
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft
File: vDqLsM3Qi243IbLB0hqBcUw7IUI.mft (raw, json)
Hash identifier: 4wHuEUKtcQ+tuYPN+yah3cZWhryi+ez41FHF0vyu3tU=
Subject key identifier: 1A:5A:60:37:FF:26:A7:34:7A:E5:E4:1D:AA:51:6D:8A:B0:0A:FB:5B
Authority key identifier: BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42
Certificate issuer: /CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142
Certificate serial: 03C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft
Manifest number: 03AB
Signing time: Mon 03 Nov 2025 00:44:32 +0000
Manifest this update: Mon 03 Nov 2025 00:44:32 +0000
Manifest next update: Mon 10 Nov 2025 00:44:32 +0000
Files and hashes: 1: vDqLsM3Qi243IbLB0hqBcUw7IUI.crl (hash: 0h/sRaALxDffNGx48b1qJAZ0cSMw88aPSrZAngKF6jI=)
2: 83CA50563C2311F0AEBA313AC4F9AE02.roa (hash: 8dEWz6BA19noWs2zWuUBCRCZchx4qTK4G3VWLV+hIMw=)
3: B7E47C68C02511EC93BB8865C4F9AE02.roa (hash: 8/pe/NkCfmi8GQHtZeDvbdeiM83VXVuijM5zx0eXnx8=)
4: 2998A0E0F99011EF89B2363DC4F9AE02.roa (hash: KstFse9DL+Lpk2UJhsRfTukB1/IV52HFgYreP0UKdGE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl
rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 00:44:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 966 (0x3c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3731, serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142
Validity
Not Before: Nov 3 00:44:32 2025 GMT
Not After : Nov 10 00:44:32 2025 GMT
Subject: CN=6907faf0-2593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a3:86:f8:79:69:2a:8a:73:2c:81:bb:83:b6:
a7:2e:16:b1:cd:ec:5f:60:c2:a0:a4:9f:d0:ec:b3:
3c:e0:e6:f5:87:c8:c3:94:da:37:84:d9:f8:de:cd:
10:5b:d0:2b:5e:c2:6c:b1:4a:3b:52:75:2a:53:d5:
38:1b:43:fb:f0:47:dd:42:c2:ec:6c:22:13:60:09:
55:ee:34:1b:f1:30:f5:c1:47:30:dc:42:1a:f7:e8:
32:ad:a1:6c:ce:75:69:f4:b5:95:18:41:4d:04:64:
d4:e4:a9:a3:2b:b6:a5:55:ad:6e:a4:21:ce:cb:25:
8d:25:39:4d:47:4e:85:e7:d0:94:c5:12:45:f6:d4:
f6:fb:25:18:bf:bc:06:2b:98:60:ba:2e:ed:09:05:
0a:88:4f:61:4b:3c:5a:4f:c9:17:c4:e8:f2:28:af:
be:ba:2e:b7:28:8e:4e:38:93:a1:c4:3f:55:8f:c0:
fd:78:2d:d4:f0:23:70:72:b0:f5:43:92:e9:42:90:
7a:c9:d4:d2:6a:4a:59:4b:82:ff:d4:6d:0b:5c:c7:
92:07:3c:2f:47:2f:1e:51:00:9b:16:71:2c:cd:f1:
3d:5f:17:74:ce:f6:e0:f3:04:94:ca:03:db:1e:a4:
0a:d0:ab:3a:8c:3d:0d:b6:37:76:bd:15:ab:73:7f:
85:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5A:60:37:FF:26:A7:34:7A:E5:E4:1D:AA:51:6D:8A:B0:0A:FB:5B
X509v3 Authority Key Identifier:
keyid:BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:c8:b6:2a:06:af:67:99:04:6c:bb:1e:9c:ea:8a:ca:fc:48:
20:4b:1a:19:84:12:e4:ce:d2:2a:25:d1:43:05:8c:5a:2a:90:
a9:62:29:93:58:31:3d:b0:1f:94:f0:fd:3a:33:1a:d3:82:53:
72:a9:29:13:11:9f:d9:63:1e:4f:ac:f5:78:f0:f8:6b:3b:06:
57:3e:73:00:f8:3c:34:9b:f0:c6:16:2e:1e:09:99:14:fb:79:
99:53:4f:9a:b1:43:7b:76:53:2d:50:86:ce:6d:a9:4b:72:4e:
ec:b5:ca:71:16:a5:5d:72:b2:ae:27:6a:dd:94:6f:b8:92:bf:
82:9b:3a:51:47:20:f2:e0:ab:be:b2:e4:db:7f:75:75:a4:f7:
99:9c:e3:3e:5b:93:7f:c3:00:c2:60:16:84:36:d4:76:95:9d:
f6:13:62:38:3b:11:fa:ad:5b:35:f2:de:12:ed:e0:8c:dd:01:
f6:76:af:25:4a:1f:3c:08:49:ee:20:27:29:c2:af:87:41:e3:
a8:20:63:c8:c8:cc:6f:c9:3e:e4:08:19:d6:a3:38:c3:a6:59:
cb:c2:b2:59:f2:c3:6e:36:35:3e:f4:d2:1a:73:5e:74:0e:8f:
bd:83:41:68:ee:86:8b:1f:e2:39:57:bd:a1:d7:3a:b4:f9:85:
a8:39:10:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:11:26 2025 by rpki-client