
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
File: Z187oflqnh7CsBN2YsdU2x0eAHM.mft (raw, json)
Hash identifier: ZprWbSgj0sSesjpTq/WkhKYSxEz/5+vAhxM8YBin27w=
Subject key identifier: 64:BD:E1:94:DE:79:DE:93:19:04:3B:5D:C5:AB:13:B1:A8:88:18:1B
Authority key identifier: 67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73
Certificate issuer: /CN=A91A4517/serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073
Certificate serial: 2965
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
Manifest number: 2944
Signing time: Sun 02 Nov 2025 15:35:27 +0000
Manifest this update: Sun 02 Nov 2025 15:35:27 +0000
Manifest next update: Sun 09 Nov 2025 15:35:27 +0000
Files and hashes: 1: Z187oflqnh7CsBN2YsdU2x0eAHM.crl (hash: qV/PMbhJD0V9n7mRFESrESrvziXGkSDZwCzjqQ3MySY=)
2: F4246CDA561811E98A165872C4F9AE02.roa (hash: C/PaFQfpTy7SRBE+0XzPzL+bck/ugVag2KSCjWGbACs=)
3: 58292E96774111F0A079543BC4F9AE02.roa (hash: cB0aG0QBKc7lbuLj1XFyRNR3680AdznFwoFOUAcWcEg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl
rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 15:35:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10597 (0x2965)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4517, serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073
Validity
Not Before: Nov 2 15:35:27 2025 GMT
Not After : Nov 9 15:35:27 2025 GMT
Subject: CN=69077a3f-bec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:16:30:63:fc:34:81:65:8e:b0:57:f6:c5:db:
9d:93:51:2c:cd:10:23:ab:15:fa:12:d0:f8:62:da:
e4:92:13:cc:44:c8:7c:4c:b6:2f:f7:cb:fa:d0:ef:
6d:11:48:9f:07:d3:4d:94:48:7d:4e:0f:fb:dc:cf:
a7:26:80:d3:32:e5:96:22:6f:7d:94:51:1b:1d:78:
e6:2c:63:75:33:e6:7a:02:8e:bc:07:80:08:9f:eb:
bb:19:d4:07:0a:3b:04:f9:3c:b4:62:94:f4:60:5c:
9b:75:0d:0d:e1:ea:ca:84:ad:dc:a8:ee:4e:63:bb:
2b:0b:79:19:b6:ad:f5:ab:2a:34:b8:5d:8d:6e:4f:
71:2e:e5:80:f0:1a:de:e0:fa:4b:ca:d5:b5:bb:89:
13:f0:74:c1:33:4e:cb:08:a8:b6:54:84:15:95:26:
58:5f:d2:c7:dc:1a:fa:a7:bd:0e:84:e1:93:8f:c9:
33:68:2a:61:3f:44:fb:61:dc:16:cd:a9:59:fd:58:
9a:f2:84:bf:38:16:89:5b:a4:51:ca:6c:5f:3f:8e:
07:d8:bf:12:eb:9c:8a:af:4f:8c:44:7f:e3:7f:b8:
10:50:f1:5c:68:e1:49:49:2e:ce:40:57:6d:40:b9:
40:6d:7a:1e:ab:b1:1e:c8:27:50:e7:e2:af:ad:19:
ec:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BD:E1:94:DE:79:DE:93:19:04:3B:5D:C5:AB:13:B1:A8:88:18:1B
X509v3 Authority Key Identifier:
keyid:67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:28:c8:23:d4:ba:3f:82:9d:77:34:e2:ed:67:d6:7a:76:94:
e6:b5:da:09:09:ee:b0:91:33:42:2a:78:f0:9d:8d:67:69:e2:
30:41:19:1e:90:9e:0b:c2:91:07:f3:e8:54:d2:ac:24:7f:5c:
34:81:99:69:90:b1:27:da:31:bd:30:9b:aa:5d:f3:fb:3d:06:
45:c2:ef:43:e4:1e:a7:2e:e3:ff:be:b9:2e:61:1d:03:95:f3:
04:8e:2a:9c:8c:c1:1b:70:df:07:7c:0f:2c:da:ac:6b:10:8c:
8d:7f:90:9e:74:9d:04:21:bd:d7:ba:7e:4b:fa:a6:ae:54:d0:
d8:a2:c5:8a:39:00:60:31:e5:ea:27:66:96:d1:52:8e:1d:66:
17:4f:3a:11:cf:51:35:e1:7f:2f:44:30:7f:0a:c3:f9:f9:36:
ce:4a:f9:7b:95:b6:10:5f:11:a5:57:d2:60:ff:2d:84:db:43:
93:3b:6d:11:ab:4c:a6:0f:c2:24:d3:12:9a:97:3d:5f:5f:11:
04:5c:c1:3a:b7:19:5d:81:50:5d:e8:f7:25:54:25:ca:9f:dc:
c2:4e:c2:e5:78:06:04:1e:ba:0c:e0:2b:d0:fc:5e:a0:8d:da:
32:01:d9:e2:9d:a5:a1:56:4f:cd:d3:8c:b9:79:29:7e:ff:3a:
04:c1:47:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:14:36 2025 by rpki-client