
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft
File: UyhhbneUVH65zpK0qPBF5LLMwPw.mft (raw, json)
Hash identifier: FWlOsfLaMtj9zVI1yYOMynmcXmwCV0tsu0PJ8Cch3tA=
Subject key identifier: 05:AF:25:2C:46:EC:29:A0:51:11:BF:88:D3:B1:58:67:91:11:F5:12
Authority key identifier: 53:28:61:6E:77:94:54:7E:B9:CE:92:B4:A8:F0:45:E4:B2:CC:C0:FC
Certificate issuer: /CN=A91847A0/serialNumber=5328616E7794547EB9CE92B4A8F045E4B2CCC0FC
Certificate serial: 1D5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft
Manifest number: 1D53
Signing time: Sun 02 Nov 2025 16:09:09 +0000
Manifest this update: Sun 02 Nov 2025 16:09:08 +0000
Manifest next update: Sun 09 Nov 2025 16:09:08 +0000
Files and hashes: 1: UyhhbneUVH65zpK0qPBF5LLMwPw.crl (hash: LIQuxVoJjFNm+cPZnFn6zzvLkvR4UMwI/13NtuJc0iQ=)
2: 82E0D450BC5011E6B01A8D4CC4F9AE02.roa (hash: 0pFtdAh/nKnP5eoxsGxODsFcMEqhXHUTJ4P3f5IMFhU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.crl
rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 16:09:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7519 (0x1d5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847A0, serialNumber=5328616E7794547EB9CE92B4A8F045E4B2CCC0FC
Validity
Not Before: Nov 2 16:09:08 2025 GMT
Not After : Nov 9 16:09:08 2025 GMT
Subject: CN=69078224-c4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cd:ea:ed:d7:38:89:a5:5e:bf:37:32:71:cc:
41:ed:ec:9e:69:71:a2:61:e9:02:6a:9a:04:9c:4f:
4f:c8:11:f5:2d:23:04:90:47:9b:10:f3:e0:0f:03:
cd:f6:05:3c:1b:3e:d6:ee:34:56:e5:5a:9b:33:bd:
dc:02:58:ae:d9:41:3d:45:11:02:a5:19:f0:58:25:
d8:6c:ae:cd:37:2d:5d:ec:e3:f5:42:cb:cd:73:f7:
57:c5:c2:78:1c:57:70:26:a5:60:68:81:dd:ce:14:
ff:48:35:41:13:59:38:5b:04:f1:93:42:7d:f8:b3:
57:3d:8f:e2:87:06:52:5f:cb:f8:0d:2f:df:09:5f:
c9:93:83:97:c2:76:c7:e8:ea:2c:18:18:1c:c0:d2:
ba:be:72:7e:85:aa:63:5d:60:60:84:b5:9d:37:f1:
64:4d:7f:e0:c3:ce:1d:1a:e4:ee:d4:18:c3:ab:fa:
81:cb:7e:b8:c9:0b:aa:65:a9:ba:6a:45:6f:00:2f:
d8:c5:fe:7a:c7:5f:d2:a0:6c:0f:b9:34:64:b7:e6:
b4:92:95:c2:b6:19:49:0f:22:42:0c:34:c4:e3:f3:
7a:38:b8:11:6c:08:e6:51:22:46:5e:dd:64:48:e0:
10:21:cf:82:7b:45:5e:96:d0:cb:bc:55:ee:59:e8:
c2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AF:25:2C:46:EC:29:A0:51:11:BF:88:D3:B1:58:67:91:11:F5:12
X509v3 Authority Key Identifier:
keyid:53:28:61:6E:77:94:54:7E:B9:CE:92:B4:A8:F0:45:E4:B2:CC:C0:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:34:1b:74:16:85:1d:66:70:0a:5a:ed:2c:5d:7c:29:7c:4e:
b6:7f:bc:dd:22:44:9d:d1:a5:4c:da:9f:84:4c:b3:11:45:24:
3f:7e:fa:65:a1:7c:db:bb:00:04:54:d6:c6:87:4e:21:24:4a:
d0:39:9a:38:43:1d:1c:c4:4c:5e:68:87:fc:a0:96:b7:9e:20:
26:b0:3e:37:0e:b4:1f:77:6f:d1:ad:c8:c4:08:8d:a8:e4:0f:
cc:2e:7c:46:d4:ba:7e:ae:6c:11:25:ca:80:f9:86:7a:56:b5:
14:49:4c:74:ae:1d:74:a0:4b:fc:d4:6a:c7:5d:cf:1d:b3:b1:
42:3c:3d:18:4d:ac:35:25:ec:9a:f5:75:5c:b8:ff:b7:76:64:
e2:54:cb:c1:03:08:a1:a2:19:aa:35:52:bd:81:df:88:e8:59:
61:f8:ff:f2:62:eb:1a:ac:68:f2:c6:e8:a5:2f:a1:f0:fe:3a:
f9:54:b3:4b:2b:ce:dc:7f:2e:c2:03:80:4e:32:3c:65:3c:ca:
ec:eb:2c:96:1a:2c:9d:26:01:24:ea:a9:dd:3f:dd:06:64:b3:
89:f7:64:21:4e:7d:94:22:8e:7a:65:86:a4:07:48:66:4e:73:
b1:49:9f:79:92:ef:20:0c:50:9c:13:98:b5:09:f2:d1:55:0d:
c1:1b:cb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:20:04 2025 by rpki-client