
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft
File: Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft (raw, json)
Hash identifier: wjA9spcrgCmwhX9Zux15O94zPHycCvX63i727NiJ7ds=
Subject key identifier: D0:FF:A0:36:12:E1:5B:51:BF:F7:65:61:95:E0:0C:6D:4C:0D:7C:13
Authority key identifier: 07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36
Certificate issuer: /CN=A91C37ED/serialNumber=071F8119171441802BE3261F15627DAF289DB336
Certificate serial: 0189
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft
Manifest number: 0186
Signing time: Mon 03 Nov 2025 03:35:24 +0000
Manifest this update: Mon 03 Nov 2025 03:35:24 +0000
Manifest next update: Mon 10 Nov 2025 03:35:24 +0000
Files and hashes: 1: Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl (hash: iiFM/rLbjmt9qxU3U9qGRlw3PkCf9kdZUt4UnIl0HnA=)
2: 6CE66CFC630E11EEA9EDC20FC4F9AE02.roa (hash: p1VOahcTtw++gZyKyfXUEWsELNbDpFqNHKOXPfMWMSA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl
rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 03:35:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C37ED, serialNumber=071F8119171441802BE3261F15627DAF289DB336
Validity
Not Before: Nov 3 03:35:24 2025 GMT
Not After : Nov 10 03:35:24 2025 GMT
Subject: CN=690822fc-0c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:55:63:5b:7c:05:ac:9d:17:1e:8d:be:54:70:
31:5f:cd:87:1f:f3:a9:a1:a7:c9:eb:1f:7e:76:00:
a0:6f:3e:9a:1f:c2:e9:b7:d3:8a:b1:4c:33:ab:13:
f7:82:a5:66:ce:b9:44:1e:a2:ad:8a:8b:30:cd:97:
0e:33:82:9a:1c:a1:9d:fe:71:53:b5:58:64:9c:ab:
bc:be:31:65:8f:f4:8c:f5:cd:45:8b:c3:28:f7:ea:
b7:19:0d:7b:f1:8b:ec:cf:5b:fb:52:7c:8c:38:9d:
22:a7:a6:62:fc:41:6e:3b:96:52:0c:19:04:59:1e:
66:03:2d:2f:dc:ce:40:01:aa:3d:c8:af:d5:14:a7:
62:c9:4e:fa:6a:2f:c5:3c:86:cb:4a:4a:fb:8b:47:
f3:bf:86:df:81:7c:38:dd:50:ea:ef:84:8d:5b:eb:
2d:02:8d:1e:d9:7d:54:07:74:0f:d4:35:c5:0d:ea:
dd:97:3e:ae:90:c1:2b:fa:3a:ae:36:15:17:4b:dc:
8b:78:a5:98:14:52:a3:53:29:d0:06:87:a4:65:32:
7f:8d:e5:85:0c:c0:fe:01:0e:3e:fe:24:a6:74:6a:
df:00:83:d5:3b:9b:45:69:0c:8f:41:cf:5c:4f:e1:
da:53:66:dc:ae:1e:3a:82:44:5e:88:5d:19:c4:38:
ee:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FF:A0:36:12:E1:5B:51:BF:F7:65:61:95:E0:0C:6D:4C:0D:7C:13
X509v3 Authority Key Identifier:
keyid:07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0f:5a:89:1a:5c:4e:18:bd:18:73:e7:02:dc:11:1a:03:8c:
30:84:8a:e0:84:55:9b:1a:3a:01:98:84:2e:d5:eb:9a:06:ff:
20:94:a6:1e:6c:91:39:6f:d5:fe:4c:8a:54:03:63:23:44:50:
0d:c8:ad:3e:4e:db:74:2f:31:14:89:ef:cc:56:be:b7:ee:f5:
7b:a8:7e:f3:2f:d4:75:5f:cc:af:9d:87:c3:1a:79:56:8e:f0:
3d:59:01:53:56:84:36:d7:9e:6a:77:0e:5d:9c:bc:ca:b3:e3:
dc:5f:7c:f4:87:55:5d:2f:69:e1:c5:4d:0c:b1:2e:6f:4a:98:
30:1d:54:c1:a1:24:12:62:5a:63:29:45:1f:4d:7c:12:b1:a9:
fd:43:ca:02:f7:72:14:71:af:9e:dd:df:f0:29:ef:31:fd:83:
d1:a7:15:ab:17:0a:d0:4a:b1:04:0f:f1:a4:f1:a7:30:38:df:
89:1c:e5:d6:88:bb:94:d1:b6:02:51:b2:0b:d0:ab:6d:58:74:
b8:69:e6:7b:ec:09:f1:5d:d0:a0:66:98:bd:b6:58:d3:7c:84:
35:f4:4f:d2:c6:d8:2e:fc:c5:0c:fd:f4:e1:77:4e:0c:18:82:
6f:4b:09:4d:ad:85:01:ad:e4:47:29:75:23:86:7d:31:e8:3d:
bd:a5:01:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:13:24 2025 by rpki-client