
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
File: 0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft (raw, json)
Hash identifier: 5q5ZyP2qHoiajcNEVq1+1dt9XXh/bsROSqGrOog0jC0=
Subject key identifier: B1:2D:98:CC:D1:5F:CC:28:A8:B6:39:11:7B:D4:A8:DD:D3:B7:7D:1C
Authority key identifier: D2:6E:22:30:62:18:DA:96:C3:02:FB:EA:AC:94:37:27:5B:1E:C6:ED
Certificate issuer: /CN=A91DC24F/serialNumber=D26E22306218DA96C302FBEAAC9437275B1EC6ED
Certificate serial: 0190
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
Manifest number: 0188
Signing time: Wed 05 Nov 2025 03:46:01 +0000
Manifest this update: Wed 05 Nov 2025 03:46:00 +0000
Manifest next update: Wed 12 Nov 2025 03:46:00 +0000
Files and hashes: 1: 0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl (hash: vRf3RQN1Auu+qmne/VEj5Jt9KC/9Y4XBELrYscrKnd0=)
2: E4A5F20468D011EE8509F75CC4F9AE02.roa (hash: JQKbNYMf/zVARnkpO4HdrpLHL11BuAmo0S1Bwvh58kQ=)
3: E50B556868D011EE8509F75CC4F9AE02.roa (hash: 15Ef3WoCrFkSaZWsvVqBxZqSnhk/RC+N8roeKpk66Po=)
4: E42B360468D011EE8509F75CC4F9AE02.roa (hash: 3NF/WOhgj9HD4AOf9A4AyqHhiWaUzMkr0bQxzyCSlus=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl
rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC24F, serialNumber=D26E22306218DA96C302FBEAAC9437275B1EC6ED
Validity
Not Before: Nov 5 03:46:00 2025 GMT
Not After : Nov 12 03:46:00 2025 GMT
Subject: CN=690ac879-defe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:60:b1:62:51:24:49:ad:41:d9:1e:65:e8:9c:
84:35:31:2e:a4:86:fd:de:4d:d3:ef:ea:17:e3:ca:
80:74:94:47:5e:62:7e:05:68:ea:02:ac:67:07:51:
0a:32:0b:9d:cd:48:e8:f7:25:f6:01:be:2c:80:94:
af:29:56:42:dd:aa:4d:b5:75:69:8d:fd:b4:f0:eb:
a0:87:9f:ba:08:ed:c7:3b:f8:dd:76:73:08:40:ee:
7f:19:fc:99:6e:64:29:b2:ae:77:d4:75:e3:ac:ba:
56:75:7d:a3:69:61:c9:f9:34:0c:63:d1:5d:6b:ba:
5e:3b:c8:aa:7e:c1:ec:93:ab:87:73:4d:ac:8c:69:
c2:bd:8f:e9:47:f4:fe:a5:2e:c3:03:42:eb:70:66:
a7:bf:d2:38:f1:36:3a:66:47:f2:00:85:2d:19:ab:
1b:e0:17:4a:b8:67:5a:20:b2:1e:d6:01:bd:92:3d:
8e:07:b7:7a:2e:8f:2a:6a:5b:3a:41:34:a2:8e:a7:
ad:da:c8:cc:17:f1:4a:03:05:bd:4d:b4:4e:4d:11:
0e:4d:05:34:85:10:9e:39:0d:41:d8:06:05:f7:af:
60:35:08:db:58:0b:90:c4:72:1f:ad:35:ce:f6:f2:
6c:88:9e:ed:95:ec:b1:75:bc:54:6c:4e:de:ea:4b:
10:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2D:98:CC:D1:5F:CC:28:A8:B6:39:11:7B:D4:A8:DD:D3:B7:7D:1C
X509v3 Authority Key Identifier:
keyid:D2:6E:22:30:62:18:DA:96:C3:02:FB:EA:AC:94:37:27:5B:1E:C6:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:a3:f3:8b:0e:e1:38:1c:f4:ef:dd:e6:65:1b:68:73:76:ff:
0a:66:3a:27:07:1f:49:bf:7f:6c:0c:93:f5:eb:77:f8:4b:4e:
0b:cf:ef:45:76:69:65:6c:f8:67:b7:85:97:50:ce:96:0b:c6:
a2:c5:6b:7d:3b:13:92:fc:41:55:c3:73:a1:d8:86:ef:ab:a7:
fb:55:b9:e3:82:71:89:ee:21:f4:c0:c5:53:e2:b6:9f:87:2e:
e4:7c:0a:5a:37:9c:fc:8b:cd:ab:12:42:1b:18:34:a8:4a:98:
a7:b7:39:ae:57:25:68:39:e8:59:55:64:c4:47:84:7f:5e:3d:
cd:15:b1:a0:7e:8b:3c:38:74:e5:28:18:9b:13:b7:22:93:7e:
ca:bf:58:ec:a8:40:c3:91:0e:98:76:73:c9:1f:ad:af:b5:7d:
05:c0:9c:98:e3:10:d9:f9:15:09:05:ec:5d:27:86:1f:67:af:
e4:1d:02:05:60:ff:f7:41:fa:bc:39:e2:6b:50:94:ee:02:25:
2b:d8:c5:53:15:6d:eb:e4:95:a9:65:5f:62:ba:4a:4c:ea:19:
52:3a:83:a9:41:75:51:f4:70:53:a3:79:13:dd:d5:a8:cd:e2:
a5:9b:54:ef:e4:df:eb:b8:df:dc:da:ee:76:06:cf:ff:c4:10:
94:4d:bb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:25:55 2025 by rpki-client