
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
File: bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft (raw, json)
Hash identifier: E4u7utC2z/NH3g+ZGcwnLPEF1jKp4W5f1Ht/DA9qpp0=
Subject key identifier: 6C:3B:6B:7E:12:FA:DC:3A:29:B6:0E:CE:45:FA:2D:7D:04:0B:91:84
Authority key identifier: 6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87
Certificate issuer: /CN=A91B933A/serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
Certificate serial: 2575
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
Manifest number: 255B
Signing time: Tue 04 Nov 2025 15:49:40 +0000
Manifest this update: Tue 04 Nov 2025 15:49:39 +0000
Manifest next update: Tue 11 Nov 2025 15:49:39 +0000
Files and hashes: 1: bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl (hash: l8w9uw+yOQPeyoXWSHSc8VSTw2dDMz+4TxOLmYRAfGI=)
2: C61B734AB0AA11E580DBF725C4F9AE02.roa (hash: Z754LG6nGQ06ZpUuHnHm6+5+zZq4bCVd8VqoVX/cCxs=)
3: AFB65238AFDC11EAB3910C71C4F9AE02.roa (hash: fuh0LlQyz61TwsZ3SUhqE5lyOndp84sYnyIIyPcvMCo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl
rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 15:49:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9589 (0x2575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B933A, serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
Validity
Not Before: Nov 4 15:49:39 2025 GMT
Not After : Nov 11 15:49:39 2025 GMT
Subject: CN=690a2093-7e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:35:09:fa:a6:f2:54:43:99:d5:74:77:b7:14:
01:f1:70:6c:70:1b:e4:66:d1:f9:52:54:1f:8a:bf:
67:cf:58:05:28:c2:93:18:d9:a1:8f:87:1d:a0:88:
79:44:97:4e:3b:1c:cb:aa:e5:2c:ec:cb:94:42:1a:
50:4a:e7:15:73:4a:32:17:13:4c:9a:58:14:8a:df:
e3:d6:c4:be:9b:5d:53:41:5e:a2:7e:7e:75:1b:c9:
ab:57:83:30:9c:48:eb:54:a9:9b:d5:c6:bb:d6:56:
87:e3:e3:ee:84:c6:32:bc:ff:7f:3b:23:14:85:c5:
e5:d4:bd:09:47:a0:d8:a3:ff:99:61:0b:25:85:b9:
c0:16:cc:19:3b:2c:86:58:8f:92:87:26:10:88:bb:
ca:a5:42:63:d7:5d:0b:1e:ce:89:99:5e:5d:0a:88:
74:a5:2e:25:54:25:1a:b7:42:7f:85:2f:03:b4:49:
14:bf:04:89:53:28:72:a6:95:57:c7:18:90:2a:74:
3c:d1:5a:a1:b6:51:cd:e4:bf:61:d2:27:0c:a6:88:
e4:53:14:98:20:d9:6b:61:b9:b8:41:aa:c0:84:a6:
05:b5:72:28:60:d5:c6:a1:90:bf:c8:66:eb:e6:73:
fa:c1:98:11:a7:36:c1:15:33:32:4d:c0:43:44:d3:
d6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3B:6B:7E:12:FA:DC:3A:29:B6:0E:CE:45:FA:2D:7D:04:0B:91:84
X509v3 Authority Key Identifier:
keyid:6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:58:28:11:76:de:cb:5d:9e:1a:32:44:59:bc:70:d2:f0:bf:
24:a9:b2:b4:74:cd:ba:a7:39:76:88:ce:06:16:a0:55:b4:5d:
c2:a8:22:1f:d5:9f:2c:24:07:3c:3e:2c:88:91:bf:2d:d2:9b:
01:1c:7a:2a:d9:bc:a4:2c:10:27:3f:cc:99:88:4c:85:0d:b2:
73:5f:6e:19:f4:21:6f:1d:0e:9a:19:a7:56:2a:e0:34:8d:29:
8b:b4:36:65:f6:fd:ac:b5:d5:85:03:d9:68:32:e1:6d:6f:36:
a6:bd:9a:a0:1b:58:a3:50:fd:1a:4e:14:44:98:e0:4c:59:ae:
79:e3:58:df:aa:76:b1:84:b5:a4:80:00:9f:37:ea:98:9b:dd:
6e:a3:3c:ad:2e:2f:e4:9c:d4:20:6d:3e:ee:23:a0:f7:3a:76:
89:8e:b0:1b:af:c3:a5:2c:8a:96:e6:ce:74:a9:4f:ce:47:1b:
73:20:f8:86:9d:bc:80:18:12:bf:c5:a1:88:0d:8d:43:00:f2:
61:ce:4e:63:e0:fb:90:bb:e6:29:d6:8d:05:89:d2:1e:a0:84:
78:82:18:ca:a0:8a:d9:45:63:40:f9:74:ae:98:7c:24:ec:fd:
6c:b1:5d:b9:36:69:d2:94:3f:ed:ed:0d:ce:1a:f6:63:bf:f2:
88:3a:31:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:32:21 2025 by rpki-client