
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft
File: rsioMoH-iyda7gQb4zzN2Ek7rAA.mft (raw, json)
Hash identifier: ddBD30eqxCIRZjQW8sxzxo8j+2TUUKDTnsqglHmd4Bg=
Subject key identifier: A7:FF:0D:D8:14:E6:6F:90:85:C6:F1:5E:F9:10:05:4E:C1:C8:9C:16
Authority key identifier: AE:C8:A8:32:81:FE:8B:27:5A:EE:04:1B:E3:3C:CD:D8:49:3B:AC:00
Certificate issuer: /CN=A91E6D5D/serialNumber=AEC8A83281FE8B275AEE041BE33CCDD8493BAC00
Certificate serial: 2B57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft
Manifest number: A080
Signing time: Sun 02 Nov 2025 14:29:34 +0000
Manifest this update: Sun 02 Nov 2025 14:29:33 +0000
Manifest next update: Sun 09 Nov 2025 14:29:33 +0000
Files and hashes: 1: rsioMoH-iyda7gQb4zzN2Ek7rAA.crl (hash: ScBZgOXxufMEmgs9UfjVacUAJtKhMa02ahgeAmGHviY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.crl
rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 14:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11095 (0x2b57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6D5D, serialNumber=AEC8A83281FE8B275AEE041BE33CCDD8493BAC00
Validity
Not Before: Nov 2 14:29:33 2025 GMT
Not After : Nov 9 14:29:33 2025 GMT
Subject: CN=69076ace-eaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9b:c3:fb:a9:ca:90:bd:6d:95:05:43:c9:28:
82:34:f8:a1:cc:85:07:0e:f2:bb:72:27:e1:00:47:
41:88:73:a5:ec:8e:a3:65:a1:f4:57:73:8e:ea:81:
d7:da:45:e4:90:61:ab:0a:2c:ef:55:5c:ec:06:35:
d7:94:b8:4f:97:3f:e4:da:45:9d:a7:60:85:8a:c1:
39:47:c9:ad:95:c6:b9:45:56:58:b6:c2:81:23:1a:
59:74:04:3c:be:ca:46:8d:92:30:8d:b8:e7:6a:fe:
70:16:a3:da:d4:51:21:c1:5e:13:61:79:b7:e1:2d:
ee:2b:4c:cb:e1:bd:71:9d:a6:0f:17:a2:07:02:fd:
7e:8e:c0:a0:06:ff:3f:e1:d2:46:c6:7e:96:ca:ca:
da:9b:03:62:f6:f3:90:67:6e:4e:74:55:9d:ee:34:
d3:fe:8b:09:6f:74:b0:2d:76:95:df:97:24:bb:43:
b8:3d:9a:98:aa:b3:33:77:a2:cf:c2:a9:3e:89:d7:
2d:10:41:a5:4e:9b:7e:b8:de:e7:f2:7b:15:68:ad:
98:b7:21:fb:cb:85:ff:79:79:87:24:dd:56:45:04:
f7:b2:f6:d0:b3:e3:3c:08:56:ee:db:aa:38:ae:c4:
3e:b1:b1:95:f2:ca:e6:1a:ae:7a:8f:85:02:bf:52:
42:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FF:0D:D8:14:E6:6F:90:85:C6:F1:5E:F9:10:05:4E:C1:C8:9C:16
X509v3 Authority Key Identifier:
keyid:AE:C8:A8:32:81:FE:8B:27:5A:EE:04:1B:E3:3C:CD:D8:49:3B:AC:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:5b:da:0b:57:be:6c:e6:df:64:cc:b1:1c:92:0e:59:27:70:
20:44:29:0b:52:37:4f:29:67:19:e2:bc:b1:e2:a8:ce:94:dd:
70:b3:ac:16:f3:43:68:c5:50:dd:15:dc:42:12:9f:9e:33:29:
75:0b:fd:4a:d1:d8:b2:53:13:97:96:26:b1:c3:f9:18:3a:77:
ad:5d:1f:ca:f9:40:4d:e9:02:4a:72:e1:f6:a4:bc:05:4d:b6:
77:6f:3b:ea:72:d1:04:5c:05:31:59:d0:fc:69:41:3d:1a:14:
c2:dc:39:c9:00:f7:06:d7:2b:5d:67:b7:54:41:ae:09:26:62:
d8:e1:75:b0:98:51:13:9c:07:5f:3a:1a:f5:b5:39:93:d5:77:
13:a7:c7:a8:15:6c:30:3d:0e:9d:f1:31:0d:65:68:4a:1f:3c:
72:35:80:b5:a0:d8:ba:ce:a9:c7:8d:67:52:d7:56:9d:5c:fc:
d9:fe:6a:67:e3:e0:76:31:6c:63:ac:d3:65:de:3b:7a:87:f6:
64:23:22:ce:1d:9e:fd:10:5b:c7:04:07:f5:9b:a9:4a:2a:50:
5a:6c:ae:e0:8b:c4:f0:7c:f2:6d:d8:71:5d:4e:d3:1e:fb:60:
a6:dd:4d:cd:88:1b:37:05:39:27:df:14:52:dc:18:96:2c:15:
bb:7a:42:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:09 2025 by rpki-client