
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
File: Gm63WytHE2DtWpJcNRzEDBlBaCc.mft (raw, json)
Hash identifier: QyBr2Af78rkNHIhxAsYCqoK0twurWlzoEEFqo0rFr4E=
Subject key identifier: 9F:C3:0F:60:7F:A3:3B:4E:3C:4C:B8:E3:6D:11:5A:AF:04:DE:5E:8B
Authority key identifier: 1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27
Certificate issuer: /CN=A9184AB8/serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827
Certificate serial: 93
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
Manifest number: 92
Signing time: Sat 25 Oct 2025 10:20:15 +0000
Manifest this update: Sat 25 Oct 2025 10:20:14 +0000
Manifest next update: Sat 01 Nov 2025 10:20:14 +0000
Files and hashes: 1: Gm63WytHE2DtWpJcNRzEDBlBaCc.crl (hash: UAu3mP3LRXYQKlxD/0ziyYeFAsz/MbW4T+iSa5tLW4M=)
2: 6156245AD26F11EFB6D7116EC4F9AE02.roa (hash: H+Re+gqiRgpMCNcLPAgkDV7non7PY7SZMMWDfs8kqJ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl
rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 10:20:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147 (0x93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184AB8, serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827
Validity
Not Before: Oct 25 10:20:14 2025 GMT
Not After : Nov 1 10:20:14 2025 GMT
Subject: CN=68fca45e-f48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8f:e2:7a:b4:33:ce:6a:bf:50:11:fd:17:d7:
af:95:26:fa:a2:6e:9b:68:97:20:77:d7:99:77:e5:
d5:a8:7a:15:2d:d9:e2:e9:3d:84:11:b0:4a:dd:44:
81:9c:c4:d0:0d:f0:36:0c:1e:97:24:b9:59:2d:59:
01:ac:8d:9c:ce:65:53:35:2e:79:e6:21:60:70:75:
34:c7:95:26:50:6b:38:c8:5e:dc:f6:2c:19:2d:b8:
2e:9d:1a:e4:99:8b:2b:1d:8d:92:79:2c:89:e4:a2:
1c:d8:9a:10:34:f6:38:2c:33:65:77:08:ba:02:37:
45:2b:3f:7a:b3:3f:b4:01:10:fb:6f:ad:0d:6c:6e:
bd:f0:db:ed:71:36:08:ce:97:a0:22:b1:ec:df:f8:
0f:18:1a:8f:6b:4d:19:4d:4c:f6:74:57:10:c4:ed:
7f:dd:e1:f1:35:68:c6:4d:46:50:df:d4:f6:a7:ec:
20:89:d6:e3:99:9a:d3:4e:e5:82:93:a0:03:03:98:
33:1f:aa:49:c9:24:91:5e:2c:74:9e:b4:4a:56:38:
e3:cc:9f:ed:86:99:a2:88:c3:2a:d2:db:18:ee:cd:
ef:c3:e5:05:a8:f7:a9:f8:44:bd:cc:ac:b5:c8:76:
47:18:24:f3:49:16:93:ed:80:a2:59:91:17:3d:fe:
54:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C3:0F:60:7F:A3:3B:4E:3C:4C:B8:E3:6D:11:5A:AF:04:DE:5E:8B
X509v3 Authority Key Identifier:
keyid:1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:dd:e2:10:a7:3e:49:15:48:02:26:b9:13:51:91:cc:91:dd:
03:3b:72:2b:97:eb:e0:f9:7b:97:c0:6e:2a:2a:1b:ce:d8:49:
ee:16:4a:60:57:7a:6c:38:61:d3:64:11:51:6d:5b:68:36:79:
c6:cb:2c:1d:bd:00:39:8c:53:cf:2c:42:90:8c:48:40:5f:1a:
07:a6:b4:59:6c:fc:20:d1:2b:c1:bb:36:c9:02:a0:09:92:8c:
db:1e:8d:98:06:1d:0c:f5:0b:77:c6:68:c9:7b:50:d4:ff:39:
6f:66:bf:59:8e:d1:2f:a0:c4:40:3c:ae:a2:67:f3:54:73:6c:
3f:ae:a6:4a:bf:df:ba:be:e6:98:20:14:46:ac:d9:c5:76:b3:
5d:0c:5b:18:bf:ee:e3:6f:17:d3:f5:33:1a:76:0f:de:d7:13:
6a:f8:65:44:1a:dd:07:59:6d:41:a8:c9:71:7e:0b:ca:5a:0e:
de:38:ec:69:eb:0f:fc:fe:b1:7d:5b:74:93:90:9c:ca:a3:6a:
80:1d:40:3c:0d:ac:a8:72:ae:28:d8:c0:04:6c:97:a2:18:7b:
80:45:20:0a:07:7b:57:b7:07:b8:87:af:8d:21:71:7c:60:c4:
d1:6a:dd:50:70:be:00:3d:e1:8f:94:a1:13:7e:44:7c:a0:12:
e5:27:e0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 02:59:37 2025 by rpki-client