
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
File: THDgIDLqWcKv1UGhhw10sEDRtqI.mft (raw, json)
Hash identifier: fGtdxeawvIUVrUYLm61dVX5SEq/sbGFrVvCZOmGNvo4=
Subject key identifier: 91:BC:4E:FB:91:18:6E:C8:18:D3:53:21:BF:00:05:15:67:34:35:9D
Authority key identifier: 4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2
Certificate issuer: /CN=A91D615F/serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
Certificate serial: 095F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
Manifest number: 0956
Signing time: Sun 26 Oct 2025 20:44:18 +0000
Manifest this update: Sun 26 Oct 2025 20:44:17 +0000
Manifest next update: Sun 02 Nov 2025 20:44:17 +0000
Files and hashes: 1: THDgIDLqWcKv1UGhhw10sEDRtqI.crl (hash: Bu5Yby/8AoMPxG6+zr7pYrC5tBH/Ols6reOYcAdIQws=)
2: 05CABF92A64111EAB544074CC4F9AE02.roa (hash: 9fYoRLuvAE3GnGPowVCGSoqu6QzF0dUDca3PyP5zjdg=)
3: 193128AAD15D11EE8BD5C02BC4F9AE02.roa (hash: /+hXj2B+GgaDbKZ5BK9B4X/m6qkH66B+b+D/QNmlbQE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl
rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Nov 2025 20:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2399 (0x95f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D615F, serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
Validity
Not Before: Oct 26 20:44:17 2025 GMT
Not After : Nov 2 20:44:17 2025 GMT
Subject: CN=68fe8821-7cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5c:ee:85:a5:2b:00:26:0f:6f:80:94:d0:67:
75:24:f4:fd:c2:de:cf:b7:95:bb:dc:61:86:67:05:
23:37:b8:c3:96:a9:f0:e7:0b:f5:1c:e5:97:20:23:
67:43:7e:52:8e:0c:7f:a7:6c:2c:44:80:61:0c:4f:
6e:05:84:83:4f:cf:c0:2c:3d:41:51:f1:54:d3:3e:
f8:77:b3:2c:a3:96:24:d8:da:b6:cb:8e:0b:b9:2f:
af:05:2f:73:db:c2:84:69:5f:f0:60:d5:23:c3:7a:
b9:6d:e0:ab:69:9a:1c:2c:eb:49:f1:92:96:08:5d:
ea:67:73:1b:58:b7:8a:dd:19:f7:f0:16:a4:46:96:
96:73:2b:14:ea:13:57:54:9c:f4:cb:a7:de:a1:a9:
ad:54:2b:18:e9:1c:ca:6b:9c:22:76:42:66:b5:d2:
67:2c:dc:25:41:05:db:06:47:83:fa:64:92:c7:5c:
37:15:43:6a:12:35:a2:e1:d8:dc:f0:3f:83:9b:85:
93:b0:97:c4:23:fa:49:4d:53:2f:17:d9:35:16:e6:
d0:82:f0:2b:b8:36:76:2c:42:4f:34:47:4c:3f:72:
5e:21:0c:6b:dd:34:e6:3f:22:19:e2:f8:a7:b0:28:
16:95:1a:e5:23:ed:f8:dd:c1:e2:ae:ed:88:0a:04:
5c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BC:4E:FB:91:18:6E:C8:18:D3:53:21:BF:00:05:15:67:34:35:9D
X509v3 Authority Key Identifier:
keyid:4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:8c:5a:5c:f0:ec:87:d1:35:c6:74:b5:69:ef:54:42:58:8c:
e3:c3:a1:3b:07:0d:38:dc:09:7d:ae:b3:ac:47:81:5d:cd:cf:
37:d5:3b:67:8b:91:15:bb:27:eb:bd:14:53:cc:53:fc:0a:95:
73:96:30:56:ba:a9:0d:51:c0:5a:5b:5b:ad:5a:7f:a4:a6:0f:
40:72:f6:61:7b:38:c2:49:ca:b9:e2:ad:d5:f7:9c:00:c3:99:
8b:25:19:34:e4:f6:74:2f:93:6f:be:93:29:e1:64:ac:a9:d7:
a0:ad:60:ee:48:b2:d3:f2:39:65:44:ac:5a:3d:ab:d3:27:25:
74:01:fe:52:1c:ed:d9:e0:10:60:ca:68:6a:8b:c6:14:9c:ca:
fb:2a:ee:9e:f8:bf:99:ab:c8:0c:fc:fd:a2:66:a3:bc:8c:c2:
ef:76:db:f7:31:59:de:cd:11:40:d1:4f:5c:a0:b2:13:19:9f:
a9:6b:3a:bc:49:a9:92:e5:05:a7:6e:c1:35:b0:a1:d6:0c:ba:
d7:49:fc:0b:29:ff:db:31:20:76:e3:22:4d:1d:db:01:ce:cf:
db:77:66:a1:e7:55:ab:a6:7e:9f:ec:85:03:d2:36:03:31:58:
5b:b5:89:a5:17:f2:3f:2f:89:38:de:a0:c8:4e:ec:3e:92:48:
7c:06:b6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:27:55 2025 by rpki-client