
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
File: h81xgndjHgvdtrTzot8esxEio4E.mft (raw, json)
Hash identifier: iNW8c+JO45Bljh0CqXMQq4RanWIYoOf4mtO6HHLSrrU=
Subject key identifier: 8D:79:38:9B:E4:A3:94:9C:93:3F:52:24:B3:59:D3:DB:08:3D:40:77
Authority key identifier: 87:CD:71:82:77:63:1E:0B:DD:B6:B4:F3:A2:DF:1E:B3:11:22:A3:81
Certificate issuer: /CN=A91F2DDD/serialNumber=87CD718277631E0BDDB6B4F3A2DF1EB31122A381
Certificate serial: 0EA2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
Manifest number: 11F8
Signing time: Sun 02 Nov 2025 17:41:49 +0000
Manifest this update: Sun 02 Nov 2025 17:41:48 +0000
Manifest next update: Sun 09 Nov 2025 17:41:48 +0000
Files and hashes: 1: h81xgndjHgvdtrTzot8esxEio4E.crl (hash: pzwPxbfUT/8TOY4ZAZDVd4O1ycznJOi8gRDXayk5VOY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.crl
rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 17:41:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3746 (0xea2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2DDD, serialNumber=87CD718277631E0BDDB6B4F3A2DF1EB31122A381
Validity
Not Before: Nov 2 17:41:48 2025 GMT
Not After : Nov 9 17:41:48 2025 GMT
Subject: CN=690797dc-2a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:12:42:9b:ca:c2:2b:36:2c:ed:ce:ca:af:
b2:27:ad:8d:4b:7a:5c:8b:95:4a:3f:21:f1:05:7f:
a9:ec:55:82:21:bd:d1:05:dc:59:b5:c4:62:ae:07:
36:e1:80:ec:43:d6:2d:2f:d8:a6:8b:f1:f9:c1:20:
e5:f2:90:e4:5a:64:eb:b7:16:e3:8c:60:56:4b:50:
03:29:dc:4e:4f:65:60:17:29:4f:b0:a2:f5:20:76:
9c:1e:80:fa:20:c9:e7:e8:95:fc:57:24:83:7a:40:
ed:2c:98:e0:53:86:36:90:54:c5:f3:20:ed:2e:9a:
38:fc:73:c8:98:3c:94:10:68:c2:69:5b:3d:6e:fd:
09:a9:2c:c0:a8:ec:8e:b1:90:93:a6:5c:38:6f:40:
16:d1:81:f1:fc:a2:71:5a:4b:88:5e:35:f3:c0:4b:
d5:be:41:42:87:07:04:9c:f9:bd:4a:ec:2e:5d:2f:
b6:7c:36:e1:a9:b2:00:33:79:17:6b:8f:9d:f7:84:
b1:cb:7d:44:87:36:50:77:12:15:f1:f2:4d:4d:30:
23:b1:21:0d:31:b2:67:d3:f8:c7:7b:a1:c1:b4:c2:
4d:16:44:01:00:ba:b6:39:b3:02:17:2f:7f:c5:07:
82:bf:a7:2c:18:49:6f:b4:a3:70:3f:7b:97:6b:d7:
c9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:79:38:9B:E4:A3:94:9C:93:3F:52:24:B3:59:D3:DB:08:3D:40:77
X509v3 Authority Key Identifier:
keyid:87:CD:71:82:77:63:1E:0B:DD:B6:B4:F3:A2:DF:1E:B3:11:22:A3:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:13:62:52:43:23:49:b1:2e:4c:5c:60:4d:7a:de:71:75:38:
de:52:75:54:54:db:42:09:2a:ea:c9:cc:b1:99:d2:c6:2c:99:
8e:e5:e2:1d:cd:99:bb:30:0c:fb:1e:92:62:8e:29:2e:0b:6c:
6f:62:ab:b4:fd:82:62:70:c2:c4:5e:13:d6:b9:aa:39:e8:fd:
2a:e5:19:e0:ee:83:a1:a0:4c:4f:77:32:a8:ff:39:fb:46:d5:
2f:9f:e2:4e:7d:60:4b:dd:78:6a:7d:d9:49:3c:d5:c4:17:79:
be:5f:1a:25:e6:48:82:84:78:df:dc:c0:7a:86:c7:00:12:46:
68:fb:4c:d4:64:50:d4:d1:9e:b6:8f:d8:d3:f7:a4:62:99:d6:
1e:b5:6f:63:5d:54:60:ae:c4:62:1e:38:0f:2d:45:f4:45:76:
ea:9a:08:9e:92:da:6f:06:37:8c:92:6e:1b:f6:b2:b9:1f:db:
8c:7b:40:57:7e:98:4f:08:9e:05:8b:f9:bd:e1:23:b4:d0:e1:
6d:82:b5:98:d3:06:dd:4c:5f:e5:15:39:c0:e9:1e:6d:79:9b:
39:90:2e:87:df:8f:38:0a:c2:1c:86:ca:9a:55:1d:24:92:34:
03:42:a0:8d:01:96:48:4c:e5:2a:b5:ca:fa:74:d0:ef:5f:3d:
09:8b:59:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:14:38 2025 by rpki-client