
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
File: 9UWcujH5M_kHO1FMnLvsNPbtLko.mft (raw, json)
Hash identifier: 9J3NtHYa1gpVmCu3g+xFyKYhO2i81TymSAmF86oFpnU=
Subject key identifier: FC:D3:97:94:D7:37:73:41:F6:FD:BF:04:FE:66:B3:A8:B2:9D:7E:A5
Authority key identifier: F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A
Certificate issuer: /CN=A91C0E6A/serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A
Certificate serial: 01DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
Manifest number: 01C7
Signing time: Sat 25 Oct 2025 06:28:25 +0000
Manifest this update: Sat 25 Oct 2025 06:28:24 +0000
Manifest next update: Sat 01 Nov 2025 06:28:24 +0000
Files and hashes: 1: 9UWcujH5M_kHO1FMnLvsNPbtLko.crl (hash: mtuXtXSboHabo8Oyt82K2fPia0Szz09l2XdbcNVlDm8=)
2: BE9200CE66F511F09788007CC4F9AE02.roa (hash: aHZleMFaFRc6KiAJteLYV0M6bGb3RfGWFtdzpUjd47Y=)
3: 7641B9AE12CD11EFAC15BB64C4F9AE02.roa (hash: JS7S95pwMMq4VJCG+rsKP1S3MhXCo+P6oTggAIuVIcE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl
rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 06:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0E6A, serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A
Validity
Not Before: Oct 25 06:28:24 2025 GMT
Not After : Nov 1 06:28:24 2025 GMT
Subject: CN=68fc6e08-2539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9b:dd:d8:b8:71:27:84:f8:4c:24:2e:20:5b:
f2:f6:c5:2d:b5:46:21:8f:a0:4f:b7:20:0d:50:4b:
6f:61:7c:92:18:67:14:49:81:b1:f1:73:60:3f:3d:
07:12:30:50:20:a1:01:1a:8c:a2:5e:a3:ca:bb:9f:
9d:bb:b8:ea:27:c0:29:a2:44:d0:27:78:ee:12:b1:
ad:fb:6a:2b:ac:ea:c9:17:4b:b8:9d:65:84:ab:fc:
5e:fe:4b:b4:2e:96:f0:1c:41:c9:e5:c0:d0:bb:e5:
c4:19:70:f9:86:ae:60:ba:5b:34:a8:52:90:eb:81:
64:3d:8d:af:e0:96:30:21:5c:b2:85:ac:51:09:c0:
11:59:a5:36:07:5b:6c:e7:65:07:a4:76:8c:83:8f:
17:ee:ef:e9:5f:ca:12:59:7a:bb:ab:20:c7:13:0d:
bd:2b:f1:b7:0f:36:36:0d:d5:09:5f:14:fe:fc:92:
3b:3d:c3:1d:cf:3e:38:9a:92:4e:19:06:cc:61:b0:
48:47:0a:0b:81:26:99:d3:37:55:c7:73:a6:ee:1c:
e2:6f:94:32:fd:af:a9:65:50:a7:fd:b2:32:fd:1f:
6f:78:37:64:98:23:d2:0a:83:81:9f:a4:25:61:3a:
66:28:89:01:0f:28:95:3a:b9:de:a2:cf:0a:3c:45:
12:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D3:97:94:D7:37:73:41:F6:FD:BF:04:FE:66:B3:A8:B2:9D:7E:A5
X509v3 Authority Key Identifier:
keyid:F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c9:f5:b4:84:c9:bf:a2:8a:92:61:b8:29:cb:c2:b5:3a:25:
08:06:01:28:96:41:1b:bd:53:0b:96:d3:05:8e:e0:e7:2b:d6:
f6:d0:30:e3:0f:63:f9:54:ba:f8:e2:09:e2:6f:47:80:a0:d8:
e7:23:d4:7b:3c:47:13:e1:17:22:07:a8:83:23:28:e9:e3:9c:
63:58:40:9e:73:54:c3:7b:7f:1e:48:94:9e:17:29:f4:56:46:
9d:38:dd:56:12:2b:f3:9a:12:8e:80:53:58:07:7e:ba:1a:7e:
4b:41:b1:4e:b4:56:5c:66:fc:51:62:ee:53:60:4b:f7:b8:b3:
69:e5:e7:d4:d7:d9:0b:c7:85:70:7a:b9:01:6a:72:ed:d6:6d:
d3:5c:68:7d:bd:89:83:28:13:23:1c:5b:cd:69:23:ca:ce:32:
4e:21:56:bd:1a:b7:7e:66:c7:4a:f1:50:62:66:16:ea:69:2b:
fc:9a:9b:eb:5a:72:14:ac:05:a1:35:04:8a:ab:6c:90:fd:51:
2f:b9:51:2b:d3:61:8d:e2:26:b5:f8:2b:ba:e7:ad:42:dd:ad:
4a:d7:12:9b:15:9c:a8:2b:bf:55:ae:93:c6:a7:56:a2:d5:f0:
a1:a6:fe:20:3e:1f:26:30:50:ee:b2:04:cd:e6:23:9b:a1:dc:
95:48:6b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 01:34:07 2025 by rpki-client