
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
File: AkIpyBrDU1oh1g4twyqbiL1q2B8.mft (raw, json)
Hash identifier: Cpqs3YAxl1mfMMzOUXYQLrac7hgIV8dNJqjkhYAZ3XY=
Subject key identifier: 51:65:21:F7:CA:6C:B0:54:63:23:B9:D3:F3:1E:FA:EC:78:42:58:B3
Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F
Certificate issuer: /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F
Certificate serial: 023C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
Manifest number: 0226
Signing time: Sun 19 Oct 2025 04:27:41 +0000
Manifest this update: Sun 19 Oct 2025 04:27:40 +0000
Manifest next update: Sun 26 Oct 2025 04:27:40 +0000
Files and hashes: 1: AkIpyBrDU1oh1g4twyqbiL1q2B8.crl (hash: SXN4wHtU5HlQGLENq9Qz4wzMOToG+aDKGdlTqn0n4wA=)
2: B9D00D3C195A11EE83248835C4F9AE02.roa (hash: TDlTkXNyk/OE7AIzmPKhh2DU+PZI5hEvSUbR0akOStU=)
3: 3B6578C47F4211F084F6C541C4F9AE02.roa (hash: B4BkdpTo1qZHacqSMnVvogHOqStnqdG0ex859T6dd8w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl
rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 04:27:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 572 (0x23c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0848, serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F
Validity
Not Before: Oct 19 04:27:40 2025 GMT
Not After : Oct 26 04:27:40 2025 GMT
Subject: CN=68f468bc-a781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1d:41:37:a6:71:07:6f:1d:a2:c2:22:be:cb:
4b:0a:8d:51:23:95:9e:30:82:46:f0:e3:ff:6e:e8:
d4:9c:1b:1a:12:4b:53:f0:3c:f0:94:91:15:64:06:
36:e8:d5:11:48:97:ba:f3:de:0b:6e:fb:d0:72:4d:
04:8a:3f:e7:13:48:3b:79:bb:73:d2:83:c3:a2:82:
5a:b4:f5:83:f6:df:64:36:19:84:9c:3a:36:e7:28:
c0:37:03:0b:80:2c:27:fa:4e:a3:ca:d7:ff:b2:71:
bc:3c:50:a5:7e:c5:65:fa:15:9d:41:e7:6f:26:af:
e3:2b:e1:d2:56:f9:1a:86:93:5f:e0:a0:ba:ac:85:
a1:4b:72:bc:d5:f1:e4:b2:68:71:67:f1:12:d4:08:
f4:12:94:85:80:2c:0c:63:55:cd:82:27:ff:45:1b:
2b:e4:fa:f9:95:1b:f6:f7:8a:92:be:71:82:03:23:
07:cb:0f:d4:ef:1f:5f:11:1e:62:25:e0:c7:7b:f3:
3c:52:24:e9:e8:73:22:c2:a5:bc:61:ef:30:16:d6:
97:20:41:47:c1:48:3f:dc:4a:82:ad:6e:6f:e4:26:
50:f3:05:3b:ef:99:c7:19:0d:2d:4c:6c:26:0e:af:
8f:54:4a:21:6f:67:af:2e:5f:d4:80:04:ff:4c:76:
28:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:65:21:F7:CA:6C:B0:54:63:23:B9:D3:F3:1E:FA:EC:78:42:58:B3
X509v3 Authority Key Identifier:
keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a7:bc:be:18:a5:9c:87:26:b1:ff:9f:2e:d5:e8:b2:75:29:
74:c6:6f:e5:64:98:c1:21:79:f4:be:e1:51:ab:d3:b8:e9:82:
77:d1:cd:cb:3f:0f:8c:69:c4:e5:9d:1a:30:80:73:28:b0:5d:
8d:aa:fe:96:a0:f5:9f:8a:14:9e:b7:34:82:00:48:be:0d:9b:
a4:47:5d:c0:37:09:8e:84:b4:2c:55:70:3e:50:01:96:f5:7a:
90:d1:3e:92:ac:75:16:9a:7e:22:4d:0a:85:9a:10:55:5c:8e:
35:e3:24:36:21:5c:5d:03:cd:e0:b6:48:53:1e:9c:2b:6b:9e:
37:bc:30:e7:e8:c3:b4:5b:f2:b6:fc:40:6a:a7:fa:c2:d7:39:
1c:db:60:19:eb:a6:ab:b2:a8:34:b2:af:95:36:4a:5f:72:35:
2c:d0:b0:50:a6:e2:49:b1:18:e5:ae:a2:a8:20:ec:be:3f:5f:
d0:f2:a1:d2:ec:3f:2f:d2:f5:07:c1:c1:f3:5e:5e:46:b9:98:
47:dd:85:20:e1:38:a2:4d:2d:d0:97:79:a1:64:21:1b:08:f9:
16:85:c2:c0:9f:97:95:e5:e5:1f:f4:02:5b:13:ed:cb:08:07:
29:28:19:84:96:c8:33:8a:d4:b5:fe:86:47:07:4c:c1:ff:ea:
41:59:41:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:26:22 2025 by rpki-client