
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
File: AwUYVzXgl--zaoYGU7JTq-n-EVw.mft (raw, json)
Hash identifier: Tw77K2iy/5he7+noN9Col3uccs5WV3Wftph7qNzrG8E=
Subject key identifier: 76:0B:47:F9:E1:E9:AF:DF:AD:3B:D1:29:CA:69:5F:54:73:AD:C3:17
Authority key identifier: 03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C
Certificate issuer: /CN=A91AEE40/serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
Certificate serial: 02D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
Manifest number: 02C9
Signing time: Mon 03 Nov 2025 01:22:50 +0000
Manifest this update: Mon 03 Nov 2025 01:22:49 +0000
Manifest next update: Mon 10 Nov 2025 01:22:49 +0000
Files and hashes: 1: AwUYVzXgl--zaoYGU7JTq-n-EVw.crl (hash: 7UlkeUr2ws4PSr/98eRjgEyEISPSGfz4sa4BKbOR/z8=)
2: 411831E23FC011F097A38852C4F9AE02.roa (hash: Z3YuqjlFc86KvX6uGgqRo2M31ge97SaPeoOB1KbRkKk=)
3: 485DCAA8418111F093EDEF69C4F9AE02.roa (hash: 98L2p4S3Z9XBKGOrvf/7lu6oUXBZwojag9kKA7jW8zY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl
rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 01:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723 (0x2d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEE40, serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
Validity
Not Before: Nov 3 01:22:49 2025 GMT
Not After : Nov 10 01:22:49 2025 GMT
Subject: CN=690803ea-e2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:31:aa:85:8e:5f:a6:06:69:de:a4:01:1f:
6f:c2:43:42:25:a7:87:14:fc:f8:0d:36:9f:80:2a:
0e:da:cc:26:e9:f3:68:a9:27:41:4f:e3:6b:83:8a:
29:83:17:31:65:6a:38:70:4e:23:02:4a:13:e4:5c:
02:4d:ce:47:a1:0c:fb:29:35:4f:60:a2:8b:44:1f:
bd:81:d7:e1:b9:a3:0e:b0:02:98:6c:c6:58:a9:f5:
30:2d:0f:eb:d3:1f:57:f1:52:0a:f6:f9:6f:8e:dd:
a1:fe:2f:0c:74:5c:97:7b:da:d0:d2:28:61:9d:3c:
0d:de:07:a0:25:e9:3a:4b:94:43:75:cc:0b:ad:65:
e8:e7:cf:ef:1a:66:ff:90:7f:ea:3b:de:70:94:67:
8b:db:24:bb:a2:22:77:cc:9d:75:11:58:d4:8a:ee:
a7:fe:c0:05:ba:50:92:f4:a5:cf:39:6a:b0:09:4e:
68:8a:fa:76:31:7c:81:d8:26:af:49:81:23:5f:41:
c7:69:ed:1c:2c:23:db:80:c7:88:16:93:d3:35:10:
62:b1:31:83:87:c4:d5:0c:27:fd:39:81:cc:61:e5:
67:0c:7f:b3:67:2d:41:9a:d7:b3:79:87:93:5a:30:
da:6c:5d:5b:4b:72:f6:c5:9c:01:ae:e9:ea:6c:98:
30:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0B:47:F9:E1:E9:AF:DF:AD:3B:D1:29:CA:69:5F:54:73:AD:C3:17
X509v3 Authority Key Identifier:
keyid:03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:1b:57:98:98:e3:90:5e:7e:46:0b:88:3d:97:36:ac:d1:8a:
1d:20:2e:07:dd:e3:4e:48:c7:b4:c2:8c:e0:c7:2e:dd:12:3c:
99:cb:2c:fb:1c:ba:ca:ee:0b:c9:c7:85:91:ae:f7:3b:55:b7:
27:f2:3b:3a:ad:47:18:3f:39:0b:55:32:1a:63:71:e2:24:30:
35:72:5a:10:b3:e9:55:ef:c4:c5:bd:8f:a3:31:da:8b:41:05:
92:25:a8:1d:bb:7a:f9:0a:eb:a4:01:93:fd:d3:7d:7a:5e:2d:
07:6b:a7:4e:6d:f6:a4:21:52:76:da:b2:71:93:d7:82:26:28:
e8:d5:be:36:20:19:dc:42:8c:85:98:14:c4:a3:f2:21:69:47:
09:aa:b6:24:d6:51:c9:bf:ba:05:90:75:eb:11:02:20:3b:09:
e4:04:ec:f8:ef:ba:87:0a:28:4b:fb:36:da:12:74:09:75:09:
e3:7c:67:08:b0:e1:55:e2:69:60:f8:dd:36:e9:e4:fb:b7:e5:
6b:51:b1:05:85:c4:86:b5:0d:11:34:8b:73:97:11:b9:fe:12:
67:8b:e9:f2:33:e4:fc:32:c6:80:04:9d:1f:08:fe:83:53:b9:
0d:db:e2:0c:02:f6:85:c3:b6:c1:3a:6b:84:59:a7:40:a3:6a:
62:9d:0c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:17:04 2025 by rpki-client