
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
File: A4qG82KyVX-Uvncu4MX9MYRf4mM.mft (raw, json)
Hash identifier: AcjCi6qimGU3/dsZ45iHna1288a//eIwfARQ36VxC5s=
Subject key identifier: FC:18:FA:20:B8:C8:D7:B7:52:EB:21:60:F3:6B:03:8B:15:A1:BE:8E
Authority key identifier: 03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63
Certificate issuer: /CN=A91C4003/serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263
Certificate serial: 0C43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
Manifest number: 0C2E
Signing time: Tue 04 Nov 2025 18:48:43 +0000
Manifest this update: Tue 04 Nov 2025 18:48:42 +0000
Manifest next update: Tue 11 Nov 2025 18:48:42 +0000
Files and hashes: 1: A4qG82KyVX-Uvncu4MX9MYRf4mM.crl (hash: HxBHvQDjLOElz9dBLHHA767xU09hHzZ85boTMjTE/xA=)
2: 711115241AD911EA97EF1C30C4F9AE02.roa (hash: If6A0dtzlgPVB4CBNXQ4TMiF5xMEzeKvLljq5QFI3bk=)
3: 398848523A0011EFB7007939C4F9AE02.roa (hash: Zlhwy82VHpRYLPT4enDdRaV9Hjue+wnu8x2KNE0lTzk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl
rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 18:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3139 (0xc43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4003, serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263
Validity
Not Before: Nov 4 18:48:42 2025 GMT
Not After : Nov 11 18:48:42 2025 GMT
Subject: CN=690a4a8a-a1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:f2:ad:7b:2d:fa:f7:b6:f7:9e:e4:0f:7e:
30:bc:54:c5:b8:43:8a:9b:b5:14:3b:b0:90:36:be:
58:2b:2d:38:6d:07:e0:cc:b0:85:05:39:93:b5:f7:
34:b6:30:5c:33:3c:75:c2:6b:a9:b8:ac:d2:35:b1:
71:8d:e9:61:8a:6c:47:dd:81:9c:c3:0d:bf:54:ff:
3b:b0:f5:11:d5:49:4d:3d:f7:e5:52:69:92:bd:b2:
d3:f8:a0:95:aa:75:46:2d:f7:42:2e:77:da:91:fb:
d7:04:3d:3b:a9:76:5f:22:89:ac:39:fd:72:c6:85:
c2:ab:f6:2d:a7:09:fb:17:61:00:69:ed:c7:45:c9:
20:ec:89:48:68:31:6d:89:a4:7a:1a:82:0b:8e:1e:
10:9f:5d:e7:62:14:9e:f8:54:96:a8:e8:31:34:a4:
19:b1:c4:2b:c4:c9:0e:17:79:56:4a:ea:08:d1:85:
41:fd:3b:c8:ec:b2:0a:ad:ac:d2:2e:f6:d0:c8:8b:
2a:67:d5:e9:92:61:59:d9:fc:a2:4f:29:4b:52:a4:
20:e5:77:f7:c7:ad:39:eb:93:c3:7e:22:e2:fd:47:
b0:63:ab:eb:a2:d2:1a:2e:10:d1:cc:ef:f0:8f:8c:
60:05:96:2e:d3:81:f8:99:71:ec:e1:6f:0d:59:7f:
15:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:18:FA:20:B8:C8:D7:B7:52:EB:21:60:F3:6B:03:8B:15:A1:BE:8E
X509v3 Authority Key Identifier:
keyid:03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:69:8f:d8:ea:85:db:5b:dc:84:b2:42:d1:d8:6c:e3:6c:63:
e0:be:79:60:4d:2d:32:81:0a:94:fb:13:55:ff:15:5c:e7:06:
90:2f:c9:f6:aa:bc:c5:39:78:11:97:31:8c:79:87:7a:97:f3:
74:7a:86:68:2d:93:93:49:86:9d:ad:24:26:92:b0:a1:79:1b:
f6:85:62:8a:43:4d:2a:42:dd:0f:d5:a3:81:70:b2:ce:99:db:
7a:b3:a4:5a:58:e7:07:62:18:35:df:13:e7:d7:45:42:d0:a8:
ff:f7:5e:57:f7:cd:91:be:87:91:cc:ce:3b:be:cc:b0:a3:23:
fe:56:60:20:24:06:0f:f2:cd:3a:b3:c8:34:47:38:ff:f9:ea:
bf:27:f7:20:19:c1:25:29:fe:5a:ca:08:ee:d9:14:73:61:d2:
61:4d:5a:8b:6b:d6:fe:b5:63:8a:50:22:1b:44:40:51:6e:41:
81:7a:b7:19:e0:60:00:ed:07:af:61:54:56:49:0d:f2:69:53:
51:ab:c6:1b:c7:2c:70:c0:f1:7b:1c:c6:fd:c0:46:fd:49:16:
3f:b5:4b:5e:1b:fc:47:8f:06:74:97:43:0b:28:59:31:77:52:
73:88:03:57:df:c3:11:29:a9:70:d8:fd:3e:57:f2:c9:2b:35:
de:61:02:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:04:52 2025 by rpki-client