
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
File: S8VilW0H0G-q3JIziLmGYPcofJo.mft (raw, json)
Hash identifier: t9IbOwwTh93TmPxPq/fL3tQj1CpYLGz2FhaGVhSb0I4=
Subject key identifier: 6C:76:A1:8A:F5:91:8C:B8:E5:F0:1C:05:41:D3:04:2F:73:68:53:3A
Authority key identifier: 4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A
Certificate issuer: /CN=A91BF039/serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A
Certificate serial: 0B4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
Manifest number: 0B46
Signing time: Sun 02 Nov 2025 19:11:21 +0000
Manifest this update: Sun 02 Nov 2025 19:11:21 +0000
Manifest next update: Sun 09 Nov 2025 19:11:21 +0000
Files and hashes: 1: S8VilW0H0G-q3JIziLmGYPcofJo.crl (hash: iETEM7mg0vuRE5hRzQhjg9gOiDnUZdEzOkX5Zr3ArlA=)
2: 6D49440845BC11EAB591BD20C4F9AE02.roa (hash: d1emA2UMoO8VznsV+Ait8FlVXTOyXdepIAgXYTBBJeI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl
rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 19:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2893 (0xb4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF039, serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A
Validity
Not Before: Nov 2 19:11:21 2025 GMT
Not After : Nov 9 19:11:21 2025 GMT
Subject: CN=6907acd9-7c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b3:7b:32:d6:1f:ce:b2:21:77:78:4f:ea:e4:
53:5a:d8:5e:59:88:c3:f0:bc:83:bc:fe:05:fe:f9:
e8:13:06:68:4a:4a:ca:a5:89:9d:89:3d:1f:3a:6f:
80:69:48:61:fb:4c:82:57:96:e8:fb:bd:b5:c0:be:
56:c3:2d:57:47:e4:e4:63:2e:db:b8:de:9a:b7:44:
b4:8f:26:df:75:ba:59:5a:a8:65:42:28:69:ae:ae:
3f:ad:b8:e0:c0:a6:fe:17:e6:c1:6f:04:fc:1e:db:
6b:66:26:0d:5c:6f:53:33:65:b9:eb:ec:a6:4f:75:
a9:ff:4b:34:ab:78:3a:52:63:c8:de:88:14:57:35:
43:72:af:70:ca:0b:0b:fd:47:d6:53:34:f0:2f:6d:
4f:89:81:48:cf:47:84:37:32:b8:e6:09:bb:15:62:
f1:37:3c:4d:8a:82:27:8b:66:5c:24:14:ae:a2:e1:
55:26:6a:fd:62:7c:b7:bb:46:97:f3:98:56:72:95:
d5:57:7f:18:9a:ea:31:32:4b:a6:3d:e9:9a:d3:4c:
c5:4d:ba:e4:d1:35:c7:14:1b:40:0b:b0:26:a1:d2:
2f:a0:4e:21:85:92:c3:10:f7:02:57:c6:e4:fa:90:
2d:71:48:9b:b4:7c:72:6f:a5:6d:92:15:78:6a:8d:
2e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:76:A1:8A:F5:91:8C:B8:E5:F0:1C:05:41:D3:04:2F:73:68:53:3A
X509v3 Authority Key Identifier:
keyid:4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:e9:0f:fa:dc:b5:91:28:00:8f:7e:2b:db:f8:19:61:b3:fc:
65:2a:a4:3a:ea:ea:16:58:88:da:04:22:b6:f3:4f:ce:89:07:
39:4b:a0:ba:7a:d3:c7:73:58:dd:33:d5:c9:1e:b1:3c:73:24:
27:ae:e1:11:06:6b:7c:b3:2d:14:c3:d3:05:2c:b2:7b:fc:90:
cd:f3:59:dd:2f:95:07:ed:04:87:53:b1:e4:b5:83:ae:9e:cf:
8e:6f:d9:78:80:db:96:a9:c7:4e:7f:5e:2f:2a:1d:4d:8b:a4:
dd:d1:3c:4a:f1:01:f7:ea:54:ef:e1:8b:a5:c7:de:e3:53:8e:
86:e2:1c:21:b4:29:46:a0:6c:b4:90:f6:e4:82:f5:b9:0c:93:
d4:75:8b:53:fd:3a:87:7a:4b:32:83:55:71:7e:26:b5:62:49:
5a:af:dc:ea:3e:93:69:dd:a2:b5:b4:8d:5c:8a:fb:45:40:f6:
28:27:9d:dd:e6:04:42:11:df:8c:37:56:98:19:c2:e5:fc:2f:
71:c0:f2:4a:33:58:cc:30:45:4b:b4:6b:57:a3:03:78:c0:d3:
c1:eb:05:23:46:d1:38:7d:a6:eb:44:f3:2a:b9:02:3c:24:59:
f0:87:b9:27:e8:b0:61:a9:5d:b9:f0:6a:e8:51:62:ee:0e:c2:
0a:02:92:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:30 2025 by rpki-client