
$ rpki-client -vvf rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
File: 4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft (raw, json)
Hash identifier: pDlZ6FxqWwGUBNlrFoaHD6ySEUFFpFp2yoVFkuOFqC8=
Subject key identifier: 49:5F:C3:0E:A1:E3:EE:CF:B4:4B:21:EC:6D:53:D3:5F:D3:1D:2A:30
Authority key identifier: E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A
Certificate issuer: /CN=A91493FC/serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A
Certificate serial: 0208
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
Manifest number: 0201
Signing time: Sat 25 Oct 2025 05:39:38 +0000
Manifest this update: Sat 25 Oct 2025 05:39:38 +0000
Manifest next update: Sat 01 Nov 2025 05:39:38 +0000
Files and hashes: 1: 4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl (hash: mS//O6b61CNwofi8vlb/r/mK3YBRmqi1+7crdv6cCwc=)
2: 38702E769AF611ED8D41985BC4F9AE02.roa (hash: ZhWBxmhvIB+43KRBVHlsXZ7qRlNDQ90SpnXAY8rEx0A=)
3: D076B1A49F2911ED937CF05AC4F9AE02.roa (hash: DMBYC+/NRUlRPJuHXxC2cxoOT1tZHI2lI1sjea+2JhA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl
rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 05:39:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91493FC, serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A
Validity
Not Before: Oct 25 05:39:38 2025 GMT
Not After : Nov 1 05:39:38 2025 GMT
Subject: CN=68fc629a-3d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b5:d7:8b:29:4b:03:a3:f8:7d:5b:a2:97:c1:
bb:29:a9:79:4a:cf:c1:ac:2a:9f:4a:c6:fc:0f:08:
70:97:59:c4:16:eb:9e:34:f2:bd:01:de:6f:e7:35:
d6:73:09:f9:29:34:29:95:f5:e7:70:46:24:12:72:
54:ab:72:ce:1d:5a:fc:73:58:c1:ec:c1:76:dd:66:
b9:c4:4a:bc:73:98:c9:ec:de:43:d5:38:88:17:eb:
3b:ce:97:66:5c:1f:44:1d:c0:cb:0b:1a:12:23:8d:
87:c0:0a:2c:6e:41:ca:fc:4b:c5:65:2d:f0:79:7c:
2e:ec:84:a3:6a:99:9d:f9:4a:3c:fa:22:a9:fc:6f:
02:5f:b0:fc:6b:c8:1e:41:85:b1:51:65:b5:75:19:
b7:c1:56:9e:8c:ba:3b:80:3d:f5:3a:57:57:32:a3:
fa:8c:d0:65:eb:3c:71:51:ba:aa:46:27:71:00:43:
6b:92:a9:80:e2:22:2f:f5:ed:67:3f:00:37:3e:31:
e7:46:a9:bc:92:5a:f4:85:4e:52:0e:20:1f:a7:ed:
97:ea:73:84:f5:0c:db:84:90:78:41:31:eb:2b:1e:
dc:a0:22:38:35:92:9b:59:72:2e:82:5e:5d:b2:d8:
5c:4b:d1:6d:65:35:2a:23:5a:fa:03:e9:86:7d:fb:
85:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5F:C3:0E:A1:E3:EE:CF:B4:4B:21:EC:6D:53:D3:5F:D3:1D:2A:30
X509v3 Authority Key Identifier:
keyid:E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:13:58:5b:fc:a2:54:8f:3b:a8:ed:0f:85:b5:82:cb:60:2d:
85:83:80:57:19:09:86:3a:e0:e0:2f:22:d7:01:13:3a:65:6f:
51:af:a6:1e:b7:15:89:5d:07:cf:7b:59:2b:f1:cc:6e:45:c3:
ec:aa:49:25:c1:a0:1c:ba:3b:58:20:45:d7:66:ca:23:a0:a0:
34:91:17:1b:3f:7f:58:88:59:fd:1f:5f:31:53:9b:87:e3:94:
01:15:20:9d:d3:fa:a2:7c:d6:67:29:35:cb:04:06:2e:13:10:
87:2a:fa:9f:ae:8e:10:c1:c4:90:65:f4:38:0c:d3:81:45:cc:
4f:af:a0:95:05:0e:4e:18:a5:bf:85:80:f2:d2:56:72:4f:0d:
d7:49:8f:a1:49:8c:6a:28:c2:94:e1:a9:df:33:cf:3c:e1:31:
13:08:6a:70:ed:a6:b7:99:7e:2c:62:70:b6:0c:ab:55:38:8d:
f3:b0:d0:10:d1:6a:02:3b:79:3b:df:72:94:1e:06:ee:5b:24:
d3:ee:56:f9:31:d9:2e:d2:d7:fc:66:41:d4:8f:80:20:5a:01:
20:8e:8f:db:9e:dc:9c:54:98:75:13:f4:d3:c0:66:74:b9:c0:
b0:97:b0:63:82:1f:c2:09:ed:f8:4d:50:27:37:da:ee:92:94:
35:26:b6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 00:46:41 2025 by rpki-client