
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft
File: 4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft (raw, json)
Hash identifier: nS/V/jeevMRWFDsmFc6CHkKWvb4PsXHYhPM6sEoCvEw=
Subject key identifier: 47:F9:DE:E8:66:6A:7B:F1:EF:A4:10:D3:90:76:0F:64:EB:73:2D:23
Authority key identifier: E0:E9:B9:39:9B:8A:4A:5F:DC:DE:20:9F:C5:BE:C0:78:AF:95:CF:7B
Certificate issuer: /CN=A91E1887/serialNumber=E0E9B9399B8A4A5FDCDE209FC5BEC078AF95CF7B
Certificate serial: 077A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft
Manifest number: 0773
Signing time: Tue 28 Oct 2025 21:27:13 +0000
Manifest this update: Tue 28 Oct 2025 21:27:12 +0000
Manifest next update: Tue 04 Nov 2025 21:27:12 +0000
Files and hashes: 1: 4Om5OZuKSl_c3iCfxb7AeK-Vz3s.crl (hash: mLVbLtxACgZjJL3QeKhxZQ0Rukxn4NUvFLNhEkEgyPc=)
2: 9F46C468355711EBA5B81020C4F9AE02.roa (hash: 03WpwA3JZLQp184AJleW1z4TTnMqm9OpYp8fSIGXxK0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.crl
rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Nov 2025 21:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1914 (0x77a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1887, serialNumber=E0E9B9399B8A4A5FDCDE209FC5BEC078AF95CF7B
Validity
Not Before: Oct 28 21:27:12 2025 GMT
Not After : Nov 4 21:27:12 2025 GMT
Subject: CN=69013530-ce0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:f6:18:0c:0b:2c:65:39:f1:a3:48:22:47:
f8:73:0b:6f:5e:aa:9d:fa:91:c9:99:d2:05:18:e3:
03:f1:bd:5b:4f:f2:31:78:00:da:90:19:37:85:94:
37:94:7c:00:7e:a2:c8:0d:31:3a:d5:23:71:69:19:
c2:31:ae:7a:ca:65:23:d2:bc:ab:9c:5a:12:10:82:
ab:df:7b:e9:bb:e4:9c:a6:0f:d8:d9:41:1e:68:ff:
9c:74:fb:62:21:7f:a9:0e:da:33:4f:7a:70:ce:43:
51:43:41:19:4d:a6:67:b5:44:9f:59:0b:56:fe:ed:
d7:69:c1:0e:bc:f3:08:94:4f:eb:17:94:a2:52:30:
0f:95:6e:77:10:d0:3f:64:0e:64:29:c5:02:2b:09:
59:a3:98:4b:93:d7:df:8e:d8:42:40:6f:e4:e3:b5:
26:96:af:38:10:37:c7:96:b9:2e:f6:a6:47:5f:5a:
0e:80:1a:71:38:93:7e:5b:8c:49:43:1a:66:27:73:
c5:10:68:0f:af:06:c7:14:6e:2f:99:ee:06:77:41:
fe:e7:34:b4:d1:56:8a:e2:19:8b:2d:a7:47:56:76:
8f:e1:9a:13:86:79:b3:f8:2d:03:16:bf:1d:66:e3:
e9:c0:16:b9:5b:2e:88:35:2b:3f:f4:d0:b1:ac:3a:
11:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F9:DE:E8:66:6A:7B:F1:EF:A4:10:D3:90:76:0F:64:EB:73:2D:23
X509v3 Authority Key Identifier:
keyid:E0:E9:B9:39:9B:8A:4A:5F:DC:DE:20:9F:C5:BE:C0:78:AF:95:CF:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0a:bf:41:ce:77:99:d7:d6:3f:85:2c:81:c9:6e:04:12:8c:
81:88:57:0b:0c:d7:c7:35:15:fb:e4:f3:79:be:4f:c5:c5:a9:
c6:48:88:8c:c5:7c:ad:d0:40:82:5c:d2:4b:67:02:4c:ec:e0:
cf:27:63:a5:a0:e7:01:c5:61:88:fc:ce:a6:2e:4d:fa:de:da:
7c:94:4f:72:22:12:1a:ca:e8:b6:70:14:ff:e7:25:8e:d9:7e:
90:eb:ed:19:77:ad:1d:c5:05:36:02:5d:eb:87:fd:b7:c2:1b:
bd:c8:0d:c9:cb:7a:bc:aa:26:86:74:12:55:a3:88:4f:3f:c0:
9e:03:86:bd:25:0d:2d:53:99:b4:8b:8c:da:46:c7:0e:6b:d6:
32:ba:b9:27:95:2c:91:28:fe:55:58:50:41:8e:4b:95:1e:87:
40:64:b8:e2:e7:44:72:f2:60:34:0d:ce:4b:e4:ce:00:3e:49:
0e:08:a8:f7:b9:a2:7e:ea:57:f6:7a:0b:36:0b:48:b9:91:85:
7d:80:58:b7:66:74:1a:bc:7b:e5:4e:35:23:61:32:85:e2:cb:
43:06:5e:53:eb:af:91:73:82:e9:eb:70:b6:6c:99:3c:da:3c:
12:b2:0b:b1:3e:32:0d:03:6d:f0:fe:61:29:19:58:4d:3a:bd:
8b:78:6f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 01:09:27 2025 by rpki-client