
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
File: kuuO8sbiYWmIqY_VsT7io2siHEM.mft (raw, json)
Hash identifier: kaVypjZMQ6fvZdBWcCw8+/xE/OzIh8tf3NLoTek5E3U=
Subject key identifier: 2D:10:BD:B4:F7:CC:2B:8A:C3:72:A5:AD:67:7A:5B:12:10:33:15:F9
Authority key identifier: 92:EB:8E:F2:C6:E2:61:69:88:A9:8F:D5:B1:3E:E2:A3:6B:22:1C:43
Certificate issuer: /CN=A91A15FB/serialNumber=92EB8EF2C6E2616988A98FD5B13EE2A36B221C43
Certificate serial: 0106
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
Manifest number: 0103
Signing time: Mon 03 Nov 2025 05:02:56 +0000
Manifest this update: Mon 03 Nov 2025 05:02:56 +0000
Manifest next update: Mon 10 Nov 2025 05:02:56 +0000
Files and hashes: 1: kuuO8sbiYWmIqY_VsT7io2siHEM.crl (hash: oLRWGQV0HXXzmGz8i8iFxQCUVTj4Qhqx6cWEWswrzFA=)
2: E61BEE5C605711EF9150403FC4F9AE02.roa (hash: CCiK9Z7hOvpBEdDuVHROFOhxvRBudD3Mcnii4SWAHa4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.crl
rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 05:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A15FB, serialNumber=92EB8EF2C6E2616988A98FD5B13EE2A36B221C43
Validity
Not Before: Nov 3 05:02:56 2025 GMT
Not After : Nov 10 05:02:56 2025 GMT
Subject: CN=69083780-c178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:52:92:5a:c4:5e:42:05:d8:e0:a0:ac:4e:10:
fa:9a:7a:56:b9:d4:2c:ac:4c:5f:14:ca:1c:68:5e:
09:1a:c8:c8:cd:a5:c4:27:f6:67:e7:16:db:f6:ec:
48:fb:6f:17:28:2a:2d:79:1b:b4:2e:de:21:1a:93:
c9:be:6f:d5:ca:04:1f:8b:2c:35:71:64:f5:96:68:
2c:ef:5e:44:9a:e9:d5:bf:92:e4:df:e0:be:5d:a2:
c5:d5:b8:4b:f6:5d:b5:e3:1d:6f:12:22:f4:f2:7a:
e6:1f:c0:e5:21:6c:3c:85:cf:66:42:43:cc:71:df:
7d:52:b2:f3:ca:67:73:98:13:8f:20:d4:b0:0b:ad:
8f:22:df:36:06:1a:88:14:f3:e7:1c:81:dc:f4:64:
34:dc:2a:aa:fc:1c:fa:30:6a:56:34:b7:11:be:c3:
6e:9f:46:f3:f9:50:d2:f6:3b:71:f7:04:16:ea:3a:
85:53:5e:98:44:06:e1:b0:52:78:25:bb:4b:6f:8e:
f9:8e:04:53:be:eb:98:4a:a6:f5:4c:a2:85:fc:cd:
99:dc:32:09:1c:b2:60:60:76:94:af:95:68:3a:6c:
ec:5e:34:df:50:ad:b9:85:2a:50:d6:3b:86:7e:a5:
1d:d1:82:f4:e6:ca:77:69:2a:b7:f3:27:a2:54:5e:
9b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:10:BD:B4:F7:CC:2B:8A:C3:72:A5:AD:67:7A:5B:12:10:33:15:F9
X509v3 Authority Key Identifier:
keyid:92:EB:8E:F2:C6:E2:61:69:88:A9:8F:D5:B1:3E:E2:A3:6B:22:1C:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:80:fa:2e:db:15:4c:74:b7:ed:69:f8:68:97:48:1b:83:b6:
f1:46:b9:2f:5c:4e:80:08:44:46:75:74:3e:d3:55:b9:fb:c7:
0a:fb:39:1b:55:70:7e:7e:e7:8d:19:c9:62:7f:4b:f3:47:f2:
6b:ac:ba:f5:fc:ab:eb:95:9b:63:50:97:95:e5:50:9b:26:77:
ff:be:86:49:94:79:a5:8c:f6:09:f5:02:c0:a1:c7:08:4c:fe:
5c:c1:a9:c7:2f:de:81:8d:55:6b:70:9a:a9:c4:1c:5b:d9:28:
2f:83:d2:64:fa:d7:a4:97:f5:6d:0f:26:9c:f9:25:5f:17:c0:
99:0f:5e:43:2b:77:61:04:01:cb:99:64:3a:cd:79:be:3b:d7:
51:88:7f:8d:f2:b2:c5:4e:94:33:d1:d8:f0:14:5d:0e:63:63:
80:a4:8b:c0:ee:a2:0d:db:19:07:12:16:d4:bf:44:dc:0e:c9:
8b:99:61:61:74:19:ea:9a:cc:75:5c:7a:34:4e:df:2f:a0:f2:
07:66:7b:c0:ce:2d:a4:fa:a0:dc:ec:e4:3f:1e:72:70:09:5a:
be:2b:3e:f2:a9:4f:f3:df:96:98:45:ac:5b:87:63:bd:1e:aa:
ee:e9:08:29:94:9c:0f:8b:5c:79:61:6c:8b:2f:02:48:f2:20:
0d:a2:80:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:10:26 2025 by rpki-client