
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
File: uu94943Hy_m3MScKqxBp9eNDPLs.mft (raw, json)
Hash identifier: nPkGr0E9WjhbsJ43UooDXzK47HaAzSugQUxOkpcw/eQ=
Subject key identifier: 48:B2:17:B7:5C:6F:2A:37:2C:99:DA:F7:42:57:94:1E:C9:52:EC:6A
Authority key identifier: BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
Certificate issuer: /CN=A91B61A7/serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
Certificate serial: EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
Manifest number: E7
Signing time: Mon 27 Oct 2025 07:39:04 +0000
Manifest this update: Mon 27 Oct 2025 07:39:03 +0000
Manifest next update: Mon 03 Nov 2025 07:39:03 +0000
Files and hashes: 1: uu94943Hy_m3MScKqxBp9eNDPLs.crl (hash: fHO3FInsTlC5S2atOR11aahYW3Di1X+1ig80KAYfTu0=)
2: 0FB823502CB011F0A2157E15C4F9AE02.roa (hash: SNFqVWFy/zXpL+IO4VqM1BTZFXQSMMWQWnpzgvn2Vas=)
3: 286AB0F22CB011F084E4A915C4F9AE02.roa (hash: ZhBtT8PPZLIx6KpVofQIdCfnHMsDO/G3FnbenkGUmNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl
rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 07:39:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B61A7, serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
Validity
Not Before: Oct 27 07:39:03 2025 GMT
Not After : Nov 3 07:39:03 2025 GMT
Subject: CN=68ff2198-6b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7d:4a:ca:06:26:cc:3c:6c:99:66:4f:f1:5b:
1c:13:8c:83:a3:65:32:5b:3a:88:15:2b:85:e7:34:
7c:3f:cd:ea:87:74:d5:57:67:6a:71:48:9e:6a:d0:
20:ed:6e:d8:8c:41:89:8b:e4:b3:24:64:89:f5:9f:
7e:eb:4f:93:f3:ca:0b:11:7e:16:bd:21:d9:fe:cb:
a5:fe:90:e1:16:85:64:f2:02:c6:3c:d8:12:fb:3e:
4b:bc:bc:d7:a6:c0:0b:ae:c1:72:d1:e1:8b:a4:76:
7e:c0:cf:01:5b:1b:52:a0:86:d0:d7:ab:3a:d7:79:
c8:21:c3:87:37:39:3e:69:ee:9d:ae:a5:de:a1:4e:
cb:aa:31:7f:94:da:49:49:54:86:e4:e9:ad:7c:23:
a8:f9:c3:9e:d5:9a:53:65:c0:9f:db:90:ed:10:bf:
a7:2e:2b:23:c7:04:9a:de:77:95:94:33:71:ad:9d:
a2:79:a5:2c:59:fd:2d:9c:37:73:80:b1:8c:fe:87:
b0:8b:46:2e:e5:a3:d9:19:4c:82:bc:cf:7e:c6:30:
ec:53:7e:a9:17:e6:ca:ce:e6:b1:e4:d4:7b:d9:58:
03:a4:05:5a:b4:fc:50:75:34:a8:cc:5d:64:b0:57:
54:3e:88:c0:53:1d:76:21:64:01:82:bd:df:1f:3d:
c1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B2:17:B7:5C:6F:2A:37:2C:99:DA:F7:42:57:94:1E:C9:52:EC:6A
X509v3 Authority Key Identifier:
keyid:BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:c9:ca:74:65:d9:b7:9e:d8:a2:68:0a:3a:38:bd:c2:92:92:
62:43:32:fc:5e:2b:3c:4a:77:c0:18:35:b7:30:c3:a0:43:9c:
8f:98:18:0f:de:89:88:d0:3e:f0:94:48:8c:b3:a9:7a:33:1b:
2c:f1:6e:22:8a:25:50:45:a6:42:68:d1:41:47:11:90:5f:35:
21:e6:55:93:19:3f:e9:ac:a4:a0:cf:d9:66:91:7f:9b:4c:3f:
27:e0:24:50:c5:de:3d:b7:b2:9e:c8:8f:3c:dd:bf:c0:8b:6a:
40:e5:f2:1d:90:19:0f:a8:18:ed:44:7a:42:ff:c4:5f:07:52:
95:8b:51:a6:fa:09:a0:8f:f9:d1:0f:30:09:70:36:b5:67:f2:
ff:27:a8:be:fb:95:a8:f0:57:44:ce:4c:86:c1:48:6c:89:bb:
65:77:24:5d:ed:86:d8:7a:ab:eb:7e:ed:4b:07:16:c3:6b:29:
b3:cd:ce:45:5f:ec:d4:28:24:da:8d:b1:7f:54:9f:44:58:6a:
36:4c:30:3a:47:b8:7a:ed:5f:49:b7:15:5a:73:de:63:c1:de:
b3:f1:e9:66:c7:25:d8:00:66:2c:82:61:25:a6:5b:fd:53:56:
13:eb:b2:c5:d2:ad:01:f1:b1:5c:0d:25:6d:eb:79:1d:29:88:
ac:83:a1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:37:00 2025 by rpki-client