
$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft
File: A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft (raw, json)
Hash identifier: kxjf9/wvirsRNVil/5qpzrQcV6xlGFRB52lmJO43kog=
Subject key identifier: E4:05:81:3A:D4:C6:33:D5:54:2B:6F:1F:C6:17:EB:03:C0:0B:9D:3F
Authority key identifier: 03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59
Certificate issuer: /CN=A91380F7/serialNumber=0391D9A70E893E751BC61289C54417B87A104559
Certificate serial: B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft
Manifest number: B1
Signing time: Mon 03 Nov 2025 06:04:46 +0000
Manifest this update: Mon 03 Nov 2025 06:04:45 +0000
Manifest next update: Mon 10 Nov 2025 06:04:45 +0000
Files and hashes: 1: A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl (hash: Jh2CKUAZUpSHEnKF0dHhxXMacg5DF40QHksWN5Y2W54=)
2: 9B3FE178A7FA11EFA7886875C4F9AE02.roa (hash: wskyOCDE340iqc6+xbxJBMsRJGfe9vODWh/hz8Ga1HM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl
rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91380F7, serialNumber=0391D9A70E893E751BC61289C54417B87A104559
Validity
Not Before: Nov 3 06:04:45 2025 GMT
Not After : Nov 10 06:04:45 2025 GMT
Subject: CN=690845fd-7a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:71:02:6e:fe:e1:19:a7:66:f4:38:f1:bc:3e:
36:0d:8e:a5:26:59:58:bb:91:2a:9a:31:ba:e2:8e:
51:a8:f7:d8:f1:ef:3b:a1:6d:4d:ae:9f:67:bf:90:
99:ac:3d:10:c3:fe:85:03:3b:a8:47:8f:4e:58:bb:
44:4a:1b:62:18:b0:d6:55:cc:a0:8b:83:4d:5e:27:
db:71:e4:13:8f:b9:b8:da:35:8c:08:da:6c:26:96:
e1:c5:44:7e:60:27:a2:f4:d9:a2:0b:2b:37:f3:1c:
40:68:92:de:b9:40:cb:15:ee:0c:7d:e7:e6:39:14:
50:e7:a4:a3:4b:67:73:e2:4e:23:d2:7c:1a:99:8a:
a8:25:43:7b:f2:c7:fb:a7:26:22:6b:29:76:fc:43:
17:91:25:bd:29:4c:e9:6c:75:b9:38:93:f6:87:bb:
37:f8:53:cb:17:6b:11:4e:52:ce:75:cc:d8:b0:e9:
f1:d9:51:63:23:fe:e9:be:3e:10:af:d7:23:c7:95:
18:2c:d3:2f:7f:0c:7c:e3:2a:a9:4b:7b:dc:4a:f1:
2d:1f:c4:3c:c6:f5:02:3f:18:51:cb:ad:29:13:d8:
50:8b:89:d0:26:49:c4:52:bf:9b:a6:df:14:fb:cf:
78:78:be:77:8c:be:68:8a:40:c3:9b:d9:41:70:30:
8a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:05:81:3A:D4:C6:33:D5:54:2B:6F:1F:C6:17:EB:03:C0:0B:9D:3F
X509v3 Authority Key Identifier:
keyid:03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ef:55:26:06:b9:4a:cf:55:3f:d3:a0:7f:0e:51:24:ea:8d:
4f:1e:99:2b:7f:20:73:ab:38:28:75:85:c6:74:e8:a4:2e:3b:
79:92:a2:26:65:87:32:aa:56:ba:f7:1e:ad:56:20:50:ce:3e:
22:25:36:6c:4b:c7:78:21:d2:97:84:82:fb:bb:5c:d9:af:29:
c6:cf:fc:5d:86:fa:35:9c:8d:35:32:a4:05:b3:48:c4:b3:aa:
39:17:f9:10:01:17:b2:92:e4:8f:fd:42:a5:c1:53:7b:aa:55:
aa:95:6c:ba:e1:c2:39:4c:1a:7c:67:51:7a:07:73:a3:9b:73:
d2:38:e6:76:65:94:39:03:66:c4:e7:b4:4e:96:46:e3:ac:e7:
93:69:89:ff:53:b9:79:22:4b:24:d0:32:36:71:f8:ef:48:cc:
ec:e4:c5:ed:7a:a1:0d:8f:64:53:bf:d6:98:97:5e:b5:e7:32:
c7:ac:e7:f5:6f:c8:dd:4b:47:cc:9e:3b:dc:e3:4f:7a:5e:5e:
b5:9b:b0:b0:ba:4b:73:31:51:df:2d:e1:73:c8:db:2b:68:dd:
69:a6:5a:42:9c:76:e2:1b:20:31:53:3d:99:99:26:6d:55:db:
51:d8:11:ed:1b:42:5a:41:82:8e:51:71:4a:a8:09:c8:f5:ed:
12:b9:44:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:19:19 2025 by rpki-client