
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
File: gyzAVuI-OIrjeBpSC92RFpY25Zs.mft (raw, json)
Hash identifier: x12z7fsnXE5kDdNG9Xsu9WHFKjUwTtGvWQakRU8jrT8=
Subject key identifier: 7B:CE:C4:E8:3B:6F:84:98:46:92:80:C5:0B:F9:3E:43:5D:B8:48:EF
Authority key identifier: 83:2C:C0:56:E2:3E:38:8A:E3:78:1A:52:0B:DD:91:16:96:36:E5:9B
Certificate issuer: /CN=A91F1029/serialNumber=832CC056E23E388AE3781A520BDD91169636E59B
Certificate serial: 078B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
Manifest number: 0784
Signing time: Tue 04 Nov 2025 21:37:41 +0000
Manifest this update: Tue 04 Nov 2025 21:37:40 +0000
Manifest next update: Tue 11 Nov 2025 21:37:40 +0000
Files and hashes: 1: gyzAVuI-OIrjeBpSC92RFpY25Zs.crl (hash: 8xJxgN6bsGKhbHsXBN9IF/pgVT5w3kMmis+sVqvN0w4=)
2: B2790B3C2FB111EB89A04D37C4F9AE02.roa (hash: jGskcZGy9vnjki4o/Q8sg1yCepo5qIlcHl7YuqfUnlw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.crl
rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1931 (0x78b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1029, serialNumber=832CC056E23E388AE3781A520BDD91169636E59B
Validity
Not Before: Nov 4 21:37:40 2025 GMT
Not After : Nov 11 21:37:40 2025 GMT
Subject: CN=690a7225-85dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:d4:14:71:c9:4f:69:7f:56:90:da:58:bc:
e2:3b:02:fb:bc:b3:26:52:0a:2f:7e:e8:37:22:ea:
1a:17:59:5f:5f:89:5b:bb:40:cd:76:52:14:65:23:
54:cb:5a:f9:f4:ba:e0:27:e6:75:0e:af:b7:0e:ce:
61:3f:ba:c8:cd:0a:26:20:a4:dd:a6:c9:44:76:12:
41:75:19:d1:66:bb:e4:bc:02:d3:c1:52:81:6b:e9:
29:a8:cc:51:08:3a:47:cb:3c:4e:0f:57:0f:64:ac:
26:fb:4b:2f:cd:a3:e0:74:7c:b2:8a:16:f8:a0:6f:
65:4a:c1:45:00:c4:0e:f7:64:9e:94:44:b6:7b:ca:
c5:13:db:d4:d0:f2:37:49:6e:60:f8:34:c6:91:65:
52:0f:34:5f:fd:53:01:19:e3:fe:a5:7d:d3:8e:b6:
4e:fc:37:af:9c:95:5b:79:19:2a:c5:76:45:a6:e7:
97:e4:fa:f3:fa:bb:e1:01:d9:c4:f9:27:5b:b8:b3:
a6:d7:4d:86:a3:d2:22:10:3d:10:cd:21:ac:6d:fc:
12:ec:fb:5a:c4:33:a3:0f:b5:12:97:2b:69:ee:0d:
77:2f:46:6f:bb:0c:11:87:af:7a:bd:b5:b1:c5:de:
66:aa:3f:1f:c2:49:bf:f7:c3:46:8f:65:a3:ab:c7:
bb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CE:C4:E8:3B:6F:84:98:46:92:80:C5:0B:F9:3E:43:5D:B8:48:EF
X509v3 Authority Key Identifier:
keyid:83:2C:C0:56:E2:3E:38:8A:E3:78:1A:52:0B:DD:91:16:96:36:E5:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:74:07:f3:e9:64:66:5b:88:1b:ab:5c:34:44:6e:cd:d9:1a:
d0:ab:d1:57:76:0f:e2:98:4c:75:77:c6:47:53:03:56:1b:a2:
32:eb:bb:2d:aa:1f:05:57:24:0c:94:fc:20:e6:10:46:37:3d:
91:2f:c7:7c:d7:bf:c3:2c:17:aa:83:62:7c:a3:03:8f:79:8c:
18:aa:26:e7:c5:cd:e8:bb:68:53:37:49:a0:0d:d3:b1:c5:dd:
22:cc:3e:70:31:94:e8:a1:f3:f8:d2:e1:31:16:c7:06:6e:45:
d4:0e:c2:75:09:43:13:9d:ca:27:d1:a0:a8:68:46:23:5b:de:
83:6c:80:8f:e6:4a:3c:09:47:cc:92:19:5c:50:99:4b:42:68:
3d:40:56:1f:75:01:68:d3:e8:e4:ba:23:18:7a:61:47:71:b2:
e4:31:11:1e:93:92:54:6b:65:59:2c:2d:87:73:ad:27:19:b7:
81:d9:3a:a9:51:eb:e8:7f:4b:1c:56:8d:9f:ad:c2:a3:63:55:
03:c1:4d:c0:08:f8:d2:51:5a:8f:b8:48:26:a1:78:bb:94:64:
23:50:a8:5d:f9:70:5a:b6:ca:e3:24:ea:11:8c:be:da:ae:c0:
86:44:a4:a7:e5:80:fc:64:80:0f:30:28:ae:81:a0:22:28:38:
47:7d:9d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:09:37 2025 by rpki-client