
$ rpki-client -vvf rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
File: 4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft (raw, json)
Hash identifier: PncBjIpe/S9EhIOO2iyBJwvD7+cQyK7c5VUNOL44kvk=
Subject key identifier: EC:7C:66:D3:C3:33:8C:61:F1:9C:95:30:59:C7:54:30:45:7B:87:24
Authority key identifier: E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F
Certificate issuer: /CN=A91471DA/serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F
Certificate serial: 054B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
Manifest number: 0548
Signing time: Sun 02 Nov 2025 23:24:56 +0000
Manifest this update: Sun 02 Nov 2025 23:24:56 +0000
Manifest next update: Sun 09 Nov 2025 23:24:56 +0000
Files and hashes: 1: 4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl (hash: NgOE5oebjlilTtD3rcu6G35Q2gnw+HQfSHMIWP1Z/x0=)
2: 914E7A440FE611EC8DD2020EC4F9AE02.roa (hash: +BX7RaNNlsglW/BB60o8n67yb/21GqaNOP3+xpToWWc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl
rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 23:24:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1355 (0x54b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91471DA, serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F
Validity
Not Before: Nov 2 23:24:56 2025 GMT
Not After : Nov 9 23:24:56 2025 GMT
Subject: CN=6907e848-0142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:59:de:7d:48:7c:2f:0d:b2:8f:74:3e:18:88:
70:bd:12:23:9e:23:1c:fe:42:9c:7e:ac:b2:29:4a:
a4:dd:fd:05:0c:ad:a3:38:2a:4d:94:8e:28:d7:a5:
0f:a0:27:9d:8d:7b:54:62:8e:7e:9c:8e:20:e8:51:
de:0c:e2:c4:c5:39:29:26:05:f0:29:bc:75:94:56:
9d:ac:e8:a9:4d:c0:91:f9:80:66:c9:3c:ed:d2:13:
7f:c0:af:6c:da:51:1b:14:2d:fe:de:0f:8c:72:a7:
07:ca:3c:2b:8f:1e:e7:86:87:56:77:40:13:c8:42:
50:ef:2c:ec:6b:d4:66:38:69:da:01:2f:6f:46:5b:
11:ba:4c:4e:06:6b:21:00:26:66:d3:7b:cf:f1:b5:
4a:23:52:14:b7:dd:8c:48:57:30:8e:7c:8c:2f:65:
87:ba:5e:4a:03:ec:2e:92:c3:7c:28:47:c8:1f:ce:
b7:24:ff:30:89:17:37:e1:95:73:66:a4:dc:dc:a5:
5e:13:35:fa:fa:b6:e8:07:bb:0f:fb:bd:02:8d:4d:
17:4c:67:f0:08:13:29:22:72:7e:36:45:50:c1:b4:
6b:5c:34:d8:43:17:a0:d0:af:6a:b3:af:29:ed:09:
9c:f0:bc:93:6a:fa:f0:6d:2d:4c:bd:e6:5b:1b:32:
8c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7C:66:D3:C3:33:8C:61:F1:9C:95:30:59:C7:54:30:45:7B:87:24
X509v3 Authority Key Identifier:
keyid:E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:5b:2f:95:24:a3:35:50:19:30:c8:b5:ea:c0:d5:aa:fd:84:
28:38:9b:5c:49:3d:7f:d3:1c:f5:81:29:58:c3:bc:ea:ee:30:
dd:62:26:d8:1a:0e:0c:22:b1:48:42:9b:b3:df:21:a0:a5:24:
71:35:0d:d2:24:77:0c:8a:b3:79:1a:d2:03:9e:f0:c8:cd:da:
66:0f:fc:46:7f:d3:73:4f:bf:2a:06:5f:61:f5:09:be:d0:b4:
3a:cc:a6:ff:ea:0e:73:47:f6:46:9d:ab:2a:c7:d2:4c:e0:66:
1f:88:43:65:b8:d2:09:b7:e4:6a:57:d0:e5:ca:64:3c:5e:67:
04:5e:35:62:df:48:9a:60:e5:46:d8:8a:a3:8e:1e:20:73:19:
c1:6f:d1:50:71:b8:1b:9b:f1:94:c4:43:86:a4:47:1f:88:ee:
0d:a7:6a:c1:69:bc:8f:b9:88:ab:a3:4f:5d:32:b6:a4:5b:23:
92:ac:b1:92:56:e3:b4:6b:fc:41:f7:8e:d6:82:15:91:8b:2c:
f7:8c:fb:ec:16:9c:22:b2:3a:aa:53:03:20:f5:71:f9:fe:33:
c8:cf:ac:0f:20:19:d0:f3:0a:aa:14:b5:00:bc:9f:52:3a:85:
0c:46:04:20:30:ce:fe:1f:a9:ba:65:41:3c:e3:cc:81:c0:5a:
07:7d:81:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:20:15 2025 by rpki-client