
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft
File: cFWB1AyVgaJlHlMlI42zvcs6fQU.mft (raw, json)
Hash identifier: f3cOIzfZv5K0cBjmKMObRMRqs6Umgjr6Y8TdApWQ9RU=
Subject key identifier: 7A:E4:92:43:7C:98:5E:DF:82:C8:46:87:4A:3E:A8:55:DC:84:97:8D
Authority key identifier: 70:55:81:D4:0C:95:81:A2:65:1E:53:25:23:8D:B3:BD:CB:3A:7D:05
Certificate issuer: /CN=A91E1D91/serialNumber=705581D40C9581A2651E5325238DB3BDCB3A7D05
Certificate serial: 03E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft
Manifest number: 03DB
Signing time: Sun 19 Oct 2025 02:35:21 +0000
Manifest this update: Sun 19 Oct 2025 02:35:20 +0000
Manifest next update: Sun 26 Oct 2025 02:35:20 +0000
Files and hashes: 1: cFWB1AyVgaJlHlMlI42zvcs6fQU.crl (hash: Q3QSmm8rBBQF8KYGt7KjJYd9Hv3Qpj/jksuGqSVulyY=)
2: 6CDC639EA04411EC8A7E5E2CC4F9AE02.roa (hash: WktAZLAHSw7QkU+hNH84sEG4OXo+/tq5XSlAqKGLv18=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.crl
rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 02:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 996 (0x3e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1D91, serialNumber=705581D40C9581A2651E5325238DB3BDCB3A7D05
Validity
Not Before: Oct 19 02:35:20 2025 GMT
Not After : Oct 26 02:35:20 2025 GMT
Subject: CN=68f44e69-a2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:43:4d:85:01:3c:95:19:15:bd:8e:51:d7:16:
6b:c0:11:03:64:1c:ee:05:bb:47:f1:9a:be:fd:90:
f9:97:57:42:ce:48:0f:84:15:af:9c:d6:22:63:df:
f2:c7:a9:5e:97:d5:0e:6b:66:7a:a5:db:1c:0f:3d:
64:70:de:6e:91:14:f2:17:81:ab:e0:f6:9a:47:d8:
95:b6:80:ac:2b:d0:bb:68:da:5c:61:02:c0:9f:98:
5b:90:77:a4:d8:9d:23:38:88:1a:ab:37:f6:d5:7e:
3f:f4:0d:6e:51:4a:7d:9e:43:c0:67:f1:ff:b4:86:
d5:8f:3f:0a:a5:76:f3:4c:76:8e:d6:fe:9d:77:fe:
a4:15:94:61:e8:41:2f:ef:28:a5:b7:63:9b:08:2e:
7e:25:29:82:d0:ed:63:88:85:dd:39:a5:af:59:97:
21:18:2b:2d:5d:48:83:00:2d:a1:5e:4a:95:11:2e:
55:9a:93:48:05:be:8c:ad:80:8d:5d:4e:34:e7:af:
d7:51:e4:9a:a2:7d:4f:36:cf:f8:db:d5:63:6a:7f:
d7:16:bf:ba:e4:bd:25:ee:49:5b:a8:65:9f:99:20:
9a:6f:52:e7:bc:69:39:8d:f5:1c:1f:b6:af:85:39:
cf:fb:da:d9:29:42:4d:b9:20:72:75:5d:fd:70:27:
f7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E4:92:43:7C:98:5E:DF:82:C8:46:87:4A:3E:A8:55:DC:84:97:8D
X509v3 Authority Key Identifier:
keyid:70:55:81:D4:0C:95:81:A2:65:1E:53:25:23:8D:B3:BD:CB:3A:7D:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:42:16:e4:80:52:9f:42:db:82:da:88:6e:8b:dd:47:1c:de:
9b:88:80:55:10:04:4e:b2:3c:66:55:30:ee:c2:aa:86:5f:b7:
b9:f4:d7:6e:4e:72:f5:e8:4c:76:e3:e4:ab:10:45:be:36:2b:
15:33:eb:b7:2d:a2:73:8c:25:a8:55:b6:f5:48:50:67:ce:89:
2c:a9:53:91:c3:6e:bb:52:ad:49:28:cc:ec:78:3e:11:c3:16:
e4:f5:32:31:c6:b7:f1:3b:1f:49:c6:d8:df:1b:42:12:38:ab:
a5:70:d2:8d:08:5d:e6:92:05:55:b1:1e:24:e4:e5:8c:b0:77:
ba:00:74:05:71:a9:a8:ac:2b:6c:0f:d6:ba:b7:40:c6:c3:95:
15:d5:b3:64:77:cd:03:e9:f9:35:ec:c9:96:c3:89:65:a7:0f:
9e:20:e1:d0:c1:97:a0:30:65:b1:b8:68:85:d2:a4:dd:ce:da:
3f:8f:f9:50:ed:31:f8:ef:72:24:d4:ba:fe:5d:ca:12:12:8f:
92:58:f4:e5:96:6a:77:9d:e3:9c:bc:e5:f5:29:d3:49:8d:7b:
5d:80:bd:6e:c3:b7:0d:36:34:f7:1f:68:5c:ea:b9:49:ba:f8:
1d:c7:01:14:2e:1c:db:a7:c0:38:97:e3:f4:bb:ee:64:b0:0e:
29:1a:0e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:26:46 2025 by rpki-client