
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
File: PusZaI0z1iGZTls9nkbsqqUJ9CM.mft (raw, json)
Hash identifier: EUv/M2j90maw5HeonvO8AtLh/VIOO5FuQnrT5KIr1dc=
Subject key identifier: 6E:FA:C7:CF:79:28:D7:25:27:63:9F:7E:97:3F:64:F9:99:F6:25:1A
Authority key identifier: 3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23
Certificate issuer: /CN=A91DE4AC/serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423
Certificate serial: 046D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
Manifest number: 0467
Signing time: Wed 05 Nov 2025 00:15:39 +0000
Manifest this update: Wed 05 Nov 2025 00:15:38 +0000
Manifest next update: Wed 12 Nov 2025 00:15:38 +0000
Files and hashes: 1: PusZaI0z1iGZTls9nkbsqqUJ9CM.crl (hash: iJunZBR3eiOQrDeh0fEz7KdvYEDpuuaa0cUYsoaIcEY=)
2: 0716B2646C7111EC8C5E6967C4F9AE02.roa (hash: FC5KH7zmbNiXwzzDmtV6gG59796J2EuM05tZKkGKGqk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl
rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:15:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1133 (0x46d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE4AC, serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423
Validity
Not Before: Nov 5 00:15:38 2025 GMT
Not After : Nov 12 00:15:38 2025 GMT
Subject: CN=690a972a-f500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d2:01:16:20:39:1f:5c:24:00:f8:f7:44:7b:
4f:d0:fb:d8:46:9d:ac:f3:5e:e3:ba:7d:92:04:4e:
ef:1e:de:bc:e3:80:f3:04:83:7f:f3:c2:54:f4:9e:
f8:8a:a6:08:16:4d:06:35:e0:fa:c9:94:d7:f7:3a:
58:cc:89:32:a0:8c:3b:8e:b1:ca:6c:a8:6b:48:73:
f8:14:db:9d:3f:9c:33:71:ed:25:87:a8:42:d9:0c:
52:3b:c8:ed:c4:dc:ed:8e:ca:e8:b4:47:82:06:30:
16:3c:d2:1e:a4:6c:64:17:32:e3:d7:28:d4:95:9e:
43:ab:0a:9d:ec:92:17:0c:79:a0:19:c9:4a:3a:20:
db:94:f6:a3:30:9b:40:fc:b1:08:f4:2e:87:c8:27:
28:5c:3e:18:a9:9e:bb:d9:90:f1:c5:df:a4:2e:11:
1f:9d:4a:df:8f:72:3a:dd:91:09:e3:57:a3:46:d0:
28:39:84:ee:46:9d:fe:36:65:76:96:df:e8:6f:47:
6f:d0:5a:6c:59:7b:af:aa:2a:b5:a2:dd:67:e5:69:
03:e7:57:75:f6:9e:80:db:58:15:f6:1b:03:3d:26:
27:97:da:22:0a:88:f0:4f:e2:18:0e:10:73:bb:c6:
a9:a1:1a:31:22:dc:ba:73:86:9d:53:ba:ca:e8:c1:
21:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FA:C7:CF:79:28:D7:25:27:63:9F:7E:97:3F:64:F9:99:F6:25:1A
X509v3 Authority Key Identifier:
keyid:3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:3b:c6:c9:17:1c:df:cf:a1:dd:29:b9:43:36:52:36:a5:80:
2f:f4:84:4d:46:31:3b:5c:b3:a8:07:c4:9e:24:39:4b:d4:20:
2f:8a:a0:50:b9:e9:67:d1:03:60:be:38:23:7e:d3:49:e0:69:
66:82:e6:0a:76:d2:19:c0:e3:7d:24:fe:57:ac:ae:62:b8:db:
e6:7d:2d:f1:8c:d4:84:4f:85:b6:6d:b1:f3:36:49:fe:e2:02:
fc:15:2a:b7:a9:ec:71:3e:c9:dc:7c:92:cc:3b:b8:5a:0f:ba:
4d:97:5f:cc:6f:91:83:62:1a:15:d8:3b:fc:18:48:98:de:26:
15:57:56:71:fa:c3:af:25:20:d3:bf:40:bd:c4:77:72:61:7f:
18:a6:66:10:bb:95:1e:40:45:9d:c5:0f:a1:98:c3:81:1f:f0:
ea:04:8f:48:40:68:79:4f:e0:13:50:da:c4:97:12:e9:17:d3:
fb:ba:7e:ae:0b:6a:db:53:7c:de:74:ad:c8:6f:bc:ed:be:2b:
f5:91:f5:1d:36:5f:da:19:e1:5e:dc:37:58:77:c2:d8:ef:d2:
7e:ec:12:1d:14:af:b0:26:2d:bd:1f:f1:e2:96:c7:35:d9:1f:
f0:ae:8e:84:4b:ac:1c:3a:16:f3:6d:1a:35:06:e1:44:70:1e:
ba:52:a6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:25:30 2025 by rpki-client