
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
File: 07TuvD2fWh6iApZpmumSiBsdjf0.mft (raw, json)
Hash identifier: DKDiul5p0gQdwoFMuzefyldJr+My/enCUV/fWWh29X8=
Subject key identifier: C4:44:3B:B1:8D:58:DD:29:E8:77:B0:E4:4D:EB:28:1B:94:1A:6E:BF
Authority key identifier: D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD
Certificate issuer: /CN=A91CD4E0/serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD
Certificate serial: 069F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
Manifest number: 069C
Signing time: Fri 24 Oct 2025 14:52:22 +0000
Manifest this update: Fri 24 Oct 2025 14:52:22 +0000
Manifest next update: Fri 31 Oct 2025 14:52:22 +0000
Files and hashes: 1: 07TuvD2fWh6iApZpmumSiBsdjf0.crl (hash: 2/u7F7HwmLz7CsSQAu/BlqqE2yQj+W1a3Sr09xwO+wU=)
2: E969742CB33B11EEB4D87842C4F9AE02.roa (hash: oxmHGKf/WSOT7WzpjdLiOn3oXWfHw/6ypS3n/mBbPHA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl
rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 14:52:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1695 (0x69f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD4E0, serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD
Validity
Not Before: Oct 24 14:52:22 2025 GMT
Not After : Oct 31 14:52:22 2025 GMT
Subject: CN=68fb92a6-5689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:19:fb:e2:a0:54:57:b7:b9:07:20:9c:83:
bc:95:cc:8a:f5:a0:ed:f9:10:24:65:10:40:07:17:
c8:d6:08:79:c8:eb:29:bc:e3:da:2c:b5:e6:fd:09:
cd:0d:af:64:d5:04:18:b6:32:b2:9e:cc:fd:4d:56:
0b:20:80:1d:99:72:e5:02:40:ff:b1:70:93:3b:79:
8a:34:f2:b1:52:80:78:bb:01:2c:98:cf:a1:2e:ab:
58:83:e1:4b:d7:94:5a:ea:44:00:22:6e:bf:70:8e:
3a:f8:3d:49:75:d1:1b:bd:47:68:1f:23:2a:aa:dc:
6c:6b:de:f3:39:08:65:10:1f:2b:8a:1f:3a:1c:93:
ed:05:60:d5:22:6f:e0:f1:2a:c2:ff:aa:d9:a3:ab:
14:e2:06:94:3d:71:a5:b4:74:b8:3c:a0:d8:6c:ad:
db:d5:bb:20:3f:61:83:5b:9c:78:83:08:91:fb:3a:
9a:71:20:83:87:1f:7d:10:24:24:c3:0f:23:62:c6:
20:d8:b6:e2:c8:df:5c:01:46:db:dd:d7:72:9c:27:
35:44:21:52:78:46:e9:76:bd:22:85:25:fd:60:aa:
d3:5b:82:5e:ad:c6:57:d6:2d:5d:7a:6c:9a:e2:15:
16:c1:93:a1:ae:f1:16:9e:06:9c:0d:87:d6:88:03:
25:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:44:3B:B1:8D:58:DD:29:E8:77:B0:E4:4D:EB:28:1B:94:1A:6E:BF
X509v3 Authority Key Identifier:
keyid:D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:5d:5a:35:e0:62:c1:3b:00:e0:a7:77:db:92:14:9d:35:08:
af:fa:47:78:b8:d2:b4:b9:da:74:1d:f2:66:4b:0f:c4:2d:58:
48:bb:e7:43:42:60:6e:f1:dd:5f:35:bf:e7:0d:e5:1b:61:ab:
0f:c7:49:02:70:18:88:3b:3a:7f:33:ba:ee:a1:b4:3f:03:db:
01:76:b3:de:cc:76:f7:87:aa:4b:ac:91:5d:7c:fb:e2:e8:d6:
ea:d8:c5:fa:94:e8:11:b8:2a:ab:36:6b:2d:02:e7:e2:d4:8e:
48:cb:a4:12:42:e4:9e:7b:fa:cf:81:51:0e:60:a5:a8:89:93:
2f:ef:ce:49:8c:83:cd:14:80:4d:5e:3a:7f:67:c7:85:fc:c9:
d7:2c:e9:ae:e3:b3:1d:02:19:de:86:c7:b2:70:4f:ac:25:28:
d9:2d:fa:60:7f:7d:99:cd:ff:60:e3:40:36:e1:02:de:32:70:
ee:99:57:63:05:81:99:01:c1:67:a1:ff:35:45:be:41:44:7a:
52:bd:bd:28:cf:3b:eb:9d:ec:7a:14:93:68:1f:7b:b8:07:9d:
ba:4e:43:41:18:a9:8b:08:d6:c7:e9:b5:b6:e6:7c:57:84:38:
1d:89:7a:03:3f:ba:ab:9d:41:0f:54:f3:f6:63:8a:82:50:dc:
46:0d:5d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:19:06 2025 by rpki-client