
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft
File: Ny468IjbN1qP-RmFiy3MXH_Epeg.mft (raw, json)
Hash identifier: cqLAPZw3SlhgHe+ZsFcF1+BxkmGgAijOdDEeGjx3GpA=
Subject key identifier: B9:CA:D5:63:0F:1C:64:DC:BD:74:39:98:02:12:8F:02:7C:6D:E8:AF
Authority key identifier: 37:2E:3A:F0:88:DB:37:5A:8F:F9:19:85:8B:2D:CC:5C:7F:C4:A5:E8
Certificate issuer: /CN=A91A679F/serialNumber=372E3AF088DB375A8FF919858B2DCC5C7FC4A5E8
Certificate serial: 079B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny468IjbN1qP-RmFiy3MXH_Epeg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft
Manifest number: 0788
Signing time: Sun 26 Oct 2025 22:18:55 +0000
Manifest this update: Sun 26 Oct 2025 22:18:55 +0000
Manifest next update: Sun 02 Nov 2025 22:18:55 +0000
Files and hashes: 1: Ny468IjbN1qP-RmFiy3MXH_Epeg.crl (hash: kMPyUlULQZFPooYOeOARKR+42uyJjkNkPm5KoYd1dGw=)
2: B033793C686D11EE8607594CC4F9AE02.roa (hash: JOi7OHLhFtdHcYqhgYyNkkEIbuwvBfapNIuWdidQbmc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.crl
rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny468IjbN1qP-RmFiy3MXH_Epeg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Nov 2025 22:18:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1947 (0x79b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A679F, serialNumber=372E3AF088DB375A8FF919858B2DCC5C7FC4A5E8
Validity
Not Before: Oct 26 22:18:55 2025 GMT
Not After : Nov 2 22:18:55 2025 GMT
Subject: CN=68fe9e4f-2a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:04:04:dd:cd:b5:bd:db:87:a7:e8:a2:47:
a2:16:2b:30:39:cc:1e:85:f5:63:97:10:09:cf:4e:
59:4c:42:05:3e:80:bc:52:62:67:04:21:b1:16:06:
af:b3:b4:c9:a6:69:cd:9c:f1:d5:6a:09:ae:1d:92:
f8:62:dc:54:82:0a:f4:fa:94:c9:c1:e0:dc:05:9b:
18:da:76:8a:8a:fe:b8:d5:fa:39:d0:5a:5c:ac:06:
69:06:af:aa:b2:20:5e:fd:9a:65:c0:b1:92:c9:83:
ae:03:1c:87:18:46:ab:d8:a4:c4:26:b1:e0:e0:f1:
03:79:e9:82:ec:8d:a4:88:7a:46:1e:dd:1c:0a:a0:
ef:b1:ec:3c:66:c3:65:75:36:db:d8:c9:99:2c:86:
d6:21:20:ce:7e:db:82:84:ff:ab:81:d8:68:bf:58:
03:52:d4:71:02:0e:9f:6a:39:59:00:9b:c9:e3:97:
80:c2:b9:89:7b:b4:4f:d6:a6:f4:79:a8:19:ae:5f:
aa:2b:bb:e0:85:68:2a:47:0a:89:df:8d:e5:8b:50:
8f:67:1f:9b:05:d6:38:ef:3c:95:68:a3:cd:e7:42:
03:f7:af:32:08:18:f9:4e:84:59:38:d9:54:b7:09:
98:07:60:67:5a:d4:8c:1c:02:c0:27:fc:29:80:97:
72:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CA:D5:63:0F:1C:64:DC:BD:74:39:98:02:12:8F:02:7C:6D:E8:AF
X509v3 Authority Key Identifier:
keyid:37:2E:3A:F0:88:DB:37:5A:8F:F9:19:85:8B:2D:CC:5C:7F:C4:A5:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny468IjbN1qP-RmFiy3MXH_Epeg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:a3:55:34:c7:6e:36:c9:51:1f:d8:7f:5a:1c:e8:6e:2f:fe:
09:c0:b0:98:e5:fe:6a:ef:23:41:8c:79:1d:93:83:e7:65:46:
f6:34:bb:4e:a5:a9:75:d5:df:c2:86:05:a4:d4:1b:74:49:66:
a2:2b:7b:c1:d4:21:63:9d:d1:bb:8c:13:82:ac:3d:01:db:24:
1f:b3:cf:f4:2f:a2:83:63:34:26:02:ee:4e:18:c8:ad:2d:67:
97:3f:8d:8a:04:0c:5a:84:7c:85:a6:b4:14:b4:60:c6:a1:95:
91:f6:1d:80:48:80:ef:be:f8:c0:69:76:da:88:94:1f:e1:2e:
63:dd:51:e1:15:51:40:9c:c6:ba:8e:68:5d:d1:d1:f4:8f:00:
1f:fc:c9:b9:77:24:dd:57:e9:f3:8a:5c:58:09:51:64:8f:cd:
50:30:2c:82:9f:eb:40:1a:94:bb:d5:0f:f3:d4:0d:c9:80:c9:
dd:30:41:60:a8:9a:88:f8:fe:41:42:ea:07:b6:ba:52:23:38:
e5:7e:04:2b:02:34:3a:c1:c6:5d:b5:97:47:1c:cd:93:31:96:
92:af:2d:f1:c5:f2:8c:1a:ed:57:eb:3d:cf:18:5c:8d:28:42:
e3:d7:e0:f5:50:7a:df:69:c2:9a:b5:29:1c:77:a4:86:81:1f:
7c:6c:e7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 00:38:48 2025 by rpki-client