
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
File: gHwED6kB5dhpWmU03mbD1qC_vMU.mft (raw, json)
Hash identifier: VyxXP+xMYVVEMP5+qGH/7oRqbPVtLXdBUcXWvW2YRgE=
Subject key identifier: BC:D6:B7:72:05:CC:76:24:6D:33:18:92:46:6E:DD:F6:21:D0:67:34
Authority key identifier: 80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5
Certificate issuer: /CN=A91BC3F1/serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5
Certificate serial: 011A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
Manifest number: 0114
Signing time: Mon 27 Oct 2025 06:59:22 +0000
Manifest this update: Mon 27 Oct 2025 06:59:22 +0000
Manifest next update: Mon 03 Nov 2025 06:59:22 +0000
Files and hashes: 1: gHwED6kB5dhpWmU03mbD1qC_vMU.crl (hash: 1xa/Is21blu57F5SKJmcCV+3zjWLo4JsyUpiRueg1Yc=)
2: 7D9F83FE10FA11EFADBBC431C4F9AE02.roa (hash: kRUKk6YhznpQLf70+sbW+4rHruxwNLVLHD+xyjgrv/8=)
3: A697738410FA11EF9A068536C4F9AE02.roa (hash: GgKSSa0DZkr/DMOZ+SWiE+267xJNKIhRXUimhakcIXw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl
rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 06:59:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC3F1, serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5
Validity
Not Before: Oct 27 06:59:22 2025 GMT
Not After : Nov 3 06:59:22 2025 GMT
Subject: CN=68ff184a-eeb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ea:1a:a0:48:8e:e4:c5:d0:bd:6d:c8:fc:e8:
68:12:b5:98:5d:4f:bd:16:99:62:d9:eb:3d:5e:99:
72:3a:82:38:7d:6a:9d:cc:75:c8:39:51:9b:74:12:
5e:81:eb:da:05:47:cd:40:6e:71:93:34:e0:a7:35:
fd:83:00:3e:e1:f0:21:a4:aa:74:44:01:a5:cd:67:
a9:0e:b8:fd:b8:db:f0:b2:da:b1:90:e9:5a:20:57:
24:82:a7:8a:0e:71:a4:53:09:b4:fd:18:69:e7:d6:
bc:37:3b:7c:82:0e:11:1e:17:1e:b3:e6:ab:ef:a7:
f8:38:b5:9f:f2:fc:bf:53:51:be:cd:09:4b:84:ee:
ab:0d:fa:aa:0d:d2:ea:03:c1:02:cd:a6:82:36:43:
db:99:5a:dd:11:e3:82:49:30:58:34:c6:12:3b:4e:
71:39:46:84:5b:0a:a2:2e:f4:df:66:79:3f:d0:cf:
db:39:59:32:a1:e4:3c:53:05:46:94:26:5d:48:a7:
26:7d:47:75:c9:32:be:c1:53:8f:7a:da:94:8c:ee:
86:c2:17:03:4d:da:3a:9c:a1:17:f5:76:5d:63:2a:
48:4c:87:8c:82:89:fb:02:d0:59:6f:3a:92:d1:41:
b0:38:ec:70:e8:cc:06:67:45:84:0e:c1:f1:55:b4:
5e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D6:B7:72:05:CC:76:24:6D:33:18:92:46:6E:DD:F6:21:D0:67:34
X509v3 Authority Key Identifier:
keyid:80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4d:df:97:cd:ef:1f:0f:b7:bc:b6:ae:91:be:e8:05:fb:67:
cc:c6:a0:e5:91:40:9f:51:60:5c:1c:7f:de:dc:0d:02:3d:59:
a7:dd:bd:8a:fc:7d:b6:f6:1e:4b:34:a4:f5:c6:e4:03:7e:37:
2d:09:26:4e:56:3a:57:d4:f5:b3:45:39:b8:5b:72:c4:04:84:
20:0e:f1:e2:40:b8:e9:d8:4f:84:1d:3c:0d:3c:82:14:0b:a1:
07:60:b6:43:5a:1f:e5:0d:20:5d:f8:c2:98:78:6d:70:13:f9:
9a:49:b9:a0:71:77:e6:2a:40:ca:a2:8d:e8:80:2a:e1:1f:fe:
06:13:60:e4:24:cf:97:55:c8:45:62:c9:b6:fa:20:40:a4:71:
04:61:c4:7f:6e:38:cf:13:dd:37:68:65:81:cb:17:25:6c:9b:
d6:08:bd:60:0c:a2:eb:2b:7b:bf:5d:04:44:3f:00:dd:04:a3:
c1:df:25:6c:49:c9:1f:a6:49:cb:12:f1:50:6a:09:11:1b:28:
8e:b4:18:33:a8:e2:2a:53:79:a8:3c:e8:57:97:20:06:72:00:
34:43:e5:c4:48:74:6f:ca:27:17:e8:dc:e3:51:bc:64:c7:26:
c9:a4:8f:5f:ba:52:f8:1b:7d:9c:bf:86:9b:bc:13:95:96:ca:
16:b8:69:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 18:44:10 2025 by rpki-client