
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
File: ppcA540MgSrS4sEUyCxlWgrNRH8.mft (raw, json)
Hash identifier: gMNmZpYk9Y17qio1b7r045eB/eE5ouyhNuM/3nk9pvs=
Subject key identifier: 8E:AC:AD:8C:57:55:16:ED:FB:B8:AC:B7:CB:CB:BF:25:28:A8:F5:2D
Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Certificate serial: 0330
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
Manifest number: 02E4
Signing time: Sun 19 Oct 2025 03:54:33 +0000
Manifest this update: Sun 19 Oct 2025 03:54:33 +0000
Manifest next update: Sun 26 Oct 2025 03:54:33 +0000
Files and hashes: 1: ppcA540MgSrS4sEUyCxlWgrNRH8.crl (hash: fVItGizGLbRzJ/1qLsp6c5vAE7dvod4L3Miw7KFiHLk=)
2: 20978DD270E411F08F40242AC4F9AE02.roa (hash: 84pcGrR9yrb0lc+y5Ras78T88Umec4YhuuH1jDixkUs=)
3: A48D6CEEED6311EDB69EB62AC4F9AE02.roa (hash: QBFNp4MmnEBSv9rQ1ZErIYUdcQY3it7GFZoZDBAM4/Q=)
4: A55DE586ED6311EDB69EB62AC4F9AE02.roa (hash: ZKyZxyNBz5zb2OW/liXlXub2chKOr5/WEo8h6rjJk8k=)
5: 29F2A6202EF711F08A285219C4F9AE02.roa (hash: BDQ/cIT9onHOd5JfvUTITTE8/WzzYdypmVwFJRuUaNk=)
6: 2395AD02E44911EFB4261C43C4F9AE02.roa (hash: yVwnO56nbUbnCX/cr4Z5ZK8KQTm634H9qAQ3mEA0k1k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 03:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 816 (0x330)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Validity
Not Before: Oct 19 03:54:33 2025 GMT
Not After : Oct 26 03:54:33 2025 GMT
Subject: CN=68f460f9-73fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d6:5e:cb:2a:16:10:37:88:d4:ab:31:7d:32:
13:56:26:62:2a:0e:e4:8e:8d:d8:6d:1f:c3:77:cc:
6a:e7:db:b3:17:96:79:d2:e2:51:3c:ea:bf:f0:ef:
b5:76:0b:7c:37:13:cd:79:f7:4f:6e:39:05:87:13:
a9:78:bb:57:a8:f2:13:1f:76:d4:db:1a:16:50:69:
39:da:60:74:65:90:8b:3a:47:b9:04:0c:38:25:f3:
a1:93:af:60:5d:d9:19:9f:c5:cb:94:ba:14:28:be:
6c:09:9b:dd:ff:59:3a:8a:e1:e4:2e:aa:ef:b6:84:
4f:54:d5:60:0e:f7:45:f0:2f:16:70:db:f5:33:1e:
ba:f9:57:25:86:1d:18:f2:d0:74:36:59:b9:8e:8f:
42:5d:67:ac:40:74:0e:da:c6:a7:67:a4:c9:03:e9:
9f:82:cc:b6:bf:f8:24:ef:78:4b:ee:80:34:f3:8f:
f5:4b:16:cc:d6:27:88:a5:9e:f1:ed:83:b1:35:17:
f4:10:48:f7:57:ce:e9:79:14:3b:35:2b:10:57:05:
cb:29:d8:b7:38:61:94:b1:7b:26:7c:0e:61:4e:c2:
aa:27:f9:02:f7:0a:ea:27:47:a0:30:6e:69:e9:9f:
04:f9:89:11:b6:14:ef:72:04:00:27:b2:21:90:d6:
b1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AC:AD:8C:57:55:16:ED:FB:B8:AC:B7:CB:CB:BF:25:28:A8:F5:2D
X509v3 Authority Key Identifier:
keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:dc:a6:da:2b:fc:e9:82:37:3a:38:09:f4:85:fe:75:1c:68:
86:a1:fb:6b:73:70:a6:93:8d:6c:ea:8b:e1:56:74:8d:48:a3:
1c:d4:12:4c:34:36:16:21:ee:56:f9:7e:54:46:1f:c5:8d:c0:
c2:1c:46:2d:bf:1a:d5:34:34:a7:6c:2e:1a:11:e0:3a:ae:1d:
0a:08:70:78:07:3d:24:b3:3b:e1:56:90:cf:85:52:36:22:d8:
3c:78:e2:6b:2f:4a:6a:0f:b0:54:bc:0e:65:ff:fd:84:e8:32:
f5:9a:aa:32:d3:c3:73:68:81:54:c9:a4:f8:b5:f7:de:9c:e9:
9a:17:48:38:53:55:26:8e:39:28:79:18:25:1b:46:ae:9d:ab:
f1:d7:6c:24:4a:43:a4:ba:68:c9:25:5c:6b:26:af:dd:da:02:
24:e6:df:67:00:2a:4c:a1:be:0c:85:10:fc:bd:40:c9:35:54:
a9:71:ec:30:2f:05:07:dc:09:b8:40:47:48:6d:82:31:45:fd:
84:ea:cc:0e:fa:a6:9d:ef:63:fe:ed:82:17:a5:19:a5:0b:f9:
46:04:4d:0f:94:a9:29:17:7d:a2:70:ca:53:6e:db:aa:8c:00:
8d:c6:60:eb:21:64:7f:47:fb:7e:fd:a0:0b:33:7d:45:ce:44:
cb:16:90:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:25:35 2025 by rpki-client