
$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
File: V1pu0ww3OtQ00VpmXdoudk7Imso.mft (raw, json)
Hash identifier: puG2J58Ch9vya350NUr09yJTEoZ8p2uBwkHIRqyZsb0=
Subject key identifier: AE:9A:31:E0:A0:2D:45:BE:C7:4A:36:B6:E1:8D:9D:06:09:D6:AC:EF
Authority key identifier: 57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA
Certificate issuer: /CN=A91827C5/serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
Certificate serial: CC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
Manifest number: C6
Signing time: Sat 25 Oct 2025 09:39:23 +0000
Manifest this update: Sat 25 Oct 2025 09:39:22 +0000
Manifest next update: Sat 01 Nov 2025 09:39:22 +0000
Files and hashes: 1: V1pu0ww3OtQ00VpmXdoudk7Imso.crl (hash: y3E8taUKJtpVk0S30Db4xAmNzZ8JyjkrOaLl74x/SuQ=)
2: 6F591F00671411F0A568F124C4F9AE02.roa (hash: x0s+a8n0tfUspvoFu90euoP3YJ9IRWh7FQTQNg+CfNA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl
rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 09:39:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91827C5, serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
Validity
Not Before: Oct 25 09:39:22 2025 GMT
Not After : Nov 1 09:39:22 2025 GMT
Subject: CN=68fc9aca-848a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:36:8f:82:40:8d:c6:c9:2b:6f:c5:5b:95:6a:
13:96:68:fc:31:d6:bb:5a:ca:b0:cb:70:87:33:73:
83:99:36:0a:4c:dd:ab:e7:17:76:dd:7c:5d:ca:bd:
56:a1:4a:04:e9:7d:c2:ec:c8:01:34:7b:c4:97:2b:
61:d1:0a:c1:ff:95:01:8b:38:46:23:8c:0e:a0:12:
79:9d:c7:04:11:d8:68:fe:b5:58:94:5a:1a:cc:7e:
9f:f7:78:d8:0a:4e:54:cb:bd:af:26:7a:3e:12:80:
fa:f5:20:1a:d5:e9:4f:84:16:c8:71:d6:93:45:13:
65:89:78:d6:d7:dc:19:93:9f:cf:5a:b8:9a:84:ce:
37:7e:30:bb:24:e9:92:8a:32:ec:eb:e8:a9:7b:c1:
56:db:e5:0b:ec:b6:4b:24:57:0d:10:7b:92:e9:15:
14:56:ec:62:fa:75:42:5f:6f:7b:7c:10:17:b6:13:
0c:87:26:86:d2:28:ae:79:2c:71:74:08:de:f5:85:
6b:06:bb:a5:c2:b3:8c:17:13:5e:61:d0:0e:61:95:
c7:63:60:70:84:c9:79:94:24:24:1b:2c:cd:0a:e4:
92:a6:c4:9e:25:b6:80:a1:13:46:ef:41:4c:d9:b3:
7a:6c:a1:a1:b2:da:8e:dc:59:f7:31:e2:52:45:91:
98:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9A:31:E0:A0:2D:45:BE:C7:4A:36:B6:E1:8D:9D:06:09:D6:AC:EF
X509v3 Authority Key Identifier:
keyid:57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5d:c1:76:71:11:31:4d:e3:12:1c:5f:44:43:ff:d1:59:2d:
8d:08:ad:4b:52:9c:90:c4:f2:0a:dd:84:0a:42:f2:73:9f:50:
4a:53:05:a7:c4:f2:0f:e6:18:54:b5:97:cc:93:7a:68:28:99:
24:c5:06:ea:e3:f8:11:e0:77:b4:8e:7c:39:ef:37:e1:43:e3:
74:be:81:a2:7c:a8:1a:55:b6:48:4d:b6:fe:6b:28:95:4e:16:
6a:98:0a:50:86:54:99:89:4b:c9:bd:36:7f:f5:fc:91:87:77:
51:04:39:56:d7:d5:30:ea:25:60:59:a7:ed:a1:33:97:3b:c2:
19:5c:64:fc:74:04:77:33:31:54:9e:45:f2:69:bf:5b:3f:14:
8f:0f:d2:f9:8f:d8:cf:f3:0b:fc:aa:16:b7:71:fb:d1:b7:24:
3d:a9:52:50:ce:a7:8c:d0:ad:b5:cc:eb:19:0c:bc:c3:fc:bf:
e3:96:c6:a8:8b:3d:c1:30:59:f4:a9:45:e1:c3:7b:bf:64:af:
44:54:58:42:ad:d9:aa:e0:09:43:8b:ed:b5:d3:96:d7:7d:a8:
ed:0b:93:14:db:cf:01:dc:a3:eb:0b:3e:28:28:ab:18:de:7a:
7f:90:0c:7f:9f:5a:39:f2:66:88:21:17:21:88:b9:18:ca:e5:
90:11:87:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 01:50:12 2025 by rpki-client