
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft
File: ABN5IHjRGy-UAw18O-71ATKibUA.mft (raw, json)
Hash identifier: QoR008uZEt014UFStTOO6nVks6npaLkagBrzgBNfhvU=
Subject key identifier: 1D:07:0A:36:3F:A0:04:AC:5F:A1:6E:75:E7:CA:B0:AC:5A:06:15:38
Authority key identifier: 00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40
Certificate issuer: /CN=A91B9C74/serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40
Certificate serial: 0247
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft
Manifest number: 023C
Signing time: Sat 25 Oct 2025 05:05:45 +0000
Manifest this update: Sat 25 Oct 2025 05:05:44 +0000
Manifest next update: Sat 01 Nov 2025 05:05:44 +0000
Files and hashes: 1: ABN5IHjRGy-UAw18O-71ATKibUA.crl (hash: vBrK76KyztaqRwnK9pX2JhMH1IUyQgFZ1MJv0Iqdd9g=)
2: F853742A5A9911EDA14F453FC4F9AE02.roa (hash: KraWg2S7y0V2b10B2mX+HUVf2KSluU5nYap1xQfIHpI=)
3: 273E7B284E2311EDB6F68A4AC4F9AE02.roa (hash: hm2JBw4RijcoPdIwahJRqhi4gARjxEI7uzccrW/R3X8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl
rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 05:05:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 583 (0x247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9C74, serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40
Validity
Not Before: Oct 25 05:05:44 2025 GMT
Not After : Nov 1 05:05:44 2025 GMT
Subject: CN=68fc5aa9-6be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fd:f1:5e:de:d6:db:9a:a7:10:b7:95:15:4f:
1b:d2:ab:f0:ac:1d:cd:dc:01:5d:2f:aa:d6:f7:a7:
15:02:f6:31:9b:51:85:e0:4c:12:5f:ef:43:9e:b1:
ba:0d:3e:7c:d8:a4:4f:ee:ff:39:05:89:e9:9c:0a:
a2:9a:1d:9a:8b:c9:19:94:19:f9:50:1c:f0:7f:40:
0c:81:4e:9b:1b:f7:38:27:a5:20:b3:d9:50:05:58:
34:3a:3a:39:10:70:f3:c1:58:a8:6f:63:c9:39:1e:
4c:55:4e:3c:b2:fd:5a:13:26:0b:cd:57:d1:7c:2a:
aa:77:c0:1a:3e:6b:36:1a:6a:e8:e2:85:83:be:9c:
68:58:ff:67:57:f8:ec:dc:f2:a5:75:10:d3:58:8d:
c8:24:04:21:d3:15:4d:54:06:e6:d5:05:34:0e:a7:
8d:a4:6e:aa:b5:48:12:67:d5:d3:da:48:35:da:7c:
64:48:aa:75:bc:38:7a:b5:f8:55:3a:32:29:e3:88:
da:da:2b:1e:43:32:5f:00:8c:01:88:3f:9d:7a:d7:
87:fa:64:dc:e0:27:c3:b1:c2:99:e8:e3:9a:f5:29:
9c:3d:ee:b9:23:20:26:5e:25:28:f2:54:41:23:93:
0c:99:7b:f0:04:df:c4:d9:9b:9e:4d:a6:65:6f:90:
01:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:07:0A:36:3F:A0:04:AC:5F:A1:6E:75:E7:CA:B0:AC:5A:06:15:38
X509v3 Authority Key Identifier:
keyid:00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:c2:dc:41:b9:32:f5:16:8f:25:8a:e6:e9:7c:8b:7c:9c:0c:
da:07:dd:6d:ba:64:2d:f0:7e:4d:77:53:73:a5:29:d5:96:a8:
0a:0e:80:fa:ed:59:cc:d0:99:44:f4:a7:4c:7f:3e:fd:68:03:
ed:7e:fa:aa:12:2e:27:22:25:5e:6e:16:4c:b4:ae:a7:7f:2d:
3f:01:a9:3b:44:e2:ad:7e:28:c7:13:d6:41:ee:e8:5e:3a:fb:
0a:7f:8e:bb:ca:36:be:3a:1f:90:de:12:f5:fa:97:84:6d:43:
83:62:ff:99:d9:8c:22:51:cd:a9:2e:d3:59:6c:91:a8:7a:40:
99:ad:89:4a:d1:83:94:a1:08:eb:b6:b6:a3:0f:83:cd:0f:7b:
68:3f:bc:a9:b9:41:8c:ec:f6:38:ea:8d:94:12:aa:3b:29:b2:
0f:af:c3:1d:65:42:21:bf:2b:34:ac:e0:ef:c0:5b:59:7d:8d:
df:f4:52:00:12:c3:e8:12:2b:02:eb:fb:59:4b:f1:88:20:a1:
06:8d:22:cb:f1:2a:9c:f4:42:17:58:52:3a:5f:4d:a8:5a:67:
d2:7c:dc:ed:57:d4:68:7a:31:03:7b:69:cd:29:4b:5b:b0:b4:
0d:a7:20:62:d2:3f:40:e6:f7:c9:12:fd:68:20:09:b6:04:f9:
6c:10:09:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:34:38 2025 by rpki-client