
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
File: 15aZWndnWcQmQxeAAofr7u-0umo.mft (raw, json)
Hash identifier: s0uXks7Rs4ubGDc/C3TPErej3jWD9g6qZEvKxApEJtM=
Subject key identifier: 35:D0:9F:D2:42:00:66:33:57:DF:49:FA:AC:C5:FB:97:24:E6:DA:24
Authority key identifier: D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A
Certificate issuer: /CN=A91C022C/serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
Manifest number: 9A
Signing time: Mon 03 Nov 2025 06:27:38 +0000
Manifest this update: Mon 03 Nov 2025 06:27:37 +0000
Manifest next update: Mon 10 Nov 2025 06:27:37 +0000
Files and hashes: 1: 15aZWndnWcQmQxeAAofr7u-0umo.crl (hash: /2PQYzdQZ8HOi581PNKDSDmeZYGCVl8m2gMOMjNZduk=)
2: 90405CE2D5DD11EF99075D78C4F9AE02.roa (hash: hTL1z9/ySOlu0XaviOinYnMnBTyzcwAp4EbODVpERNU=)
3: B6CFF1B2D5F911EFB9B1055CC4F9AE02.roa (hash: ZxCbb7cdq/LewtopQIPSnB7gN2Ydt1y4TyGzN7hgTr4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl
rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:27:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C022C, serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A
Validity
Not Before: Nov 3 06:27:37 2025 GMT
Not After : Nov 10 06:27:37 2025 GMT
Subject: CN=69084b5a-4e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:34:3b:ab:28:d4:d0:3d:5d:cd:92:53:1a:
8c:88:a3:1f:cf:de:e8:09:7d:b1:dc:30:b3:7b:64:
61:70:20:c6:d9:2c:64:f5:e1:f5:54:94:42:86:85:
70:32:ac:6c:b8:87:fd:c4:73:1f:e2:1b:f1:de:90:
db:ff:e2:a6:36:5f:8d:91:5a:ff:3f:8e:a4:d9:a8:
94:e9:58:a2:7b:a6:66:71:69:94:b6:60:25:f8:2d:
e0:f8:7c:2d:56:e3:22:78:7b:0e:6d:c9:d9:c2:37:
11:7a:63:38:01:fa:9f:0a:e0:4f:88:f2:af:e9:da:
4f:fd:8d:40:18:b0:d8:4e:f9:50:a4:b6:19:f6:9c:
db:db:93:bb:9a:2c:39:39:e1:47:f7:ff:b3:02:1d:
d5:4a:fe:ff:af:f7:4c:51:b6:df:ec:48:2b:18:70:
50:b0:30:67:e9:62:80:d0:db:bf:5f:f2:68:a4:b6:
d3:58:ba:2a:30:40:10:2a:76:a1:23:90:16:bd:ae:
8f:33:5e:3c:53:3a:a4:20:2c:21:4e:1c:45:12:5d:
60:87:31:d0:b8:7b:85:b1:32:53:0d:7d:1e:de:e8:
96:10:97:28:22:86:ed:5e:12:64:29:3b:17:ba:81:
9a:c2:d0:8b:b5:28:7f:65:3b:60:89:5b:8b:f6:81:
41:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D0:9F:D2:42:00:66:33:57:DF:49:FA:AC:C5:FB:97:24:E6:DA:24
X509v3 Authority Key Identifier:
keyid:D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:cc:39:9e:01:1d:b4:e2:0e:93:15:35:23:4d:3f:d5:1e:ec:
6c:6b:65:fc:49:3f:12:ed:4e:db:3d:f2:3b:5e:3c:bf:91:45:
ab:2a:65:d8:3b:76:74:b2:17:c6:c4:7c:4c:fb:f6:b5:03:69:
af:06:9b:f9:bc:d7:f8:02:cf:38:f3:84:1b:d7:f6:67:15:8e:
3a:9c:5a:56:41:e3:8e:35:bd:14:3c:42:5e:71:e4:3a:19:89:
cc:43:6b:4d:cd:72:9c:80:50:1a:0a:87:e2:23:04:fb:c9:ba:
cb:44:15:3a:63:18:7d:fc:87:ed:19:44:37:60:d8:dc:04:ab:
2b:ed:12:38:d4:1e:40:28:4c:aa:3c:61:ea:45:8d:19:69:98:
db:d7:53:2b:b1:1a:b1:20:c4:e1:9d:ea:cb:db:ee:f7:96:45:
f7:5b:60:ee:5d:26:da:4c:90:2c:1d:2c:9a:43:26:cb:3a:47:
9d:3f:66:71:cb:9d:1e:ba:59:f9:24:9b:13:e3:f2:e6:75:a7:
aa:02:96:3d:6f:bf:6a:80:ca:7c:fd:b2:65:f2:fc:2e:e8:b9:
6f:4a:c2:a2:87:5a:bc:d7:6e:32:eb:29:57:58:bc:ae:ca:6d:
d9:3b:6a:3a:ad:95:ab:1c:5d:83:fd:60:d0:e0:d2:51:75:57:
d6:f8:5b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:20:04 2025 by rpki-client