
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft
File: k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft (raw, json)
Hash identifier: ib902vwu62UyRzVB0huECXzCMd7ZlSbIQi7gU6K6WdY=
Subject key identifier: 3D:F4:53:6A:6F:9F:49:15:E9:EB:F0:F0:EE:A7:7D:4C:91:27:E3:83
Authority key identifier: 93:57:44:41:B4:16:9F:5C:BE:33:1C:2E:ED:56:E8:83:DC:EF:45:23
Certificate issuer: /CN=A91C4EE6/serialNumber=93574441B4169F5CBE331C2EED56E883DCEF4523
Certificate serial: 26DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft
Manifest number: 26D8
Signing time: Sun 02 Nov 2025 15:41:13 +0000
Manifest this update: Sun 02 Nov 2025 15:41:13 +0000
Manifest next update: Sun 09 Nov 2025 15:41:13 +0000
Files and hashes: 1: k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl (hash: /otwRza6FJmTLNmBqEKmRyAZYyzsjEV+nQz4NzzR9WE=)
2: 2E078068008111F0AB00F337C4F9AE02.roa (hash: VJHoTPQ0jea+ijUJEtlYJDCyIW2/0tYaKWZJwfLhYW0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl
rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 15:41:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9946 (0x26da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4EE6, serialNumber=93574441B4169F5CBE331C2EED56E883DCEF4523
Validity
Not Before: Nov 2 15:41:13 2025 GMT
Not After : Nov 9 15:41:13 2025 GMT
Subject: CN=69077b99-8a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:cb:58:d3:61:f3:5b:d1:89:6b:bb:fa:5e:
b5:5a:ab:6d:91:90:59:77:fe:54:86:30:9e:64:89:
c1:bb:2c:62:20:86:58:29:b9:ef:08:97:c0:a4:de:
cf:31:a5:f8:cd:d2:07:92:90:6b:ac:70:08:03:8d:
af:54:70:88:f9:28:b2:81:c5:65:62:e3:1f:71:2d:
36:ec:ae:0d:f0:f2:48:d6:ff:ba:0d:ce:f2:f8:93:
b8:34:91:f8:36:44:80:32:a1:60:9c:61:62:7f:07:
7e:ec:3c:9f:b3:e1:65:6b:01:f0:16:1e:2d:a1:36:
17:c7:fa:5f:60:0a:23:cf:74:69:24:28:ec:43:95:
74:da:a9:8c:70:e0:55:16:50:48:0c:89:5a:2f:e0:
0c:ad:d1:90:33:e7:22:13:79:7e:82:bd:fa:93:98:
61:9d:4e:89:62:34:c4:94:8e:8e:8c:f7:81:12:75:
9f:89:86:f1:26:e3:1d:5b:5e:3f:cf:d7:fd:81:71:
ca:ab:77:f9:e9:c4:73:88:6f:33:5e:2d:11:a3:11:
50:fc:f6:d2:d4:83:65:03:27:29:d3:04:a3:29:19:
46:e3:36:81:bb:38:e0:1a:0e:25:b2:35:ae:15:89:
fd:7c:9c:04:e8:c9:cf:4c:45:89:5a:e1:77:3c:7b:
d4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F4:53:6A:6F:9F:49:15:E9:EB:F0:F0:EE:A7:7D:4C:91:27:E3:83
X509v3 Authority Key Identifier:
keyid:93:57:44:41:B4:16:9F:5C:BE:33:1C:2E:ED:56:E8:83:DC:EF:45:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:df:d1:40:84:43:26:78:74:b2:19:45:ff:db:37:ed:f2:75:
f2:e1:c1:a0:d6:d7:93:f1:a4:12:b1:8d:fd:85:3c:cb:c9:cc:
bd:7d:8b:89:7c:ed:b6:1a:65:4d:c7:e4:40:b4:ed:a9:45:04:
7d:0d:cb:37:74:47:8b:b7:51:fe:88:3e:e9:53:ce:4c:ec:ec:
33:35:75:dc:ec:ba:11:26:5d:0b:d9:f9:ff:8d:66:0f:da:c2:
4e:69:5c:16:4b:3a:67:6e:a4:de:f5:60:22:84:77:89:20:d6:
05:26:42:46:e1:08:25:c2:a0:ec:ed:f5:a7:38:eb:89:7c:68:
12:28:0c:86:b1:3d:44:31:b3:a2:72:cf:b0:11:2c:a6:72:e9:
2d:b4:c3:1b:45:8f:d0:a5:4a:67:90:c8:78:88:3c:ab:9a:53:
12:03:d1:8f:f6:11:9b:9d:0a:7b:01:6a:30:40:58:6f:fe:01:
64:b0:4a:22:6b:b2:08:20:ff:7b:e4:52:46:0f:4c:27:4f:4c:
14:e3:53:e6:74:e6:31:a6:7a:6f:a4:06:94:b6:c5:1e:8d:78:
47:12:bd:b7:2d:1a:61:c0:ef:03:ee:fb:33:83:9a:59:ed:38:
22:bc:b3:56:a3:dd:8d:65:b6:75:2b:e4:01:62:d7:02:5e:41:
4d:8b:d7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:39 2025 by rpki-client