
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft
File: _M8p58OjX6g2yQkOaCx4DQI56VU.mft (raw, json)
Hash identifier: N2A8hTS/oOgoYOQBx9sqVGmwzInm4GTTFcPSFloQTRk=
Subject key identifier: 68:8E:25:94:E0:D9:ED:3A:DA:AA:5E:C5:65:19:20:8B:37:BA:58:27
Authority key identifier: FC:CF:29:E7:C3:A3:5F:A8:36:C9:09:0E:68:2C:78:0D:02:39:E9:55
Certificate issuer: /CN=A91C0243/serialNumber=FCCF29E7C3A35FA836C9090E682C780D0239E955
Certificate serial: 07D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft
Manifest number: 07D6
Signing time: Sun 02 Nov 2025 21:08:12 +0000
Manifest this update: Sun 02 Nov 2025 21:08:11 +0000
Manifest next update: Sun 09 Nov 2025 21:08:11 +0000
Files and hashes: 1: _M8p58OjX6g2yQkOaCx4DQI56VU.crl (hash: sFydMtVbcoISCWjk21r+vgFFGuIzHwEvleiOFWsEABQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.crl
rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2007 (0x7d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0243, serialNumber=FCCF29E7C3A35FA836C9090E682C780D0239E955
Validity
Not Before: Nov 2 21:08:11 2025 GMT
Not After : Nov 9 21:08:11 2025 GMT
Subject: CN=6907c83b-f1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:84:70:44:85:57:60:0f:d5:ec:ab:7b:d8:0e:
54:4c:83:d5:51:d7:05:d8:91:b0:1b:4f:f0:a9:2b:
e9:f3:2e:44:5e:10:67:91:72:8c:0e:b8:6a:83:2f:
12:56:e8:8c:94:14:c1:1d:89:a0:98:83:88:06:7e:
0d:76:70:3f:b0:ad:7a:8a:ad:28:91:fa:58:a0:d1:
07:73:d3:49:51:14:cf:71:78:9c:62:23:da:62:e7:
0e:40:a3:04:a3:3c:73:1d:36:b6:06:ef:6b:cc:e3:
b1:eb:33:8c:6f:90:79:07:7f:ef:7c:89:92:cf:17:
4c:68:d1:31:f1:21:b9:13:fc:b4:52:ce:11:f2:18:
a6:30:45:eb:84:ea:14:3d:6b:00:a8:57:f6:b2:43:
7b:64:c4:49:18:d4:26:fd:36:48:a0:93:53:b5:8e:
ae:2d:a2:53:3f:d0:2e:c8:7c:e4:d3:b0:c2:8a:8c:
ec:7a:93:38:4e:36:b5:65:94:db:7e:a2:cb:9b:63:
90:fc:24:cb:28:56:d3:ef:2d:c3:3a:9f:8f:86:83:
8f:24:90:12:77:fe:44:7e:31:f4:82:66:b4:bb:78:
cd:77:08:53:49:de:a5:e2:e8:d5:1c:09:21:35:90:
a6:c4:29:4c:65:02:b7:6a:3e:a0:fc:9a:a4:12:df:
3a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8E:25:94:E0:D9:ED:3A:DA:AA:5E:C5:65:19:20:8B:37:BA:58:27
X509v3 Authority Key Identifier:
keyid:FC:CF:29:E7:C3:A3:5F:A8:36:C9:09:0E:68:2C:78:0D:02:39:E9:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:8d:0f:78:7e:5a:f2:ae:0d:3b:96:db:2e:ae:96:43:14:17:
19:7b:3e:45:d6:89:b6:a9:7b:de:19:64:a6:43:ce:b6:83:95:
ef:f8:a2:e4:62:d2:81:83:0b:6c:89:0d:69:97:c1:a6:5c:8e:
aa:87:4a:bb:ab:cb:de:ba:bf:a1:2b:d0:1c:6c:7e:39:cc:3c:
f9:aa:4e:64:2e:7c:f4:14:08:d8:df:3a:05:b0:82:0f:a7:e8:
23:e8:2e:45:40:a9:15:02:82:31:38:c1:78:81:b5:55:93:f7:
12:43:87:ad:1b:40:04:d2:c0:10:df:71:bd:9b:f6:b5:c9:1d:
5b:b1:f7:f8:2a:94:8c:50:c5:2e:7a:68:07:a4:06:bd:35:cc:
12:6e:90:1a:71:a4:5c:5d:3e:63:74:39:c8:0b:b0:7d:70:cc:
f0:42:ef:1b:89:e4:d6:50:f9:fc:7d:10:07:15:fb:8d:98:7a:
bc:8a:ee:cb:3f:62:9e:da:b8:14:45:55:ce:08:98:1c:56:ba:
73:99:64:7d:bb:95:17:18:7d:3d:73:9c:50:7f:36:58:19:7a:
1e:83:d8:ef:b6:42:45:1f:d3:ff:29:10:da:46:0f:d2:a1:98:
6e:a6:52:0f:d3:67:48:a6:65:84:97:44:2a:1e:d4:5b:cd:13:
1f:cc:f3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:17:56 2025 by rpki-client