
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.mft
File: 0fGDjm-uASwUWNKgeiJNnhEBJdw.mft (raw, json)
Hash identifier: 5LX8+eIJmQ41SMaweamQFHL8rnGjBKKrdtYqAVeKuL8=
Subject key identifier: FB:3B:B7:42:FF:8B:AE:3C:A4:B9:DF:9C:D7:24:8C:AE:A2:62:9F:8E
Authority key identifier: D1:F1:83:8E:6F:AE:01:2C:14:58:D2:A0:7A:22:4D:9E:11:01:25:DC
Certificate issuer: /CN=A91D3603/serialNumber=D1F1838E6FAE012C1458D2A07A224D9E110125DC
Certificate serial: 052E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fGDjm-uASwUWNKgeiJNnhEBJdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.mft
Manifest number: 0527
Signing time: Tue 04 Nov 2025 23:36:39 +0000
Manifest this update: Tue 04 Nov 2025 23:36:38 +0000
Manifest next update: Tue 11 Nov 2025 23:36:38 +0000
Files and hashes: 1: 0fGDjm-uASwUWNKgeiJNnhEBJdw.crl (hash: pnjuxQuSYpleND0/kx12MS6sIG247fyF4NqtYreBfTo=)
2: 11F818F81F7311EC9027050AC4F9AE02.roa (hash: b/ItM9VGVv0zUWnweJ6+Pz3YcBgADXF1u82bmhYCBN4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.crl
rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fGDjm-uASwUWNKgeiJNnhEBJdw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 23:36:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1326 (0x52e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3603, serialNumber=D1F1838E6FAE012C1458D2A07A224D9E110125DC
Validity
Not Before: Nov 4 23:36:38 2025 GMT
Not After : Nov 11 23:36:38 2025 GMT
Subject: CN=690a8e06-00e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:b7:10:4f:65:ba:58:a3:2f:28:4a:fb:ee:
08:d9:1b:f0:72:db:29:f8:d0:bf:36:64:86:47:6a:
6a:1f:95:8d:f8:99:5b:91:a5:bc:f5:58:67:6a:60:
5d:44:60:86:1d:47:b8:f4:68:4f:c6:b5:b6:fb:f1:
4c:62:49:3a:14:e1:f2:2a:0d:65:5c:d1:fe:fc:42:
e5:3b:08:b9:4c:e0:7c:2e:32:f1:80:eb:9f:db:ce:
29:25:a4:42:8f:8f:bc:b1:3e:10:b7:a1:70:c5:44:
aa:9d:cc:16:a9:a3:a5:09:01:70:4a:f6:aa:10:d5:
9a:04:19:bd:9d:e6:91:c2:4c:34:32:a8:89:95:01:
e7:4e:ab:7a:2e:15:66:49:2c:68:4d:ea:ff:ae:78:
7b:e9:b2:34:bc:5b:94:39:2c:8a:df:3c:ca:90:8f:
ac:bc:34:f0:2f:36:af:a7:78:04:63:45:32:a6:8c:
d4:14:10:40:90:30:93:3c:6e:66:55:22:f2:e0:f6:
e7:02:86:48:f2:95:a7:49:77:50:e8:10:72:4b:e0:
80:1e:0b:49:74:9d:be:c5:e2:bf:ef:70:cd:71:9b:
07:b2:45:2b:fa:9a:75:3a:94:80:33:f2:7a:7e:5d:
f3:02:f7:0c:1e:77:5e:1a:a0:78:99:e1:41:62:57:
eb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3B:B7:42:FF:8B:AE:3C:A4:B9:DF:9C:D7:24:8C:AE:A2:62:9F:8E
X509v3 Authority Key Identifier:
keyid:D1:F1:83:8E:6F:AE:01:2C:14:58:D2:A0:7A:22:4D:9E:11:01:25:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fGDjm-uASwUWNKgeiJNnhEBJdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:61:b0:ab:19:6c:6d:ca:2f:3d:de:20:58:13:8c:7a:b9:70:
9f:6c:94:7f:df:fb:e8:b7:27:3c:5d:25:81:7c:53:37:2a:8c:
aa:b4:2e:03:2f:14:f6:92:7b:f3:fc:e2:80:20:18:c3:20:88:
80:65:0b:b4:1d:f2:9f:d0:d9:2e:dd:f8:5e:e2:e8:01:47:06:
ec:dc:a1:85:3e:8e:bc:ee:ce:ed:0c:df:53:90:24:bd:86:76:
89:83:32:fb:a3:a2:74:59:20:1f:d9:21:34:6d:d0:e8:0a:ed:
b7:3a:39:d7:6a:50:e4:66:52:ef:43:d4:f7:ab:c4:76:a3:41:
a4:a6:12:8a:2b:59:e5:d9:6f:72:f7:de:d3:96:cb:d1:1c:28:
c9:f4:20:23:81:48:14:11:0a:ce:46:42:1d:ac:a7:75:c4:bc:
57:bb:43:ca:e4:8e:8a:a1:11:51:28:b0:c8:15:97:76:48:47:
67:85:f8:ee:03:4e:38:26:71:04:b1:dd:43:f9:23:62:8c:b0:
a7:e5:d6:1b:76:3a:bd:a5:ce:44:47:fa:99:13:97:a8:8c:01:
71:a7:cc:e6:2d:2c:39:ec:65:5f:9f:e8:28:41:73:a6:82:90:
ea:d6:c8:d1:d8:70:86:87:e8:02:54:bb:26:21:65:f1:52:00:
f7:c2:1c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:07:38 2025 by rpki-client