
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
File: mraG48KZqn5EVUk0lbRrpadECZ0.mft (raw, json)
Hash identifier: C+7iPcIkb7TlESOOkN1IbRfqKeweKbvctlQ23cw6sgQ=
Subject key identifier: 13:43:0D:C8:43:89:F5:3F:2E:97:90:72:7E:8C:86:47:83:1F:43:C8
Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D
Certificate issuer: /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
Certificate serial: 0189
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
Manifest number: 0183
Signing time: Mon 27 Oct 2025 05:33:17 +0000
Manifest this update: Mon 27 Oct 2025 05:33:16 +0000
Manifest next update: Mon 03 Nov 2025 05:33:16 +0000
Files and hashes: 1: mraG48KZqn5EVUk0lbRrpadECZ0.crl (hash: POXCkSAX2QmRftRAKQDVkL79il8DwrozEjkvGJl8wIA=)
2: D633730A5AD711EF8665FF81C4F9AE02.roa (hash: zgC2BukFvqF6vF8m1zT1OqU7vAyEsCa9SdkeX8vwSl0=)
3: D6A69CF45AD711EF8665FF81C4F9AE02.roa (hash: sUPjSnVrnjmDdoMwCFJp2zuEZdscR4LvuhmHJ1v7ZYI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl
rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 05:33:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6D8B, serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
Validity
Not Before: Oct 27 05:33:16 2025 GMT
Not After : Nov 3 05:33:16 2025 GMT
Subject: CN=68ff041d-b7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:1c:8c:48:d8:aa:4e:27:75:72:b8:53:bc:
2a:41:9a:30:76:e3:5f:28:13:44:e1:f9:16:2f:a0:
b0:45:78:e4:27:16:cb:36:38:7f:a0:a8:24:22:a8:
b5:29:ab:50:5a:3a:8e:83:bf:44:4f:86:29:76:8e:
ec:fe:1c:f3:cf:5c:63:74:cc:7d:89:72:b9:7a:49:
be:d5:c3:6e:d8:c0:7d:84:c1:f1:11:6c:32:34:6a:
11:88:6c:c1:15:44:26:d8:ee:5f:f0:f4:ce:65:f1:
87:b1:b5:a6:fa:51:34:84:1a:6e:b9:1c:38:1c:e1:
fa:11:83:53:7a:d1:9c:a2:64:2a:de:60:73:1c:c1:
ce:3e:65:20:52:92:00:0f:18:49:e0:54:29:8b:39:
c3:5a:06:0e:92:de:52:a0:17:d3:b6:9e:06:4e:16:
7e:83:7c:05:93:88:02:a4:7e:be:01:57:ca:2c:7a:
44:55:91:6e:e8:fe:a1:7d:83:21:18:7b:8a:de:55:
0a:6a:1d:52:cb:2b:6d:d3:cb:ee:19:92:56:25:17:
62:cb:b6:a6:fe:7c:f4:16:9a:b4:28:0c:ec:0f:be:
26:cf:15:32:ac:20:aa:ca:ae:11:f2:f5:c2:0b:60:
12:40:4f:ea:d5:fe:9b:bc:97:1c:25:c8:ee:8f:ea:
7b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:43:0D:C8:43:89:F5:3F:2E:97:90:72:7E:8C:86:47:83:1F:43:C8
X509v3 Authority Key Identifier:
keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:1d:10:9f:f2:ab:e3:7d:e5:0b:b7:b6:dd:f6:89:5f:09:04:
22:0e:62:25:5f:bf:10:ff:41:56:e3:f0:e9:2f:5a:c9:08:dd:
eb:e8:61:e9:47:ed:67:ba:d4:2f:d0:ac:7c:fd:ce:01:46:85:
0b:6b:7c:e2:97:71:e2:4f:43:1e:ee:98:65:60:c5:e1:e6:d9:
0e:55:51:f1:8e:f5:26:6f:98:77:47:a3:30:ee:10:32:6a:66:
15:f3:f0:cb:e9:34:2a:ee:39:f5:f6:43:ae:77:bf:1a:1f:c4:
93:87:6a:fd:72:1d:0d:21:43:61:8b:e3:9c:e3:14:6c:c6:b0:
8b:38:55:7e:20:51:fc:45:8a:43:bf:ff:a7:19:6f:19:31:93:
1d:0e:81:a9:13:f9:07:d7:42:d9:8e:1c:3f:e8:8e:38:35:0c:
80:59:88:84:2b:74:87:99:de:36:65:1c:f3:22:3e:e1:63:5d:
db:1a:92:ff:dc:92:20:13:8c:d2:87:69:13:41:56:50:77:95:
78:ff:dc:d6:11:63:5a:02:00:3c:08:37:19:ce:c0:cb:26:a2:
80:e6:46:f7:45:95:e4:01:e4:8b:ea:dc:44:85:e7:25:2b:f7:
77:7f:12:a7:84:3a:c0:f0:0c:04:78:5d:9f:df:4e:f6:aa:2a:
27:9e:9b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 20:42:04 2025 by rpki-client