
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
File: BcMvXW_ZVny3AAWx10pBqFtb5xI.mft (raw, json)
Hash identifier: 3q/uMtJCF1l/he0C4J/PNfkin2X/MHUjgWmyZs5Fr48=
Subject key identifier: 16:A0:5C:F3:47:F4:46:96:0F:BE:E3:8C:3D:F0:F2:65:7C:A0:2C:82
Authority key identifier: 05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12
Certificate issuer: /CN=A91BB5D3/serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
Certificate serial: 0679
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
Manifest number: 066D
Signing time: Sun 02 Nov 2025 22:36:24 +0000
Manifest this update: Sun 02 Nov 2025 22:36:23 +0000
Manifest next update: Sun 09 Nov 2025 22:36:23 +0000
Files and hashes: 1: BcMvXW_ZVny3AAWx10pBqFtb5xI.crl (hash: LEhrjyQBHnyY5oqn2C64v35uhUuwI+E4rzmT6JCSyHU=)
2: F164038CBBE211ED8685DC61C4F9AE02.roa (hash: NBdHfFLz3DL0xp9ly121d+fttg0f9aauvwFg8/4e9ds=)
3: 27B648124C9C11ECACB77370C4F9AE02.roa (hash: LKITiJ4ISd4LnGgW0YqiQuvoGRC1GVrRJfh2GhffjxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl
rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 22:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1657 (0x679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB5D3, serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
Validity
Not Before: Nov 2 22:36:23 2025 GMT
Not After : Nov 9 22:36:23 2025 GMT
Subject: CN=6907dce8-30c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5a:08:11:50:0a:23:f0:81:01:d9:21:55:72:
7a:bd:b2:ef:eb:dd:e7:07:cc:93:16:97:eb:88:f9:
3a:a2:73:94:6b:ce:ce:7a:1c:fd:63:e7:41:d8:0e:
91:60:d6:52:c5:0b:7d:e9:4a:ff:68:33:ca:73:62:
fc:16:21:74:b2:36:ba:65:15:72:b6:fa:2c:8f:07:
dc:5f:21:8b:35:2b:2d:e6:77:62:32:60:c1:04:47:
ce:d2:ef:e3:d8:95:25:d5:f6:22:70:06:2f:6e:8b:
83:2c:98:00:df:e2:e8:21:17:c7:38:28:2d:c1:ee:
b4:91:fb:f8:9f:73:7a:69:67:ec:d3:16:fe:83:b6:
9d:2a:61:37:de:02:38:40:2a:57:26:70:71:75:71:
62:95:8b:af:44:40:80:3c:fa:ec:25:23:83:49:3c:
05:4d:57:06:03:5b:e9:d8:04:d0:22:36:15:11:6b:
01:bb:b5:2c:57:6f:cf:49:82:fb:0f:db:96:51:88:
99:44:62:3b:5b:bf:cb:af:59:3f:91:08:47:ea:a4:
83:43:13:8f:29:37:ea:27:8e:3b:c8:4d:a8:cb:0c:
37:0a:d7:30:3b:ab:e5:68:55:75:60:a9:f8:3d:79:
e9:5b:2d:02:51:cb:38:33:1a:03:1c:18:8e:45:08:
b2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A0:5C:F3:47:F4:46:96:0F:BE:E3:8C:3D:F0:F2:65:7C:A0:2C:82
X509v3 Authority Key Identifier:
keyid:05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:92:7b:92:ab:a2:5d:c9:4b:f1:f0:05:14:4a:d9:a1:6f:72:
70:55:de:4c:ed:89:41:83:e8:62:b5:2d:a6:77:2e:8d:23:cd:
57:5f:76:49:c1:aa:da:b9:bd:52:c1:c1:15:28:ea:8d:48:29:
d2:5a:6a:50:56:4d:e6:bc:cc:e8:76:51:ba:55:e7:c6:bf:3f:
c7:4d:4a:87:89:67:88:21:63:cf:18:c1:f0:df:7a:fe:d1:e7:
9f:3d:2f:ce:de:cf:b0:99:23:a8:80:2f:a6:8e:05:93:ae:bf:
2c:1b:12:3b:c6:1b:52:ed:64:b2:b2:a9:3d:b1:fd:9a:f2:c7:
a0:8e:a1:e7:08:f6:fe:5e:6b:4e:c1:85:24:eb:98:17:1d:61:
cd:2f:f0:32:cd:aa:e7:b9:1f:af:c4:d4:28:c2:88:d8:b9:d4:
5e:19:7a:9e:68:6f:b8:b2:62:42:5d:84:82:eb:1a:e9:ea:e4:
00:b6:85:37:1b:d3:19:2a:35:4c:d3:17:fb:5f:8f:8f:92:7f:
9b:e9:bf:b4:e8:3b:ad:be:69:24:ce:f8:80:62:ff:09:c0:52:
6f:e7:6a:fc:87:94:08:a6:64:ff:bd:24:68:19:95:61:b1:a4:
ba:b9:c3:00:a7:11:76:86:8c:8e:af:40:20:08:9d:f3:09:99:
e6:75:ed:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:13:13 2025 by rpki-client