
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
File: tv1vS0-3wyR8WZKZsui6-1qLunI.mft (raw, json)
Hash identifier: u1o5EDfbpjTyHh+iovraJnnDHF7NvlPw/6+wxUHza4w=
Subject key identifier: AF:3B:FA:A4:48:42:55:68:EB:D4:38:F0:44:91:BA:D1:2E:1C:E6:16
Authority key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
Certificate issuer: /CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Certificate serial: 06CA
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
Manifest number: 06B8
Signing time: Wed 22 Oct 2025 23:05:46 +0000
Manifest this update: Wed 22 Oct 2025 23:05:45 +0000
Manifest next update: Wed 29 Oct 2025 23:05:45 +0000
Files and hashes: 1: tv1vS0-3wyR8WZKZsui6-1qLunI.crl (hash: C6kDBWk/mggtIyCyFbazyE8Rj/Wq7eEaRnXQ+k1Ou10=)
2: EC427D64B16311ECA18ED12FC4F9AE02.roa (hash: Ga4Z3DpE9aUbX7W5p2tUSOPgf7WkxMTRgFBKaq09Cxs=)
3: 35341F3E4EAE11EF811DC17BC4F9AE02.roa (hash: 1g7V3yJi0/XsTFsCpcEg/UcPiKQqpqW1UWTVYTWMIZE=)
4: A40873CE7FB811EB82018D29C4F9AE02.roa (hash: x1uMmRK43yay8ZPmLxVu8RIg3TAXDE9HwOF5tkl8BVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Oct 2025 23:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1738 (0x6ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE3C4, serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Validity
Not Before: Oct 22 23:05:45 2025 GMT
Not After : Oct 29 23:05:45 2025 GMT
Subject: CN=68f9634a-bebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a5:3b:75:9f:f4:51:e6:d6:e1:3f:fd:68:73:
a4:21:85:dd:82:dc:4a:63:fc:e3:48:a9:04:8d:1c:
66:42:12:51:2c:b5:fe:2e:cd:88:f8:93:af:e6:39:
45:06:07:bd:07:17:78:de:8e:52:5b:a3:c9:47:b8:
eb:a6:6a:e4:a6:18:a6:59:d0:7e:89:57:cf:39:d6:
98:28:dd:8f:cd:46:da:97:71:a1:dd:c5:b3:3f:39:
2c:21:a3:37:de:c1:5c:10:69:a2:d2:7b:b2:85:23:
5b:c0:04:85:c8:5e:d0:8b:46:85:6d:fc:20:42:24:
b6:df:5c:70:1b:c7:63:f6:83:30:12:a5:c9:0e:93:
b5:c9:a6:fb:e2:3f:1a:10:b3:bd:fe:b1:13:a9:d4:
d3:ad:c8:53:a2:ff:94:dd:86:d4:f9:1c:b1:a6:93:
a5:33:33:e7:34:26:ca:e3:44:72:c2:07:6a:5c:8b:
d7:c2:5e:e1:14:42:c5:4a:e3:2d:67:af:2c:c9:b2:
3a:8f:07:74:2a:6c:fc:c1:d8:28:96:2f:30:e9:9e:
3e:a3:36:3b:1b:7b:12:de:8d:26:b3:59:0d:36:8d:
44:ca:62:ef:d0:cd:40:35:7e:75:aa:1e:4f:30:23:
28:03:32:3d:c0:36:29:61:73:dc:bf:db:2d:44:54:
9a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3B:FA:A4:48:42:55:68:EB:D4:38:F0:44:91:BA:D1:2E:1C:E6:16
X509v3 Authority Key Identifier:
keyid:B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:27:34:3d:d4:b1:28:e0:4e:ba:c2:d1:dd:ba:2a:3e:31:22:
d7:13:f7:ec:27:81:0d:76:48:b8:66:ea:99:8b:e8:0a:60:fb:
a1:06:c2:50:7c:97:41:e0:84:6d:df:8d:7a:59:32:98:e3:35:
ed:06:3d:aa:13:ec:e3:67:8f:18:76:0f:d0:77:02:83:60:19:
a6:a4:ea:de:23:d1:4b:75:cd:cb:47:97:67:22:56:1b:58:66:
5d:8e:54:7e:0f:76:d4:61:14:dc:81:06:9f:76:3e:90:27:17:
79:64:2e:65:63:2a:9a:9e:62:a1:01:56:88:d4:17:a4:12:19:
14:6d:b2:17:1e:95:e5:0b:02:63:09:79:fc:27:ea:0d:13:2d:
e2:da:9c:0d:57:54:19:eb:c9:59:58:77:a6:b0:f3:c3:7d:47:
e4:88:07:53:02:e6:bd:b7:d1:27:9c:d8:41:38:25:7b:83:df:
a4:c9:81:18:b1:df:f7:95:63:17:ae:f8:c3:0c:be:2a:7d:07:
4e:e2:c7:21:b8:1e:e7:1d:a8:4d:77:c2:a5:ed:34:21:a4:4b:
75:fc:94:41:dd:0b:7b:d4:2a:d0:6e:4c:e2:c7:ba:fc:39:cb:
a6:b7:71:3b:11:69:bb:7c:4d:5b:ba:5a:07:e3:40:bd:e8:89:
85:fe:8a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 18:08:10 2025 by rpki-client