
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
File: b3tF49x2JsN_igHgq46krwVfSYo.mft (raw, json)
Hash identifier: mEGGMzEt6JJw9fkUCF/MAWJhVBHhbvd8frfd3xOfFag=
Subject key identifier: 85:9A:F7:AA:CF:DF:BB:B6:E8:F7:56:F1:3B:0A:EC:A6:C0:80:87:52
Authority key identifier: 6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A
Certificate issuer: /CN=A91F0AF0/serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A
Certificate serial: 1171
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
Manifest number: 1E20
Signing time: Sun 02 Nov 2025 17:15:06 +0000
Manifest this update: Sun 02 Nov 2025 17:15:05 +0000
Manifest next update: Sun 09 Nov 2025 17:15:05 +0000
Files and hashes: 1: b3tF49x2JsN_igHgq46krwVfSYo.crl (hash: 2kLvw2lanMw8yCOBaQEPz296kLFz2V5ARWC3wVjRZW4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl
rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 17:15:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4465 (0x1171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0AF0, serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A
Validity
Not Before: Nov 2 17:15:05 2025 GMT
Not After : Nov 9 17:15:05 2025 GMT
Subject: CN=69079199-5e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b4:a1:bb:67:d3:cc:df:da:1e:08:8c:3f:6f:
6c:36:6c:77:6c:dc:dc:db:f9:5d:5b:13:53:77:63:
3e:19:3e:8d:0a:84:44:ff:9c:76:28:82:06:91:af:
25:ed:41:53:cd:67:c6:33:cf:c5:10:e1:a4:96:38:
97:0e:5d:58:32:67:70:4c:1f:6f:34:db:66:22:71:
78:b3:65:ae:5f:e5:5c:d0:85:bd:5f:ee:46:5f:87:
49:ed:65:46:79:1c:84:bc:65:7b:89:ce:fd:16:f9:
2b:9f:6f:04:c6:3f:bc:18:b6:8f:77:0a:26:25:dc:
b8:19:21:6e:2d:a2:f8:8d:02:74:b5:85:9e:cf:19:
32:6d:53:d7:3a:25:fa:41:37:a9:d7:28:76:40:48:
9d:f7:06:d2:3c:ef:00:01:a6:8d:3c:e1:16:61:00:
d1:24:4b:10:f4:35:92:a5:b4:71:bf:d2:4b:e3:e6:
3a:43:6e:d3:0c:42:15:e2:61:f9:b5:34:cf:f1:56:
9f:4b:f4:24:ef:11:e3:d2:d8:95:dc:6e:52:f6:c2:
ec:8d:89:48:66:23:d3:9d:1e:95:f0:ee:36:c2:11:
10:57:5d:f7:35:ff:a8:0f:1d:54:85:16:58:93:fc:
df:e0:e6:8b:58:74:5f:b0:f9:20:ec:3f:ac:b2:68:
7f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9A:F7:AA:CF:DF:BB:B6:E8:F7:56:F1:3B:0A:EC:A6:C0:80:87:52
X509v3 Authority Key Identifier:
keyid:6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4f:ef:9b:8d:e4:6a:63:b9:af:82:1e:a9:df:10:4c:f8:7a:
5f:92:46:b6:33:e5:68:10:a5:61:0f:1c:fd:96:00:70:c1:8b:
9f:16:ff:30:e3:3f:26:33:12:3b:47:b7:83:17:23:38:b8:d6:
99:89:fc:72:6c:62:04:9a:59:b0:28:5e:2d:58:4a:9d:92:6d:
8d:ea:55:f6:33:b9:ad:5f:28:3a:04:9c:66:a2:69:92:c6:be:
7b:da:b8:62:1f:b6:b6:2d:23:0c:52:7d:08:d3:ff:36:4c:1e:
c1:ea:73:f9:c9:56:c1:de:7c:7c:05:3f:24:9a:d9:cb:77:ce:
9e:cd:24:53:bb:a6:2d:73:4a:3b:b8:81:6b:11:53:14:66:cb:
e1:cb:d2:55:b6:e3:05:64:aa:1d:f4:dd:e6:6f:ef:0a:35:08:
55:db:e9:90:b8:cc:48:f0:10:a2:a1:12:d0:fb:ff:5c:08:af:
39:f3:ce:a5:f8:e2:d3:09:d5:60:fc:4a:be:c4:1c:9c:38:c0:
d6:12:ee:38:a8:a4:0d:0c:ca:59:6c:f2:48:72:92:75:db:89:
81:81:39:0b:26:ec:c6:05:30:2e:ca:dc:fa:98:69:43:d7:d7:
28:f8:d7:5a:cb:39:1e:8a:55:70:b5:a3:dc:c3:b5:57:c2:c5:
02:e1:31:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:47 2025 by rpki-client