
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft
File: 8bt55W0rCYaSzH0fIm91bHlh4Zs.mft (raw, json)
Hash identifier: 6qOAV/yzVbLfTFu7QSq22HTi1cO5ewW6eIC1ht2VTQc=
Subject key identifier: 25:DF:FC:95:3C:43:C2:DD:6D:B3:6C:A1:9D:DF:DF:42:C9:7F:44:42
Authority key identifier: F1:BB:79:E5:6D:2B:09:86:92:CC:7D:1F:22:6F:75:6C:79:61:E1:9B
Certificate issuer: /CN=A91A29A1/serialNumber=F1BB79E56D2B098692CC7D1F226F756C7961E19B
Certificate serial: 07BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft
Manifest number: 07B4
Signing time: Mon 03 Nov 2025 02:36:01 +0000
Manifest this update: Mon 03 Nov 2025 02:36:00 +0000
Manifest next update: Mon 10 Nov 2025 02:36:00 +0000
Files and hashes: 1: 8bt55W0rCYaSzH0fIm91bHlh4Zs.crl (hash: WrvpsKwroVuMEYjnwkHK3E95JtHxZqbqHRDno8dAKBA=)
2: FD33BACA1E5211EBA055EE2BC4F9AE02.roa (hash: Dkqf9iSh4QQJs2mZkJEMgbT0BzwzhORuJVYaCkXmjeU=)
3: D39C89F8B85D11F08E813B1BC4F9AE02.roa (hash: CKukLwiY2YCCZ2/mXRrRk0YTk3jfh0JJwF1Hg6Cz4Og=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.crl
rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 02:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1979 (0x7bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A29A1, serialNumber=F1BB79E56D2B098692CC7D1F226F756C7961E19B
Validity
Not Before: Nov 3 02:36:00 2025 GMT
Not After : Nov 10 02:36:00 2025 GMT
Subject: CN=69081510-6b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f3:df:90:b7:79:f1:bb:61:18:00:4e:c8:3e:
b1:ad:96:7c:7e:c0:8b:52:61:38:e2:b7:b1:de:e1:
83:c9:7c:7a:5e:ba:1c:46:bb:be:b1:32:c9:35:b0:
b8:f4:bd:88:67:d1:63:8b:7b:1b:c3:d5:f7:a4:ef:
10:14:bc:96:5f:4c:3f:59:8e:0e:09:3c:65:20:74:
8f:eb:f1:cf:ae:96:df:cc:5c:89:80:bd:5f:01:7f:
30:27:48:e8:28:45:29:9e:f1:9e:2e:bc:54:ff:9b:
19:3b:b5:cb:db:dd:dc:98:93:ad:9a:3b:46:ae:f3:
06:95:f0:6a:2e:43:19:c7:9d:6b:7d:ef:f1:19:de:
06:69:40:be:b5:f6:5b:5f:c8:e6:8a:79:15:2d:42:
cb:85:0f:bf:d6:2e:21:3c:14:5e:5b:7f:fd:4b:ad:
de:04:9f:08:12:34:43:61:ce:e5:b1:91:4b:fd:fe:
54:36:f5:5b:61:d5:3d:99:0f:a1:75:30:42:04:0d:
47:77:69:88:86:bc:18:50:69:70:07:f5:97:d3:85:
db:a8:bc:81:69:a1:31:66:0c:7b:5c:f9:60:8a:93:
f7:d7:87:36:e2:76:5b:21:eb:07:57:80:da:6e:7d:
99:09:74:09:69:b1:50:1b:0f:fe:03:ef:fe:44:49:
6d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DF:FC:95:3C:43:C2:DD:6D:B3:6C:A1:9D:DF:DF:42:C9:7F:44:42
X509v3 Authority Key Identifier:
keyid:F1:BB:79:E5:6D:2B:09:86:92:CC:7D:1F:22:6F:75:6C:79:61:E1:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:d4:82:bd:4d:35:9d:c7:c3:49:dd:c8:00:ed:1c:3f:5e:46:
e8:ce:97:e9:1b:ed:0d:89:42:9e:6a:af:69:fc:8b:3f:dc:55:
ce:58:7c:db:82:f9:ec:18:7e:90:40:aa:8d:77:0c:6b:34:ec:
fc:66:ae:32:b5:77:df:d5:06:02:42:6f:35:f3:4e:73:32:1f:
21:38:b9:33:4b:12:04:8b:4e:91:26:94:f5:f1:fe:5f:13:9c:
1f:82:d7:37:99:84:f3:a1:af:6f:19:5b:73:f4:3c:25:92:25:
94:1d:fe:db:ac:16:d9:bc:12:c3:e1:79:b4:4f:18:3b:d4:ee:
b2:a4:fa:32:36:51:bc:d0:ea:0c:39:9c:5e:9c:8c:65:9c:dc:
96:1d:40:79:63:60:36:7a:ba:f8:6e:16:64:b7:bb:0a:c9:82:
f1:6a:52:b5:07:39:c5:8e:26:7c:3c:ae:a2:9b:35:a0:f0:22:
d7:ac:ed:4b:38:e6:f2:52:f1:92:c5:bc:24:f5:51:41:d3:ea:
2c:f9:42:a9:2b:59:70:cf:eb:e4:47:54:ce:de:39:44:a6:3e:
10:e4:cb:8a:c9:e4:60:02:f4:c4:ac:34:46:50:c8:27:3b:67:
47:81:64:4d:91:02:34:fb:97:d3:f2:70:e0:ca:95:35:f0:ab:
fd:ca:3d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:31:26 2025 by rpki-client