
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
File: ThDxPylfvys1nITd0WUbyFGqivU.mft (raw, json)
Hash identifier: r88tI6nZh0WZOuVFX1cpZa9XdF9yWGBDxQsdUgb2p4Y=
Subject key identifier: FE:54:C9:E1:1E:04:97:7C:55:4C:21:02:F1:7F:05:6E:06:77:A9:BE
Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Certificate serial: 27A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
Manifest number: 2731
Signing time: Fri 31 Oct 2025 15:39:16 +0000
Manifest this update: Fri 31 Oct 2025 15:39:16 +0000
Manifest next update: Fri 07 Nov 2025 15:39:16 +0000
Files and hashes: 1: ThDxPylfvys1nITd0WUbyFGqivU.crl (hash: IxmfEUVnjQUl7Gkl7Q7pZM6Y0n07KxIG9rR1Bu+IUfw=)
2: C4F9C4A03CCB11F0A0971A87C4F9AE02.roa (hash: xHCZ2/dEn0nHhWiq6+O/i6vGEe0ccZlJVNPLmFkzdOM=)
3: A225B08645C411F0BF201021C4F9AE02.roa (hash: IvX8ILiXhHWFM5uyZnAUJPESwgV0Xv5NKCdd1JDWi+U=)
4: 5F2B09B4485D11E8ACB54839C4F9AE02.roa (hash: E1JyH+1tKEsb7p5LJOJ8T2MOoIqLysA7phnqVuKQpiE=)
5: C1B9CC1239DE11F0B191D94AC4F9AE02.roa (hash: C5mtfa3ZF1KEnyDRrBvvk8V/nxHuXLLm9mRYEmWk30I=)
6: F17169E244A311E9AEF6F25AC4F9AE02.roa (hash: 4N1cyp7Yk8laCKHeEBSScZbHkAV+qb2GWLjTCKYKuMc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 15:39:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10153 (0x27a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Validity
Not Before: Oct 31 15:39:16 2025 GMT
Not After : Nov 7 15:39:16 2025 GMT
Subject: CN=6904d824-c811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:42:e8:2a:99:4b:13:dd:76:ca:c3:ba:cc:34:
a4:a9:6b:9f:da:44:b1:d4:b2:e2:c4:97:21:2b:5f:
30:9e:29:01:e2:f7:a4:56:bc:3f:8a:c4:20:5c:83:
5b:b8:a9:b9:6f:34:07:24:a7:0a:55:31:cd:e0:61:
fa:aa:03:c4:2c:65:a9:94:28:0a:c6:46:13:fa:97:
99:6b:b5:e7:3b:1a:38:0e:3f:49:fc:ed:9e:3d:4d:
11:ba:dd:45:ad:ff:f3:e0:f4:6d:dc:d7:f3:2e:6e:
96:11:65:8e:94:1f:74:c7:8f:3b:3b:57:15:29:8d:
ed:7e:e6:d8:7a:4a:fa:b8:ad:4d:50:8f:63:ad:14:
d6:d1:3a:16:f4:fe:8b:12:ff:6f:be:5a:ff:13:48:
5d:0e:fa:64:b0:dd:b8:b0:b3:e8:64:44:9e:d3:29:
4f:2a:5d:57:60:04:55:07:e4:26:c0:59:a0:3c:25:
90:f6:2a:ca:e5:0d:d3:6e:f0:f6:ee:e4:a5:40:22:
b3:41:15:e7:e4:86:8c:8a:c0:4f:30:8f:8f:e4:0e:
d7:e6:79:5c:47:b4:f9:ad:e0:49:2d:0e:30:6f:9d:
2d:05:81:21:95:cb:7e:b4:78:66:eb:57:f7:3d:21:
d6:81:e8:ea:88:11:16:3f:ea:0e:74:43:c0:a5:36:
c7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:54:C9:E1:1E:04:97:7C:55:4C:21:02:F1:7F:05:6E:06:77:A9:BE
X509v3 Authority Key Identifier:
keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1d:33:40:ff:d4:0c:6d:d7:c6:27:fc:8a:84:78:6f:93:d9:
3c:19:3d:d2:05:c8:e8:c5:f8:7e:f5:90:c0:93:73:f4:d6:3b:
6a:ab:5f:78:d8:03:f1:06:a5:12:8c:ba:20:67:57:49:9c:72:
e5:bd:48:91:f3:c3:2f:b4:6f:1b:e3:e8:00:ec:5d:84:53:a0:
a9:a3:3a:5f:69:38:cd:f5:4f:f2:9a:93:b3:bf:42:5e:61:a3:
e0:50:37:df:8a:c4:bf:fb:68:f6:17:e5:af:89:b4:21:74:a7:
29:bd:44:69:9a:cc:1e:1e:3a:5b:8b:70:ac:c9:74:a0:75:e6:
2c:4e:57:4c:c5:d4:f2:ca:a5:1f:16:90:9b:87:a7:24:56:8d:
a6:22:9e:95:a3:62:85:ad:71:be:02:1f:5d:64:e4:2d:62:d6:
1f:7e:5b:c1:1f:00:a7:1d:f7:60:9c:96:a6:98:c7:5a:a2:7a:
e8:2e:0c:8a:90:0c:65:0d:a4:5a:80:dd:da:6e:35:fc:10:3c:
80:1a:f2:6d:cd:9d:02:fa:83:59:c6:57:f3:0d:fd:93:55:5d:
9b:9f:15:c5:02:1c:f4:1b:ca:e2:e0:ec:04:ab:55:d2:ff:c5:
85:20:66:55:40:d3:89:8c:fb:e0:32:c9:21:ce:1f:42:b6:7d:
c1:3b:43:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 22:45:36 2025 by rpki-client