
$ rpki-client -vvf rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft
File: aWYanwY1V84rVDewGIk9fZ_dvtA.mft (raw, json)
Hash identifier: btj7RU5o8cEs/XHVanMBgjFmNZyfWPCbHp7sDsXUhoI=
Subject key identifier: B4:83:68:41:D9:B7:53:67:BB:CD:3D:35:C7:CC:63:28:AD:08:75:4B
Authority key identifier: 69:66:1A:9F:06:35:57:CE:2B:54:37:B0:18:89:3D:7D:9F:DD:BE:D0
Certificate issuer: /CN=A91431A6/serialNumber=69661A9F063557CE2B5437B018893D7D9FDDBED0
Certificate serial: 069A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft
Manifest number: 0693
Signing time: Sun 02 Nov 2025 22:21:34 +0000
Manifest this update: Sun 02 Nov 2025 22:21:34 +0000
Manifest next update: Sun 09 Nov 2025 22:21:34 +0000
Files and hashes: 1: aWYanwY1V84rVDewGIk9fZ_dvtA.crl (hash: YEsSSx/LXTHF/985CeLUoioYGdXV56wcsRhGQDieNkU=)
2: DDCD4C168EC611EBAB7F3476C4F9AE02.roa (hash: vYh53kbQx56u84oKA/xd3ROknCRDM7pHTjRvm9U4uGU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.crl
rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 22:21:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1690 (0x69a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91431A6, serialNumber=69661A9F063557CE2B5437B018893D7D9FDDBED0
Validity
Not Before: Nov 2 22:21:34 2025 GMT
Not After : Nov 9 22:21:34 2025 GMT
Subject: CN=6907d96e-bd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:16:d1:36:a8:15:be:8c:e0:b1:2d:e3:fb:fa:
0f:36:2d:25:53:bf:c7:fa:e9:3f:0c:28:85:b5:f1:
5d:b0:d4:55:e2:f5:3e:f1:41:dd:16:99:21:42:c5:
a3:01:02:37:b1:74:f9:31:e9:4e:c8:6d:f1:2b:d4:
8e:25:44:b1:5a:a8:1c:5c:fb:6f:bd:de:a4:0d:d2:
d8:6a:97:07:6a:e1:96:14:3a:d0:e7:b4:4a:79:22:
c4:42:05:20:6f:f3:3e:cc:f2:2b:5b:d8:f5:56:01:
49:17:40:0c:58:03:44:bb:7f:14:07:25:27:94:37:
af:91:e9:10:7f:b0:8d:bd:7a:c5:15:d1:bf:1b:18:
f5:a9:2d:61:48:de:d4:95:9a:37:36:3b:17:25:b0:
80:0f:26:52:5a:28:fa:6e:70:2b:ff:f1:0b:76:39:
35:a6:4d:9a:9a:fc:12:a1:38:d0:bf:fc:d9:ff:50:
32:cf:c0:82:7e:2f:8a:82:83:d9:d8:d6:2d:6a:ee:
cf:3d:f7:38:a0:2e:a4:8a:b8:d6:bf:9a:54:23:12:
7e:9d:98:e6:6e:8a:fb:eb:a0:4e:09:0f:38:e0:00:
d4:2e:bc:bb:0b:aa:48:7c:32:4b:59:2f:74:96:20:
28:86:e4:4e:4e:f0:7b:5c:9b:ba:94:66:13:c0:d8:
56:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:83:68:41:D9:B7:53:67:BB:CD:3D:35:C7:CC:63:28:AD:08:75:4B
X509v3 Authority Key Identifier:
keyid:69:66:1A:9F:06:35:57:CE:2B:54:37:B0:18:89:3D:7D:9F:DD:BE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:f7:73:63:79:3d:ea:52:02:94:6d:b4:de:20:48:04:59:67:
23:97:9e:bf:74:6f:a3:d7:72:87:67:4f:f9:12:7a:f6:15:05:
d0:c3:dd:4a:47:58:af:ed:01:87:a4:51:9c:7d:bd:12:b0:37:
d6:1a:a5:0b:88:56:86:4f:c9:59:af:ad:91:8d:f1:8d:65:da:
0d:29:26:bc:3a:2d:66:1f:ef:50:85:1e:f6:53:8e:5a:37:e0:
42:e1:18:d0:be:51:89:5b:aa:16:03:e1:91:4b:05:7b:7f:36:
79:fe:02:15:77:89:54:23:6c:3f:88:22:74:39:b7:dd:43:31:
9f:d2:8e:6e:0a:b5:95:13:2a:4f:9a:03:52:d4:62:06:30:d3:
1b:0b:a5:e2:01:3b:77:87:1e:c0:11:e5:4f:7b:a4:9f:ef:02:
8a:e4:b1:01:ea:f2:5d:72:a9:81:cb:f1:cb:c0:18:8a:02:dc:
13:cf:ba:ac:a9:26:b2:97:f8:6b:74:8d:b0:e3:13:b9:6d:8c:
9e:78:fe:cc:ae:fb:83:55:e0:b8:2f:7c:47:ba:4a:f3:91:d1:
0b:31:64:b8:d7:2e:ab:e2:09:f9:fa:76:75:41:46:dd:c6:69:
5d:fa:09:7f:a1:4e:a9:9d:e1:59:aa:6f:5f:55:81:a9:87:d4:
dc:af:1b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:20:03 2025 by rpki-client