:89:86:ed:81:7f:8e:64:f3:43:
ba:7c:fd:f3:3a:55:b9:c8:76:47:e1:12:9c:54:ea:28:3d:74:
5e:57:c1:e8:93:b3:f0:f1:0b:ae:85:2f:d0:6a:bd:1c:60:54:
8a:bc:58:01:41:56:da:16:a0:92:80:b2:07:95:ba:07:ba:04:
36:88:fa:4d:25:c8:f8:5b:db:1e:2f:7f:65:8d:f8:09:38:45:
c6:1e:fd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:04:57 2025 by rpki-client