
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft
File: m1wSv5mrKIql16PWPDWI906bJtE.mft (raw, json)
Hash identifier: SBfn2r30CsH5T9x5yU/2prrg0IuShbH8KKTAKlOeMLI=
Subject key identifier: E3:82:BD:64:E9:DF:DC:42:D3:74:61:43:78:A8:52:C9:35:8B:4F:B7
Authority key identifier: 9B:5C:12:BF:99:AB:28:8A:A5:D7:A3:D6:3C:35:88:F7:4E:9B:26:D1
Certificate issuer: /CN=A91BB246/serialNumber=9B5C12BF99AB288AA5D7A3D63C3588F74E9B26D1
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft
Manifest number: 54
Signing time: Mon 03 Nov 2025 07:14:39 +0000
Manifest this update: Mon 03 Nov 2025 07:14:39 +0000
Manifest next update: Mon 10 Nov 2025 07:14:39 +0000
Files and hashes: 1: m1wSv5mrKIql16PWPDWI906bJtE.crl (hash: zaYw+s3Vmpe2ao5Zgz0JGbnlRdj3qmik9XENwARiHyA=)
2: 898E9EA83C0E11F093CFD060C4F9AE02.roa (hash: opFiT1AJRvuZEtPnqLFXpMlXJ+kJ3W1jD9M7G0TVPCk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.crl
rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 07:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB246, serialNumber=9B5C12BF99AB288AA5D7A3D63C3588F74E9B26D1
Validity
Not Before: Nov 3 07:14:39 2025 GMT
Not After : Nov 10 07:14:39 2025 GMT
Subject: CN=6908565f-e898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c0:9d:63:d8:3a:12:d9:c8:71:04:e1:58:97:
45:87:05:18:a0:ba:e5:a7:84:c9:12:0c:b9:53:5f:
02:0b:b1:7d:61:73:01:c1:0e:fd:f5:9c:9b:59:06:
88:96:aa:4c:22:b9:55:96:12:b1:4e:78:93:53:37:
bf:97:3f:8a:a7:d1:97:ba:c8:b2:29:9e:39:33:27:
79:af:e9:8c:73:4b:d9:78:8a:be:e4:fb:9b:97:b8:
e1:77:df:b8:fd:07:c9:59:81:16:b0:b2:d7:67:8b:
ea:5d:dd:8d:23:11:94:54:15:40:dc:77:81:3e:f6:
41:a5:3b:09:23:34:37:ad:e1:98:85:89:74:69:66:
30:c7:3e:b2:09:f7:1e:37:67:93:f9:2c:da:95:8e:
3d:40:3d:b8:0a:d0:b8:8c:4b:ee:0b:e0:de:db:2e:
fb:97:5b:3c:ee:d7:f1:9d:95:d3:2a:95:37:b5:58:
37:b1:a3:f9:13:33:a7:77:d4:53:a6:4b:4a:f1:ad:
68:35:f2:c6:74:47:3a:d4:2f:34:01:c2:7d:f1:58:
d6:2b:e9:6a:d0:7e:0e:2f:e1:2e:d1:65:03:27:0b:
b6:21:ee:cf:3a:e4:0d:6a:e9:b1:b9:e6:a2:83:0d:
fb:9f:9f:53:cd:2f:c1:ae:5c:5d:8b:4e:b5:9a:27:
f5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:82:BD:64:E9:DF:DC:42:D3:74:61:43:78:A8:52:C9:35:8B:4F:B7
X509v3 Authority Key Identifier:
keyid:9B:5C:12:BF:99:AB:28:8A:A5:D7:A3:D6:3C:35:88:F7:4E:9B:26:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:02:ed:9a:3e:14:ce:1e:33:f9:b0:37:8f:57:9f:ea:af:e9:
62:dc:fc:59:57:17:3f:6e:9e:39:f9:a9:ad:62:fe:3a:a9:34:
28:c6:4c:56:b0:70:de:09:86:63:34:37:16:39:b0:9a:87:ce:
2e:fb:4c:b2:ed:8d:5c:88:26:a2:52:af:6e:1a:90:f7:b4:68:
08:65:d5:9f:2a:2b:c6:2d:c4:68:0c:89:52:a8:75:04:62:a9:
43:1a:25:05:f4:7a:38:af:97:58:64:69:89:8e:cf:74:51:8e:
b0:22:59:b4:87:6f:ec:0b:c6:9b:c1:41:c7:52:96:82:9b:1a:
76:78:5e:ea:4d:68:d8:c5:d8:f8:52:b8:62:52:01:33:f2:ba:
29:ae:6e:45:36:db:c3:e1:d4:2b:50:b6:52:17:b3:88:20:e8:
a0:38:04:52:61:b7:65:c2:40:f4:4c:3c:d0:79:40:c9:f5:2c:
01:66:a2:de:55:76:f3:28:39:d2:93:97:c4:2c:27:3d:bc:26:
33:a3:0c:ab:a4:94:c3:ac:93:05:18:28:ee:07:78:83:41:93:
f4:f8:9c:04:77:25:2d:c2:5d:cc:7f:84:f1:00:8c:e0:f0:f1:
42:c3:ee:ea:54:df:cf:5b:2b:e7:60:3b:f6:c7:fd:79:1b:0c:
b4:4c:de:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:06:47 2025 by rpki-client