
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
File: tdM6ejKlCC0za2sFt5ZfMHRwonY.mft (raw, json)
Hash identifier: T58onIvJP6khPkVq/XCP5CVGiWZKwLolyJblu+lMsHw=
Subject key identifier: 16:98:96:CA:2B:4D:F0:17:6F:B1:A4:08:A0:D5:FC:D5:30:F0:3B:79
Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76
Certificate issuer: /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276
Certificate serial: 0391
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
Manifest number: 0381
Signing time: Mon 27 Oct 2025 02:14:06 +0000
Manifest this update: Mon 27 Oct 2025 02:14:05 +0000
Manifest next update: Mon 03 Nov 2025 02:14:05 +0000
Files and hashes: 1: tdM6ejKlCC0za2sFt5ZfMHRwonY.crl (hash: 71tIsiTbeAmpKNGT1sQeihxGfa/wkHnrXrzMSAjC2og=)
2: 31521640C6CB11ECB185E43EC4F9AE02.roa (hash: DOUqu1Qj+MU4+uk8We4DlL9rOQ0u7xDb2aWTGQZFr1c=)
3: D56B4ABED54E11EFAD8C4E52C4F9AE02.roa (hash: GjwPBXkxZ4qE4L8GvWJPamMwvGLPmxgtpWoHImjgHS0=)
4: 69B0C410EC2411EFBE58C381C4F9AE02.roa (hash: 9wsSWlTIkEvdY3EgDoQza7/AJrOesuO9qQzI1IZGf8w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl
rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 02:14:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 913 (0x391)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1446, serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276
Validity
Not Before: Oct 27 02:14:05 2025 GMT
Not After : Nov 3 02:14:05 2025 GMT
Subject: CN=68fed56e-062d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:63:6b:3c:14:33:6f:5c:f4:a2:1f:2e:a1:
ad:0a:a7:31:3f:03:8f:c5:b2:b2:b3:b5:61:49:0f:
4b:dc:8c:35:58:80:5b:0b:7a:39:4f:94:47:56:81:
05:ea:ac:06:b8:9b:74:1d:fa:57:9a:51:97:13:27:
96:61:8e:b7:3a:7a:03:1f:7e:b3:d5:2f:00:bd:b6:
15:97:cb:ce:25:b3:db:ac:36:dd:be:70:38:f2:63:
24:33:d9:05:d7:ee:79:05:f1:f1:31:ae:62:d9:93:
12:9e:3c:c1:20:f9:ba:15:d7:28:6b:db:e3:f2:48:
86:13:c2:e0:77:f9:37:da:71:74:0b:a2:60:53:0b:
17:14:ea:77:e2:e5:79:a2:57:dc:ba:ad:5c:e9:6a:
42:e1:92:fa:f4:32:5c:66:7b:a3:c4:b1:64:d3:10:
9e:5a:64:5a:5f:57:0e:8b:b1:f3:e1:91:b0:31:41:
a3:60:f2:67:13:ab:dd:1c:68:0a:34:62:0b:09:56:
51:1e:85:4e:a4:f6:9e:14:95:69:44:f2:20:14:5a:
0f:79:a1:9b:d7:17:e2:62:3c:3a:ad:61:75:98:77:
a6:c8:03:27:44:92:08:5d:8c:35:e6:f4:6c:13:f9:
a4:25:1d:fe:aa:80:df:d1:f1:0f:44:9b:a2:a4:eb:
8c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:98:96:CA:2B:4D:F0:17:6F:B1:A4:08:A0:D5:FC:D5:30:F0:3B:79
X509v3 Authority Key Identifier:
keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:21:66:a1:75:7a:3c:54:87:34:21:d5:d1:d4:b4:89:49:d5:
51:15:84:f7:d1:46:09:46:71:37:c3:bc:3a:38:f8:27:06:15:
2c:cd:ff:34:c6:1b:8b:31:15:3c:71:7e:ab:67:42:f9:33:56:
68:f6:b1:12:18:02:ee:c5:74:08:08:44:7c:12:cd:2f:2e:f2:
b2:91:b9:91:bb:1a:9e:87:04:34:e4:44:f9:6d:9f:e9:5a:04:
27:82:af:83:63:7c:72:ee:63:29:fc:97:2a:d1:7a:ad:a8:63:
0e:10:5d:a7:b2:7f:11:f6:8f:d7:33:b5:dc:71:00:08:dd:58:
d2:ab:c4:a2:7c:f0:77:95:67:96:c0:ba:51:aa:73:75:f7:b6:
73:df:ae:fd:06:9d:8d:c2:c0:85:73:7d:d4:87:c6:71:a9:52:
7f:8d:ba:ad:ef:dc:55:22:60:e0:41:f1:77:27:a6:97:e9:08:
41:41:08:97:bc:74:2d:1d:d8:92:c1:1f:29:86:3e:ac:96:d1:
ed:93:59:60:ba:c0:4f:98:72:ab:f0:1c:5b:3f:a2:3a:5b:cb:
1f:a5:1f:f6:c3:32:e5:f1:6a:c4:04:65:5b:41:3a:60:21:5d:
70:2d:1f:70:55:a1:20:35:6a:1e:9e:1f:c1:20:fd:82:4d:2b:
66:bd:a9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:22:44 2025 by rpki-client