
$ rpki-client -vvf rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
File: PuJvukvjWd6uUAeS6_940ArLdgw.mft (raw, json)
Hash identifier: lz8QUHiTQTVGWb/HkbxZFDdQ9MxNQs6Xlj0G+1ke8xo=
Subject key identifier: ED:D8:85:68:FE:C4:CA:2A:35:48:6F:15:C2:6C:19:C1:D3:E1:F9:CC
Authority key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C
Certificate issuer: /CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C
Certificate serial: 0436
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
Manifest number: 0427
Signing time: Wed 29 Oct 2025 00:07:30 +0000
Manifest this update: Wed 29 Oct 2025 00:07:29 +0000
Manifest next update: Wed 05 Nov 2025 00:07:29 +0000
Files and hashes: 1: PuJvukvjWd6uUAeS6_940ArLdgw.crl (hash: 9u7ZreYPQmmA9v74X5B5U7UNaF+1wmOOnC2Y3xUcDd4=)
2: 0A4D6250833411ECBB74C786C4F9AE02.roa (hash: 6+2Lk4Xai3HUwAmjg8bW8UOOypYan1IgfWd2mzH9/MA=)
3: 0AE155E6833411ECBB74C786C4F9AE02.roa (hash: P2hgHU8XOvbHIrBabwcVzNSzMatmcwCF4tAzz5uDO10=)
4: 09B62A48833411ECBB74C786C4F9AE02.roa (hash: 4y99R2661TzfOkabp7/pgfm0pWxC4+jDx6PFu0Fa6p8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl
rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 00:07:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1078 (0x436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91596C4, serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C
Validity
Not Before: Oct 29 00:07:29 2025 GMT
Not After : Nov 5 00:07:29 2025 GMT
Subject: CN=69015ac1-480d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0d:94:2b:ba:28:9b:81:51:5d:22:71:10:49:
7d:91:27:27:4a:77:9c:19:8a:1f:01:3e:6a:c9:8a:
c0:fe:2c:a5:32:58:88:41:a0:e7:b4:1b:e7:ce:1e:
cd:d7:c4:1a:d1:00:f5:bc:bf:5d:a6:ef:0f:c6:69:
61:5f:d3:4b:73:96:26:ff:e6:20:0f:7d:3e:19:33:
ac:0f:71:83:11:1b:bb:11:22:97:bf:e6:ae:7c:b4:
41:8d:8b:ca:4e:d5:c0:80:67:62:f1:fe:95:43:c6:
08:8a:47:7d:7f:d6:37:c9:e8:ac:8c:bc:7d:00:80:
2f:45:70:17:e8:ac:1f:9d:ee:14:da:98:f7:81:85:
e3:21:98:fe:7d:7d:3c:4f:4b:61:63:99:1f:fe:08:
c1:8e:5f:2e:60:dd:7d:90:c1:a2:3d:94:e2:2e:1a:
b3:7c:ee:fe:70:7b:ee:2a:88:f4:51:92:59:37:26:
50:3c:6e:17:ca:6d:d4:d5:0e:8f:45:d7:95:d6:b3:
88:7c:a0:e0:dc:90:23:6a:a1:a8:ea:83:aa:cd:8b:
51:12:7c:36:47:34:e9:28:9d:78:48:20:37:51:da:
fb:66:fc:f9:ea:9f:fa:d0:17:72:f5:5a:47:db:0e:
ff:7a:21:02:51:a1:ed:0f:be:2a:c8:1a:00:75:2c:
d7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D8:85:68:FE:C4:CA:2A:35:48:6F:15:C2:6C:19:C1:D3:E1:F9:CC
X509v3 Authority Key Identifier:
keyid:3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:a9:ef:06:37:15:e7:a4:5e:52:fe:66:f0:cc:de:03:b2:90:
e4:de:e5:92:20:61:a8:c4:5b:0e:65:ab:09:d8:65:98:66:b0:
9a:9a:b7:77:e5:67:a2:47:8e:66:97:4e:c5:12:88:c0:fa:ce:
55:dd:83:8b:e7:41:d0:ca:c5:3a:78:58:e4:b8:8d:f3:eb:65:
33:f3:5a:26:bf:fb:f3:0d:3d:41:ce:09:75:85:32:41:92:0a:
70:cd:0f:62:73:41:85:30:57:a7:6c:ca:c4:3c:4f:ea:26:e3:
51:b9:65:dc:84:87:b8:af:43:1e:51:41:e1:ca:b0:fc:28:69:
6b:71:fc:a3:e2:af:6f:01:3c:ae:ab:18:e5:41:fc:87:c1:26:
02:f7:90:2e:e9:2d:97:7e:57:53:c7:b9:27:b1:0c:fb:76:a8:
87:e4:7d:b2:44:25:76:d4:4e:04:60:af:50:05:32:06:e2:73:
58:d2:3a:6f:94:1f:3a:9d:9b:31:db:50:71:f4:5b:54:dd:62:
2c:73:38:46:c0:61:9e:43:e5:12:ec:49:f8:58:b6:20:61:bc:
6e:5c:0c:0e:af:da:6f:ee:1d:18:10:52:89:1f:db:e1:da:d3:
e4:8b:40:81:f5:b2:35:9e:6c:c9:aa:35:19:69:4c:fe:6e:c9:
e0:c4:08:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 06:22:45 2025 by rpki-client