
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
File: Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft (raw, json)
Hash identifier: U5rmm/LuqdgkWDtIa1yjoPtUZSGRpeOTxL5MgiWSeWE=
Subject key identifier: C6:27:AE:5A:37:01:80:E0:F3:1F:2E:2F:8D:BF:B1:FB:15:B5:E2:C0
Authority key identifier: 32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19
Certificate issuer: /CN=A91F7AC9/serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219
Certificate serial: 055C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
Manifest number: 0556
Signing time: Sun 02 Nov 2025 23:23:58 +0000
Manifest this update: Sun 02 Nov 2025 23:23:58 +0000
Manifest next update: Sun 09 Nov 2025 23:23:58 +0000
Files and hashes: 1: Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl (hash: +0d4vt9Ogi9ui93QFUzmSbDuqQ53gx3A6LG6aS8Br4Q=)
2: 66CA9E0C0C5C11ECBD37E846C4F9AE02.roa (hash: OdV4BW1AypHn4SWRXVNRSTTOuuILOVr+n5WSk2uAXqs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl
rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 23:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1372 (0x55c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7AC9, serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219
Validity
Not Before: Nov 2 23:23:58 2025 GMT
Not After : Nov 9 23:23:58 2025 GMT
Subject: CN=6907e80e-fb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b4:e4:42:c4:99:76:4d:18:2f:ad:fe:e8:81:
e7:58:d3:d2:16:5d:33:3a:5b:e3:73:06:08:55:00:
54:95:27:66:06:d4:a6:0b:73:cf:43:6a:54:c1:e5:
f9:bd:88:1c:c2:39:97:5e:1f:6b:9e:78:bd:58:04:
2b:65:a2:e0:84:3d:30:87:49:17:37:17:bd:f4:54:
9b:64:2d:96:97:0c:f0:bb:07:f6:81:55:25:8d:11:
80:78:48:9f:b6:5b:d8:8f:ef:52:be:42:96:4c:7e:
d9:26:0a:12:53:7a:78:2a:e6:b6:dd:d0:46:00:30:
e9:74:8c:f0:f8:09:87:f3:52:b5:ba:3d:08:54:ee:
6c:77:f6:28:0e:2f:9b:66:6a:90:cc:e4:ef:b6:89:
97:00:5b:57:d8:21:68:73:2a:24:6e:2c:1d:2d:41:
03:e0:9b:9a:7a:4c:57:69:9f:f2:45:e9:c9:b3:39:
f7:e8:88:dd:7b:3b:97:55:af:29:15:dc:72:1b:04:
ff:15:96:68:89:18:5e:0b:a0:30:52:1e:7c:55:b3:
eb:10:b3:20:b8:84:b1:e0:36:29:80:30:aa:c6:0f:
cc:70:2f:57:d4:85:fa:58:bd:ba:46:c3:8b:b6:c7:
d5:d1:f4:d4:94:34:66:2c:b1:79:77:aa:58:14:fc:
c3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:27:AE:5A:37:01:80:E0:F3:1F:2E:2F:8D:BF:B1:FB:15:B5:E2:C0
X509v3 Authority Key Identifier:
keyid:32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:35:e3:ce:c9:b1:e6:31:f6:a7:20:af:53:59:1c:bb:ce:95:
d8:4c:5f:47:06:ee:33:dd:79:88:e3:fe:67:0b:58:c0:5f:8c:
47:02:9b:a7:c1:29:2b:41:2a:04:66:da:fe:64:d5:a1:15:d0:
32:97:a2:6b:4c:87:66:b9:f1:4e:de:36:31:f8:5a:96:76:51:
97:6a:91:19:02:d2:45:ee:ef:18:e5:6b:a2:fc:6d:30:0d:b8:
b7:54:0b:c5:93:6a:8f:75:94:b5:9c:8a:5b:91:63:ac:0a:50:
0d:a9:81:d1:b6:9f:34:e0:b1:0c:09:9c:14:38:01:1a:a4:e3:
35:bc:32:66:fa:48:c4:54:93:e9:a7:d7:4a:04:ce:5b:0e:05:
dc:83:2e:17:d2:35:91:19:1a:80:0c:23:57:40:ad:73:04:d7:
22:f3:e9:c0:c4:52:f0:c3:93:ac:93:e7:5e:55:be:81:b9:0a:
be:97:77:11:d3:fc:17:9c:7c:a3:83:07:2c:1c:d9:fd:85:d6:
c9:f3:39:b7:d7:20:c8:4f:f4:48:04:67:2c:d7:76:98:3f:9c:
d5:35:18:61:8f:01:aa:a5:1b:d5:6e:d1:0f:29:69:a6:35:7a:
73:14:5a:b9:1f:d2:4c:a2:ee:e1:39:4c:75:d3:4e:f5:33:6b:
b4:72:99:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:15:02 2025 by rpki-client