
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
File: Abso_b4VWoZixe5oDP3wyY1OvR0.mft (raw, json)
Hash identifier: a5biwhe0nWzfpBOJlxeJHq/FkyPe95jlKI7dqPp2miE=
Subject key identifier: A6:C2:5B:FD:90:99:81:99:B3:4C:6C:58:51:86:81:66:4A:05:15:D0
Authority key identifier: 01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D
Certificate issuer: /CN=A91DACA7/serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
Manifest number: F3
Signing time: Wed 05 Nov 2025 05:25:30 +0000
Manifest this update: Wed 05 Nov 2025 05:25:30 +0000
Manifest next update: Wed 12 Nov 2025 05:25:30 +0000
Files and hashes: 1: Abso_b4VWoZixe5oDP3wyY1OvR0.crl (hash: cgwhUACZWNJNqPNPmU6yE+PnuEUA666w0z/AjmIGZdc=)
2: ECB0C56845B211EFBCC09A1AC4F9AE02.roa (hash: EGPY/0B+FhNPcxx4yI5SHvTWW9NTcAbNHzvZ84arIm4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl
rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:25:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DACA7, serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D
Validity
Not Before: Nov 5 05:25:30 2025 GMT
Not After : Nov 12 05:25:30 2025 GMT
Subject: CN=690adfca-cfc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:35:d7:01:6b:d5:8e:e7:ba:bd:42:ee:81:
89:fb:99:5e:c7:6f:20:69:8a:5a:d2:05:4f:db:ae:
1b:57:26:ea:19:db:f9:96:e5:b7:3f:e7:93:96:63:
ac:d3:0e:2b:6e:33:cf:3f:ef:54:91:8d:37:a0:78:
84:fd:32:66:9d:4c:34:10:7a:4b:69:9a:ba:21:88:
a3:38:e4:c9:60:b2:69:ef:0f:2d:7c:a9:11:c6:6d:
11:a8:33:26:39:3d:e5:37:a8:67:22:06:8e:14:83:
c3:11:a4:71:8e:e4:24:fc:c0:de:3f:66:7f:15:91:
9f:33:67:c5:7d:96:65:c0:9a:ae:84:1e:a4:02:45:
7f:e1:e5:36:d3:bd:e9:68:3a:a1:80:46:bd:14:70:
06:32:0b:8f:93:77:a2:8e:0d:7d:69:09:a4:b4:d0:
58:26:66:f7:b9:21:40:d2:6e:ae:1e:86:78:10:b1:
e4:a7:74:66:ff:35:ee:2b:a0:f8:7d:f6:55:a2:6b:
ae:fc:ef:88:38:e6:1c:7a:7d:f2:4a:42:aa:3f:d0:
91:b6:da:61:d2:f2:d7:b1:7f:bb:34:d2:0c:1b:72:
f2:70:39:3a:60:09:23:22:4c:99:01:97:ea:f4:34:
12:82:1e:45:88:01:b8:e7:ed:32:c7:9e:a7:f1:7b:
b9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C2:5B:FD:90:99:81:99:B3:4C:6C:58:51:86:81:66:4A:05:15:D0
X509v3 Authority Key Identifier:
keyid:01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ee:e9:db:34:c2:98:b9:03:5f:75:e1:cc:f3:8b:02:68:ce:
34:6b:43:ed:c5:3e:66:75:50:22:57:65:74:9d:ef:72:e0:40:
89:b1:7f:34:2a:7f:e8:10:64:af:d0:1b:72:56:ac:af:a6:0f:
77:51:bf:fb:fa:98:ba:53:1a:2a:52:b6:46:98:48:fa:d4:e8:
ef:c0:e3:16:d7:e7:6c:18:b0:31:58:53:4d:8b:74:75:db:45:
85:9f:9f:aa:d6:5d:70:ae:c7:fe:94:0b:5a:39:56:25:0c:85:
2a:76:ce:8e:87:9e:93:73:00:df:75:f4:75:33:70:2d:56:53:
e4:22:d8:a4:17:d2:26:0d:98:82:e6:cc:fd:cf:47:8b:0a:69:
84:7c:10:91:5e:4a:eb:6f:0a:13:c8:02:5b:cb:9e:c7:7d:dc:
9d:1d:93:1c:20:31:ae:39:07:58:ba:c0:ef:90:09:02:40:30:
2e:fd:4e:05:a7:c0:5a:8b:fc:60:7e:1d:c3:e1:a0:32:3e:a7:
b4:29:ae:1d:4f:27:6b:ff:f2:e8:95:46:d5:81:62:56:f3:e1:
6a:09:4c:fb:8a:a0:2d:0e:fe:95:41:23:47:df:2b:45:62:fe:
fd:c3:97:bc:14:ea:f3:9e:02:ea:36:e1:20:9d:d8:ef:2b:47:
c3:14:fe:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:47:19 2025 by rpki-client