
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
File: aBiEwMdVflJu8rxNHlq8M2rif54.mft (raw, json)
Hash identifier: oY+WH0JSowTuW4rD2NLEPyC7nQ6DM9Syh2Dt1K652xI=
Subject key identifier: 2A:DE:11:D9:0E:3C:BB:AF:49:74:6E:1F:F9:0A:91:BF:AF:D8:F8:E7
Authority key identifier: 68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E
Certificate issuer: /CN=A91F9605/serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E
Certificate serial: 06B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
Manifest number: 06A8
Signing time: Sun 02 Nov 2025 22:16:39 +0000
Manifest this update: Sun 02 Nov 2025 22:16:38 +0000
Manifest next update: Sun 09 Nov 2025 22:16:38 +0000
Files and hashes: 1: aBiEwMdVflJu8rxNHlq8M2rif54.crl (hash: TKU4pAIZ6saS1Rv8jM9TOYuVDrhw60LiqtIIyebh1PE=)
2: 9BC411EEA03F11F094CBF530C4F9AE02.roa (hash: WA/tDmga3l8gZvc4ZjpwlBlP3nDfqhnwsfFvTM1otOg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl
rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 22:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1712 (0x6b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9605, serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E
Validity
Not Before: Nov 2 22:16:38 2025 GMT
Not After : Nov 9 22:16:38 2025 GMT
Subject: CN=6907d847-8589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6b:e0:fd:2c:ea:31:db:f4:18:16:fc:10:dd:
7f:ca:0b:dc:71:d2:17:00:99:a1:3e:45:6e:15:8a:
8f:39:45:22:6e:a9:13:14:fc:85:f9:5e:f3:18:a1:
3f:6c:b9:40:68:23:de:20:61:12:38:ed:50:4a:3f:
3c:3a:8f:d5:24:5b:dc:75:0e:85:43:00:b8:83:07:
3a:29:3d:7a:78:10:b6:51:31:01:44:c9:40:09:e2:
70:97:23:d8:76:11:9f:b8:0d:35:e2:d2:87:61:b0:
ce:23:24:6a:38:a1:97:ac:d3:81:bc:4d:b4:90:79:
ad:0a:cf:38:2b:c9:42:7e:8e:1c:ab:7d:b7:82:ea:
53:f4:02:73:02:f6:29:47:d9:28:83:a2:71:19:19:
05:27:95:82:25:52:8b:68:b1:80:7a:7a:13:db:91:
db:71:b0:92:65:18:3b:65:db:2d:2a:52:90:76:83:
53:24:22:09:d4:7a:a1:7e:66:6f:8c:52:41:6c:14:
53:3b:86:a7:23:bb:05:ae:1f:06:42:91:f5:4f:a6:
e2:35:8c:20:f7:b7:82:17:e9:92:ea:4f:74:1f:a2:
88:c6:4e:41:af:ca:5e:c9:f9:b7:bc:26:24:c9:e8:
6d:b3:12:1c:cb:72:8f:d0:80:6c:2d:9a:5f:dc:05:
8d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DE:11:D9:0E:3C:BB:AF:49:74:6E:1F:F9:0A:91:BF:AF:D8:F8:E7
X509v3 Authority Key Identifier:
keyid:68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:76:c7:48:c7:9f:a7:1b:8e:68:6c:d9:36:da:c3:e7:fc:79:
77:94:69:89:95:57:1e:a8:98:da:7b:7a:33:68:ec:36:a8:79:
6b:4c:e1:ee:ff:bb:14:71:e1:24:52:f1:71:88:68:ff:a5:cb:
31:7d:ed:be:6a:12:ce:81:99:42:9a:be:19:18:f0:2c:95:e3:
e9:38:7a:32:15:c8:19:3a:20:ce:e5:75:66:1c:62:f9:60:93:
cf:e9:92:d2:e4:cc:d4:4e:d0:14:6a:89:0a:89:a5:15:3c:48:
75:73:6c:71:bf:8e:87:37:51:76:16:cc:86:d3:25:04:0a:08:
38:80:cf:b2:ca:bb:e6:8f:6e:c3:b5:35:31:e9:44:5c:c0:e8:
1f:06:4d:6c:58:cc:48:c6:5e:6d:a6:7a:25:00:82:5b:4b:92:
75:57:9c:73:c2:9a:34:e4:7d:e7:75:1d:06:95:1c:a3:a9:08:
f0:66:6e:7c:c7:4e:3c:cd:09:cf:af:4e:ea:b2:99:77:0f:c2:
b6:b5:4b:e7:cc:1f:e6:55:9e:07:ef:75:33:45:8c:12:c3:d4:
2f:e5:a3:f5:7a:8f:c7:9b:a8:27:d5:6e:6f:71:1f:66:b1:db:
40:23:22:2b:98:5a:9b:f5:21:88:0b:0c:90:5e:c7:14:47:d9:
1f:5a:0d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:38 2025 by rpki-client