
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
File: vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft (raw, json)
Hash identifier: rijf2JJc/Z1riRTQ4Fu6RyOECESfTiRok1JPPaqjH2I=
Subject key identifier: 3A:E3:33:FD:37:D9:32:CE:F3:42:E9:28:84:7C:F5:A4:BF:BD:0B:CA
Authority key identifier: BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D
Certificate issuer: /CN=A91CB816/serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D
Certificate serial: 0769
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
Manifest number: 075F
Signing time: Tue 04 Nov 2025 21:44:10 +0000
Manifest this update: Tue 04 Nov 2025 21:44:09 +0000
Manifest next update: Tue 11 Nov 2025 21:44:09 +0000
Files and hashes: 1: vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl (hash: ln6B1Ao/CnmGTlE6V8NYJ0L9WXlLhG2fJmhagDaDpMY=)
2: 122052A03DD811EBAE99F45CC4F9AE02.roa (hash: QraXnZCET4DytM5/10lXcxYbwH8hmrtP3mDCaQ6jJXk=)
3: 7D8845C43DD911EB8DA0EE5FC4F9AE02.roa (hash: TJhxFRJSMHDZftvXajaD5yBRa7CxOx/OA+78HFtd2eM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl
rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:44:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1897 (0x769)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB816, serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D
Validity
Not Before: Nov 4 21:44:09 2025 GMT
Not After : Nov 11 21:44:09 2025 GMT
Subject: CN=690a73aa-7d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7f:05:06:9f:03:10:1f:e0:84:22:51:48:de:
86:9a:5f:3c:a2:82:96:90:87:94:2f:6b:c4:af:7a:
0e:39:a0:cc:21:71:0d:86:51:2a:18:17:56:8c:c9:
41:42:0d:80:e5:2e:d7:0f:e0:d5:35:1e:cd:d6:40:
d3:c1:65:28:fb:97:e5:42:93:35:a6:f1:a7:4a:5b:
e4:46:e0:79:1d:8b:a5:7f:3d:37:0c:81:88:07:4a:
c3:ec:26:60:67:9a:78:52:4e:cc:75:e6:7e:82:ad:
4c:4d:56:2a:3d:2a:63:fa:70:5f:d2:53:93:f2:ab:
ff:3a:34:48:af:61:6f:26:80:7d:56:4d:0a:62:b1:
f8:54:eb:ea:5a:0a:f1:c2:f2:85:5f:e6:21:b5:97:
ea:f7:4a:53:95:f8:1d:00:be:3e:e0:bf:10:99:9e:
98:3b:c7:ac:18:47:d1:3f:67:a2:78:08:f8:d3:69:
e2:d1:48:5d:31:44:e6:59:ef:ac:de:56:94:1e:a3:
8c:6e:96:bc:e0:1a:d7:e5:7e:d6:d0:45:d3:0e:49:
47:78:56:f6:07:d1:8b:9a:d4:0c:66:28:6a:e5:94:
aa:7c:40:06:69:fe:bd:5d:e2:04:88:98:10:90:33:
45:1f:37:ab:08:c6:5f:c4:a5:14:a7:a8:be:22:9d:
23:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E3:33:FD:37:D9:32:CE:F3:42:E9:28:84:7C:F5:A4:BF:BD:0B:CA
X509v3 Authority Key Identifier:
keyid:BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:61:6e:61:de:4b:40:f6:92:6d:d3:8d:1e:2b:5a:b9:8e:f1:
34:8d:35:92:2c:a8:b4:9c:b6:b1:1a:15:f8:22:de:ae:4f:34:
fd:dd:9b:19:9e:bd:b1:80:eb:6f:01:cf:48:76:e0:0b:80:64:
2e:a7:57:62:45:cf:26:4b:4f:31:27:14:cf:af:3c:df:ff:57:
e6:a4:d8:e2:3f:d1:88:da:10:f2:7f:a6:45:67:0c:76:df:01:
9f:ea:27:f6:be:b1:4f:6f:a1:27:eb:62:1b:01:74:73:9e:8f:
50:8f:84:0e:07:d8:5f:41:65:23:f6:cd:95:7d:4a:eb:ac:52:
ed:9a:43:de:c3:40:71:5c:cf:2d:2d:6c:d1:1b:5a:cc:18:0f:
4b:a8:28:e3:c1:90:1b:5a:51:b1:84:ba:a3:8c:a3:4b:47:3c:
6e:3c:fa:b4:c8:8b:24:60:89:01:c0:65:20:b7:93:81:e9:94:
d7:f7:ef:bc:1c:6a:7b:ac:d8:19:ca:27:de:d3:f4:d4:9c:4a:
6e:67:d3:49:c5:1f:ec:01:2e:56:30:cd:eb:71:08:32:39:b8:
da:ba:1a:88:70:e3:ac:f5:2b:da:be:13:50:bb:3e:63:ea:b1:
5b:11:53:db:d3:8e:e9:9d:99:b8:f3:3f:b0:1d:68:fb:dc:4d:
46:5d:0d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:07:44 2025 by rpki-client