
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
File: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft (raw, json)
Hash identifier: FbaHlD4nWYfVS5XVdlza9faJOUBCERQ0bWrgIVwiPao=
Subject key identifier: 92:A7:46:F5:89:D4:E4:2D:97:32:B2:52:CA:3D:2D:93:54:ED:10:FE
Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
Certificate issuer: /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Certificate serial: 0BDF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
Manifest number: 0BB8
Signing time: Sun 26 Oct 2025 19:26:05 +0000
Manifest this update: Sun 26 Oct 2025 19:26:05 +0000
Manifest next update: Sun 02 Nov 2025 19:26:05 +0000
Files and hashes: 1: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl (hash: /MpBRVpFPDEBy/RROEKDWyzeym3TBR4P7GfY56HLlrA=)
2: 933DE524C2B811EEAA1FD486C4F9AE02.roa (hash: tyjFJevU8AODc6eNF2UQBkVwZ0moxe8IcDHkpfRnepA=)
3: F8088528E65D11EDB5112931C4F9AE02.roa (hash: 2Y1qjCmLTaBuW+PY4V12Zh62AUY0iuAkYOwDBibrsjY=)
4: D9173AE459E811ED85614349C4F9AE02.roa (hash: 1x/xZd5ESf0eokaSQgyIvd0x7KIP8tNAt27myAiJemw=)
5: D7D5B86859E811ED85614349C4F9AE02.roa (hash: ToUAACqSoKf4DVOKi8qBNbQLxDQKu5PGsZOisylfuaw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl
rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Nov 2025 19:26:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3039 (0xbdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8405, serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Validity
Not Before: Oct 26 19:26:05 2025 GMT
Not After : Nov 2 19:26:05 2025 GMT
Subject: CN=68fe75cd-bf28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:61:3e:dc:f5:b2:bd:78:14:18:9a:95:3a:b1:
49:20:2f:81:a6:04:5f:bc:68:76:bc:05:79:04:d4:
d2:d5:74:a4:45:cd:40:b7:4e:89:bf:e3:ab:62:b8:
16:f3:dc:1f:e5:d3:f8:3f:38:65:f9:7e:10:c3:3d:
48:bb:04:aa:76:e8:0e:7a:ce:67:3a:62:b4:88:26:
2a:31:3c:ea:3a:7d:84:33:c5:d2:3e:e9:c6:1f:c3:
1e:67:e0:ce:93:1a:ed:43:ec:8e:52:6d:4b:a7:59:
86:11:70:98:e0:31:97:92:e7:33:e6:2b:5f:d4:43:
30:c9:fe:4a:aa:f8:10:91:18:58:ca:67:a1:37:58:
9c:2b:ac:fd:cd:a6:f3:f6:be:a3:cc:b6:6f:16:ce:
43:78:98:d4:4e:4d:58:78:17:24:4f:6f:90:9d:c2:
6a:41:86:25:9a:40:ba:25:ea:95:33:3f:8d:14:5a:
2c:dd:3b:75:ed:65:13:af:59:b8:17:47:58:ec:0d:
ae:12:62:f8:c2:52:3d:be:61:08:89:70:82:f3:2e:
cc:44:0c:70:a7:b7:50:d4:9c:d7:25:5d:58:73:60:
f5:86:6b:f7:36:87:99:2e:68:1b:0b:30:44:c0:67:
d0:92:4e:3c:b7:23:dc:55:e2:f0:fe:40:3c:bd:6b:
e7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A7:46:F5:89:D4:E4:2D:97:32:B2:52:CA:3D:2D:93:54:ED:10:FE
X509v3 Authority Key Identifier:
keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a9:2c:6e:79:27:ca:ec:bb:45:2b:c0:a4:75:c1:4c:58:1b:
dd:2e:52:8d:36:c3:24:7e:54:86:7b:92:22:bf:35:58:f0:9f:
b2:6c:73:a0:02:e7:35:4b:c0:75:b5:e6:78:17:62:0f:a7:b4:
23:43:7e:e8:58:53:a3:e3:79:00:96:0a:4d:b0:08:20:3a:d5:
7e:a4:72:c8:9b:4f:06:35:fe:a6:47:c5:e7:36:bd:dd:1e:0e:
5b:f4:01:ef:c0:87:09:7b:ad:07:42:e6:ea:35:68:1d:8c:f1:
fa:f6:50:5f:fd:86:cb:16:7b:e7:b3:57:00:29:0c:68:72:d7:
82:9f:b3:2a:b0:15:25:75:15:50:53:ce:84:7e:81:19:4b:98:
3f:2e:15:36:ba:2c:d4:98:0d:bc:f7:cc:44:48:fb:7a:11:b1:
9e:f2:24:21:8d:aa:41:38:16:f5:a6:3b:0f:5c:4e:c9:db:f3:
a0:b7:39:8f:98:97:e5:7a:d2:31:b9:36:cf:e4:f3:e7:56:35:
dc:80:14:7c:95:1f:5f:b7:a2:51:f8:d1:c6:68:e6:f8:49:41:
1e:5d:65:7e:31:90:c1:5a:d2:72:a8:b1:fd:02:bc:64:18:a3:
c9:f5:c7:08:42:db:10:0d:d7:42:34:b2:7f:c3:fb:c6:36:64:
c6:ea:99:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:59:30 2025 by rpki-client