
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
File: -c1w52K-aV9LpJAqoguUD3cKBjg.mft (raw, json)
Hash identifier: U5E+2J805Y8ErMGNe0cWx95MKkIRSjXZbCuidriFKoc=
Subject key identifier: 8A:84:29:0E:00:72:E5:13:7D:5C:5A:53:DB:21:00:69:88:5F:9F:D5
Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38
Certificate issuer: /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
Certificate serial: E0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
Manifest number: DD
Signing time: Sun 09 Nov 2025 03:27:27 +0000
Manifest this update: Sun 09 Nov 2025 03:27:27 +0000
Manifest next update: Sun 16 Nov 2025 03:27:27 +0000
Files and hashes: 1: -c1w52K-aV9LpJAqoguUD3cKBjg.crl (hash: GA6Dgt4sRmqvJT01m2gdyPTX4WYgqg0yAkFcSD55cuQ=)
2: 723EACFE6E8511EF83048D43C4F9AE02.roa (hash: VfxLY1OrzcWvFN2AYE0olIYJUBwCwU7OS82n259ineU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl
rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 16 Nov 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224 (0xe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9AB9, serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
Validity
Not Before: Nov 9 03:27:27 2025 GMT
Not After : Nov 16 03:27:27 2025 GMT
Subject: CN=69100a1f-a0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dc:58:00:49:f2:6e:b0:a8:8a:18:b0:ab:53:
04:82:64:02:a5:50:57:17:62:fe:91:8b:e2:cf:f8:
9c:c1:ee:67:87:1c:d3:e9:30:9a:c5:68:3a:8d:54:
d9:a6:46:c1:ab:80:69:c4:ac:97:7c:35:5b:79:cc:
2a:b0:52:73:96:4e:4a:c3:04:83:1d:3a:a5:21:65:
da:c4:38:be:90:2c:2a:6e:36:0f:58:7b:c8:68:06:
c8:e4:10:82:f8:a1:ca:78:bb:a3:49:71:2e:27:22:
f8:dd:b2:8a:d6:1d:2c:54:72:e0:87:8a:26:9b:59:
98:28:db:aa:24:83:9a:54:94:bf:4a:2a:ec:b8:c5:
e2:49:17:9a:3a:9c:46:e3:73:92:3f:7d:45:f8:3f:
7c:6d:a8:04:a8:44:7a:a6:7d:a9:83:51:50:be:b9:
51:2b:71:55:19:1a:bf:73:ec:5e:eb:22:1f:2a:74:
93:f0:1e:6e:24:d1:92:84:75:4e:4f:1d:51:2b:7e:
72:25:93:de:7c:7a:18:be:3a:98:39:35:63:26:3e:
7c:61:3a:ac:07:0e:a1:03:c0:cf:61:d7:70:06:48:
2f:a3:50:54:9c:fd:d8:18:9f:30:c6:cf:94:22:d1:
47:ea:34:17:fd:ae:4e:57:18:67:7e:01:83:67:15:
40:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:84:29:0E:00:72:E5:13:7D:5C:5A:53:DB:21:00:69:88:5F:9F:D5
X509v3 Authority Key Identifier:
keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:57:16:1e:f2:ab:ce:87:4c:f3:0e:ce:4e:33:b8:94:81:1f:
a2:20:84:58:31:18:cc:dc:bc:b9:3d:ae:fc:73:1a:2a:57:65:
3b:1c:ca:5a:c0:94:ae:5d:ad:7f:e6:1c:92:91:5d:60:ba:4b:
81:3e:d7:6b:24:88:37:af:cd:87:39:96:a7:f5:08:05:e4:9d:
94:2a:8f:2a:41:d6:bc:26:35:d5:af:61:31:db:b5:83:a6:81:
a2:79:5e:1a:7b:7b:0c:32:75:70:9e:89:f3:75:68:07:de:f6:
4e:6a:5f:7a:05:eb:11:99:0f:63:c7:ac:fd:10:d7:8d:78:8a:
e6:31:ee:3c:2b:04:74:83:21:37:29:ae:23:34:c8:5d:9e:1c:
a9:06:b2:a7:e2:e9:03:7d:6f:dd:75:39:d1:4a:9b:73:e4:97:
9f:a3:91:4c:eb:a2:90:13:4d:12:3c:02:3f:64:e3:22:2b:e0:
79:f0:80:48:f8:57:48:77:ab:c8:c5:85:36:6d:b9:f5:1b:79:
99:8c:5b:31:08:d5:a2:25:25:cb:12:9f:6d:56:08:9c:e1:c9:
fc:9d:13:e2:12:c4:7a:09:cc:0c:6a:66:16:c9:32:03:af:45:
59:5a:06:03:4a:1b:ac:98:b7:4d:2c:54:0b:ad:e7:94:c7:2f:
ea:2c:cb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 9 09:10:51 2025 by rpki-client