
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
File: 2cuKblTiS1D0r_v6oFlb_YECQ-4.mft (raw, json)
Hash identifier: 8g1a65RZpgDkQVK1RTjgpYMTqvvMb4yEJhMrk+5pLZo=
Subject key identifier: 15:4D:C4:F1:E8:C5:DE:30:3D:41:19:AC:5F:3C:80:68:A8:B8:12:AE
Authority key identifier: D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE
Certificate issuer: /CN=A91AC4DB/serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE
Certificate serial: 077F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
Manifest number: 0779
Signing time: Sun 02 Nov 2025 21:33:36 +0000
Manifest this update: Sun 02 Nov 2025 21:33:35 +0000
Manifest next update: Sun 09 Nov 2025 21:33:35 +0000
Files and hashes: 1: 2cuKblTiS1D0r_v6oFlb_YECQ-4.crl (hash: 281zlOusB7beG4f4zQ2P6VR3jjdIuh0+q048LB0GsBc=)
2: 4157856E347511EB84CD472CC4F9AE02.roa (hash: 1oTkQQCTVWfVOHdZtNZH2BhFNuE/kcLMf9xIB/q3J40=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl
rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:33:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1919 (0x77f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC4DB, serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE
Validity
Not Before: Nov 2 21:33:35 2025 GMT
Not After : Nov 9 21:33:35 2025 GMT
Subject: CN=6907ce2f-3037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:6b:05:7f:fa:51:8c:b1:71:4a:1e:6e:7a:
17:98:f8:f7:2c:29:21:f9:60:b5:ec:0e:88:43:d2:
0c:8a:db:ae:d9:af:e8:e1:ea:8e:79:58:ea:23:3a:
6c:cc:3f:c7:69:3e:f4:db:15:e5:46:f8:3c:4b:f1:
61:70:32:93:e4:4d:eb:c6:47:af:60:df:c4:3d:6d:
f3:28:60:95:ad:af:99:aa:43:96:6c:a8:78:f0:5e:
56:76:41:79:f0:64:d0:34:ac:78:d7:f2:2f:d8:95:
39:0c:6a:c2:98:fd:66:bb:54:7b:dd:3f:70:47:e4:
51:23:1b:4c:0f:bc:a9:b1:ce:7e:67:16:ff:a6:83:
30:00:8d:4e:1c:3c:2a:2a:80:1b:01:37:e7:6d:50:
f7:ff:ac:f9:ae:8e:7d:0a:75:bd:45:d8:86:1d:44:
58:bd:de:ea:41:76:a2:fc:0a:49:c2:2b:2c:82:8e:
89:58:42:18:79:41:d1:ed:7a:96:63:7c:58:bc:92:
60:ff:e1:6b:85:2e:cc:f8:94:15:b2:a2:0f:d3:c6:
12:1a:10:a7:85:f0:0c:91:29:5f:f1:ae:5b:52:ae:
70:69:7f:44:16:c9:c3:c5:6b:6b:a4:f3:73:46:24:
db:eb:27:11:65:63:de:a4:b5:0d:fa:4d:0f:9f:14:
10:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4D:C4:F1:E8:C5:DE:30:3D:41:19:AC:5F:3C:80:68:A8:B8:12:AE
X509v3 Authority Key Identifier:
keyid:D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:a7:d3:5b:9a:fb:f9:3f:32:36:0e:ac:7f:73:5b:41:3c:a3:
c8:1b:0c:db:ac:14:b4:22:58:4b:ef:49:df:25:1e:62:e4:92:
3d:98:fe:15:03:33:1c:4c:61:91:12:d6:6e:19:9f:a3:75:64:
fe:d0:0a:2c:32:86:ec:26:79:0f:e3:94:bc:a4:f6:8d:51:55:
41:43:05:1a:be:e5:06:b9:71:72:98:67:6c:56:ea:7e:6a:ed:
88:d7:5d:a8:10:e1:98:e9:6f:55:a1:57:4f:df:dd:d3:8a:34:
3d:7f:99:50:95:57:14:64:75:c4:fa:b7:98:33:14:30:d3:52:
d0:7f:c3:be:93:02:12:b1:b4:e5:0c:ec:52:05:e4:06:69:d3:
14:14:3f:cb:61:55:32:8e:79:04:15:9f:83:67:4f:e4:14:58:
2f:d7:7f:5c:5c:24:fe:8c:f0:dd:ef:9d:17:db:ce:d2:e8:a1:
82:93:30:e7:69:55:df:7c:47:09:ec:c3:b4:da:02:2c:a8:75:
7d:36:bb:da:73:6e:15:2a:b9:45:77:75:9b:7b:bd:6c:ba:74:
8d:b3:a3:8d:05:aa:3b:ed:9b:9b:7d:ad:6c:87:03:17:6d:cd:
52:80:2e:96:ed:78:34:8a:e1:b9:e5:75:b8:ec:b9:32:ae:2f:
fd:8b:47:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:10:22 2025 by rpki-client