
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft
File: 45Npup3YgJmHsja0d6144Vx1qxw.mft (raw, json)
Hash identifier: ZixakXSPMsSzDDu2CypTZURJvPwKguzrSFDA+aRTuIQ=
Subject key identifier: AD:09:20:E2:38:15:36:A8:E3:40:4F:9D:07:B8:2F:EC:5E:80:2B:27
Authority key identifier: E3:93:69:BA:9D:D8:80:99:87:B2:36:B4:77:AD:78:E1:5C:75:AB:1C
Certificate issuer: /CN=A91C0C73/serialNumber=E39369BA9DD8809987B236B477AD78E15C75AB1C
Certificate serial: 0275
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft
Manifest number: 026C
Signing time: Mon 03 Nov 2025 01:39:19 +0000
Manifest this update: Mon 03 Nov 2025 01:39:18 +0000
Manifest next update: Mon 10 Nov 2025 01:39:18 +0000
Files and hashes: 1: 45Npup3YgJmHsja0d6144Vx1qxw.crl (hash: Vllsk/IrUFRce+Py0ywBeRw+B7M2kUCKyRXs4/Og/ik=)
2: 3728DA229A8611EFA824F73BC4F9AE02.roa (hash: s/TAy9epcEKTC12lHA/WIlwW4b4QaIyA/jvIAJ5W4eQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.crl
rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 01:39:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 629 (0x275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0C73, serialNumber=E39369BA9DD8809987B236B477AD78E15C75AB1C
Validity
Not Before: Nov 3 01:39:18 2025 GMT
Not After : Nov 10 01:39:18 2025 GMT
Subject: CN=690807c7-997a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cb:82:4d:ae:9f:a8:a1:5c:14:49:be:40:35:
b7:6e:2a:bf:5c:0a:b8:9f:13:ef:f8:d6:7c:65:32:
0a:e9:1a:0e:5d:df:39:01:07:f3:62:f7:7f:02:47:
98:df:9c:68:b9:c3:91:b9:62:79:78:54:70:ed:c6:
93:ff:1f:79:61:e4:86:2f:9f:dc:fd:e1:70:08:e9:
e3:ba:71:06:13:6d:dc:40:1f:29:ba:be:c9:e1:9c:
f8:a7:59:78:94:3f:bf:97:5e:d5:4d:91:5b:d8:b0:
66:47:18:79:1b:73:1f:67:17:93:41:34:d2:fc:95:
bb:d8:1d:79:9e:26:a8:8f:36:15:ea:92:7b:d0:95:
2c:e7:e4:29:9f:15:36:1f:62:58:68:da:f1:fd:20:
cd:12:86:e8:2f:1d:11:69:04:01:f9:40:fc:3f:53:
12:f0:a1:1b:61:54:42:29:83:f7:51:e1:9d:77:d8:
ea:06:79:2d:6a:32:e7:87:30:e1:d5:48:f9:6f:49:
fa:ad:95:5b:60:0c:33:ae:a0:91:1f:a4:49:24:49:
34:b4:64:79:8d:e0:b4:b8:17:49:f4:1f:ec:c3:4a:
87:0d:60:c3:09:e9:cf:d7:c2:d2:2a:ac:fb:34:3b:
5d:93:ea:6b:39:75:6d:f4:af:29:62:52:d0:28:c7:
84:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:09:20:E2:38:15:36:A8:E3:40:4F:9D:07:B8:2F:EC:5E:80:2B:27
X509v3 Authority Key Identifier:
keyid:E3:93:69:BA:9D:D8:80:99:87:B2:36:B4:77:AD:78:E1:5C:75:AB:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:fd:b6:ae:66:51:cd:fb:1b:4b:31:f0:4f:ab:cc:55:84:fc:
cb:50:d7:a3:a7:fb:28:a4:dc:72:55:89:af:05:88:74:47:f2:
6a:7e:c4:7a:8b:98:aa:44:46:21:6a:76:6e:6c:2e:1a:b0:63:
c5:b2:77:5e:fa:16:50:97:d8:2c:c0:31:25:46:87:2c:7a:64:
c4:5f:0f:f5:ba:3e:e6:71:f0:3f:cc:ee:45:f1:0e:67:68:8b:
fc:b0:fb:b2:ca:52:5d:4a:4b:bd:a5:c8:fc:2a:fc:78:4f:f1:
4a:e5:c4:7b:69:4b:e1:08:22:98:16:de:fb:fe:70:f1:f4:f8:
06:8d:01:9c:7e:b0:95:a9:70:ea:7e:c4:6b:6d:28:4c:99:0e:
13:23:a8:28:64:c5:3d:5c:e3:19:72:f6:ef:1f:d8:2b:ea:0e:
7f:cd:f6:8f:be:e2:b6:34:4e:00:54:eb:63:7d:e3:e1:f6:fa:
fd:16:3f:0f:64:24:1b:f1:03:07:0f:0f:f4:75:d4:21:47:3e:
ae:0e:b9:49:b3:30:8c:a4:e8:e6:5b:28:3d:f3:f6:b2:e5:b7:
cb:97:71:2a:8b:9c:1d:c8:ac:be:d4:55:cd:5b:ca:b4:b4:e6:
5f:cd:b4:00:f4:2a:34:15:79:87:3d:07:39:ca:9c:a1:9b:49:
1d:e7:55:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:13:22 2025 by rpki-client