
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
File: TRThryL1OyL1be8C63LqXda-d-I.mft (raw, json)
Hash identifier: HqF11XL+C+hF7uQsMRp2GxkmtmvPT3A5AP0T7nhGOyY=
Subject key identifier: 2F:40:2F:D1:BE:B7:1B:A0:9A:C5:4C:2E:E6:C7:25:DC:83:19:BD:9B
Authority key identifier: 4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2
Certificate issuer: /CN=A91FE75F/serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2
Certificate serial: 02F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
Manifest number: 093E
Signing time: Sun 02 Nov 2025 22:39:00 +0000
Manifest this update: Sun 02 Nov 2025 22:38:59 +0000
Manifest next update: Sun 09 Nov 2025 22:38:59 +0000
Files and hashes: 1: TRThryL1OyL1be8C63LqXda-d-I.crl (hash: ojR1MoeCES3anPLBTZ9enhd6kQn0HCeATLuQRkcILmU=)
2: C93E74B8D19511EEA71C3920C4F9AE02.roa (hash: 5yEwO4ZnTC2CHQn3tYL6GNEeTVAOOIXAZLN/7OfHXIo=)
3: D734CCEA1E0A11EF87335F33C4F9AE02.roa (hash: Zn/90qwbG+0Df96/zQSMkzHyx6xwf0/RZMauir90ZH8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl
rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 22:38:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 758 (0x2f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE75F, serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2
Validity
Not Before: Nov 2 22:38:59 2025 GMT
Not After : Nov 9 22:38:59 2025 GMT
Subject: CN=6907dd84-47e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4d:89:44:97:65:13:06:15:92:e2:70:e1:74:
19:55:3b:d2:ae:b9:6d:dc:bf:d3:26:4e:15:a4:90:
39:19:92:66:47:c1:1c:f8:7d:9a:47:73:5e:b0:b6:
64:24:4e:31:a9:ef:ce:29:cc:3c:b4:5b:c0:57:81:
4a:d5:97:71:15:73:a4:90:09:0b:30:c7:54:3a:c7:
2a:06:f3:ce:56:3d:c3:69:19:b7:ab:ed:89:4b:8b:
12:e3:22:4c:98:a2:f9:46:a3:a6:b4:5e:ab:90:9b:
b9:8a:ff:50:98:dd:44:bd:2e:d3:1f:fc:80:a8:8f:
15:7b:5f:8e:c5:08:44:53:22:20:b5:75:22:89:66:
37:eb:ef:f5:e9:93:4e:24:b1:f0:78:78:21:79:0b:
af:1b:f6:ba:c7:8f:28:de:0c:c9:2a:fb:94:1e:59:
fa:3a:0f:4a:f9:e8:78:9b:16:ec:a0:92:10:67:11:
d3:37:c1:6a:cf:ad:48:91:66:eb:aa:c5:75:78:c0:
d3:7a:e8:12:66:fc:c9:a4:b2:82:39:a5:c1:8f:19:
44:88:d2:f2:75:2f:35:5b:93:b3:85:88:64:26:1b:
a4:bb:70:89:95:86:9b:f1:4c:c5:00:30:6f:61:d7:
e4:09:0e:32:69:bd:23:82:2a:41:53:f1:18:68:31:
f6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:40:2F:D1:BE:B7:1B:A0:9A:C5:4C:2E:E6:C7:25:DC:83:19:BD:9B
X509v3 Authority Key Identifier:
keyid:4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:de:23:cf:ce:2d:f9:47:44:35:b5:61:2a:00:bc:b9:b5:76:
fe:23:fe:66:d3:d7:28:3e:1e:61:ba:d6:d0:a4:05:2c:61:e3:
f6:ce:fb:80:14:2e:9e:cf:4d:f9:c4:e6:1f:0f:16:b4:4d:1f:
97:72:23:b7:87:86:51:8b:93:6f:c8:93:39:27:54:37:a2:8e:
cd:f2:8e:47:a6:50:0e:64:d3:d2:23:97:cc:a6:be:36:21:19:
95:e7:b9:f4:08:ac:0b:65:85:db:cf:96:90:f6:8f:3b:5b:83:
c6:b8:dc:cc:62:e7:c1:3e:97:c2:a0:58:65:9a:14:9e:19:d9:
d1:5b:1d:2a:46:bb:1d:bc:81:91:23:8c:2a:60:ef:34:a4:08:
51:48:47:d8:b8:3b:a5:b8:08:02:54:4e:44:4e:c3:c4:af:aa:
db:2c:24:31:22:4a:ef:60:0f:b1:a2:60:56:9d:9d:47:3d:09:
4a:91:84:47:56:2b:54:66:61:8c:d0:6e:55:a9:b5:0e:6f:89:
31:d4:e3:cd:18:d7:a2:14:2a:51:e0:4e:68:2a:48:8c:e4:51:
8a:ef:2e:e9:98:c4:35:57:e7:75:8f:d7:a7:74:d9:9e:aa:d8:
2e:00:48:d2:de:4d:6e:20:ac:9f:b1:f8:5b:cc:62:ec:87:72:
e7:6c:21:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:10:27 2025 by rpki-client