
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft
File: AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft (raw, json)
Hash identifier: F1zxJ/6LnlTTYItfDW+WjhKyTB7shv1+XMMPnWbuWpY=
Subject key identifier: 9D:EF:67:25:48:71:5A:E5:75:85:BD:D5:33:26:AF:20:64:70:ED:B2
Authority key identifier: 01:B6:DB:4B:F1:D3:3A:34:1F:47:60:A9:8C:85:F8:76:10:3F:AE:E9
Certificate issuer: /CN=A91A3C52/serialNumber=01B6DB4BF1D33A341F4760A98C85F876103FAEE9
Certificate serial: 0179
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft
Manifest number: 0174
Signing time: Wed 05 Nov 2025 03:59:25 +0000
Manifest this update: Wed 05 Nov 2025 03:59:24 +0000
Manifest next update: Wed 12 Nov 2025 03:59:24 +0000
Files and hashes: 1: AbbbS_HTOjQfR2CpjIX4dhA_ruk.crl (hash: yo2MJl+c4px+U2S/AhyvMTLp/BoUbCr1dkq7ju+W3k4=)
2: 110A7248841F11EEAF514B09C4F9AE02.roa (hash: K6AeShDx5+I/nCnkd6XWtADIagUHyyAB2FaUjuCmbW8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.crl
rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:59:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 377 (0x179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3C52, serialNumber=01B6DB4BF1D33A341F4760A98C85F876103FAEE9
Validity
Not Before: Nov 5 03:59:24 2025 GMT
Not After : Nov 12 03:59:24 2025 GMT
Subject: CN=690acb9c-b079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d3:f9:b6:07:c3:80:81:35:20:5c:de:13:20:
1e:4e:98:23:05:0a:ee:57:da:f2:1c:f3:ec:67:4a:
bb:0b:43:8e:7d:2d:61:8f:97:17:c6:d3:94:81:b7:
87:24:f2:4a:b4:71:d7:75:b7:a9:60:bd:72:63:05:
ed:c0:54:46:24:2f:66:4a:3f:b8:36:76:13:46:ff:
c9:10:f5:a1:61:38:28:6d:30:25:0e:4f:63:1d:aa:
bd:c6:17:42:f5:2a:5c:99:88:e7:01:69:94:a0:3a:
c8:fc:bd:b8:06:f5:4a:fa:45:93:c5:bb:2e:fa:e4:
77:89:48:07:3d:6a:39:7d:31:4c:0b:bd:be:8d:75:
0d:7e:7d:70:c1:b3:7e:a0:ed:0b:4b:c3:4f:4d:03:
3f:00:19:eb:c9:d2:d5:bd:ec:09:f6:81:97:c5:08:
a5:2c:13:dc:ce:e5:c8:61:ae:5e:b5:de:4a:ea:ff:
28:38:89:54:bb:23:bc:09:c3:9c:dc:74:30:5b:18:
e7:ae:b4:0b:bc:cb:fe:39:1a:3b:c4:87:47:f1:b2:
59:26:a1:13:c4:35:30:93:08:66:18:b0:07:ce:57:
ab:f7:71:b8:83:6a:69:b0:81:b1:54:41:69:79:49:
52:e4:35:5d:dd:10:8c:1b:81:c9:91:7f:d5:88:36:
f4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EF:67:25:48:71:5A:E5:75:85:BD:D5:33:26:AF:20:64:70:ED:B2
X509v3 Authority Key Identifier:
keyid:01:B6:DB:4B:F1:D3:3A:34:1F:47:60:A9:8C:85:F8:76:10:3F:AE:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6d:c2:f9:0e:16:38:69:b0:a0:89:cb:8c:b6:52:40:bc:6f:
fc:80:33:e4:b5:eb:83:6d:bd:e0:9c:82:c7:7f:de:75:ac:da:
cf:2a:45:1a:4a:24:1a:77:a7:43:1e:bc:9f:cd:5b:11:fd:56:
2b:6e:63:56:32:b9:bf:80:b9:47:b5:20:dd:a3:97:38:35:a4:
7f:ec:0c:14:14:d2:e1:61:24:7c:72:38:ad:3a:03:44:c3:36:
79:35:71:f2:03:36:76:dc:d1:c6:9f:b0:fd:6c:9d:c3:b8:71:
01:b2:0d:0e:e1:6d:f9:69:76:3e:0e:3a:f5:a5:cd:c5:c3:93:
fa:66:13:0f:3e:ab:a9:2e:93:56:ad:3b:e5:59:71:de:a3:ac:
17:c7:3b:1c:5b:a5:cb:69:d4:5a:f5:bf:57:14:0f:95:b1:be:
22:dc:43:0b:18:38:13:58:67:a1:22:fa:14:95:f4:64:1c:60:
ea:e4:36:4a:b5:fd:5f:e6:6d:e6:53:a9:e0:44:76:27:00:f1:
48:0d:7e:e9:c2:35:1b:88:6a:c9:10:6e:ab:94:16:ce:e7:f1:
a7:9e:8a:08:26:94:6c:61:d6:9c:44:bc:17:f3:c5:ce:02:5c:
7c:f8:69:5a:d6:3b:ea:37:b9:17:bd:45:97:90:54:63:b7:89:
e1:da:10:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:09:39 2025 by rpki-client