
$ rpki-client -vvf rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
File: rJEs76dYoRmcG-3gaxSp6jmJdfc.mft (raw, json)
Hash identifier: HR10ibxKumJsopzacp/4eYlFpnbjB1YTx9Izfn3PbeM=
Subject key identifier: CB:0F:98:31:26:3A:5B:D5:1B:86:52:B0:2B:27:BB:11:82:B1:EF:65
Authority key identifier: AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7
Certificate issuer: /CN=A911285C/serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7
Certificate serial: 024F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
Manifest number: 023D
Signing time: Wed 05 Nov 2025 02:02:28 +0000
Manifest this update: Wed 05 Nov 2025 02:02:28 +0000
Manifest next update: Wed 12 Nov 2025 02:02:28 +0000
Files and hashes: 1: rJEs76dYoRmcG-3gaxSp6jmJdfc.crl (hash: KzmoSjiCJ+zHmHcuwOWkKVCK8vyxPhNYNGpkL/uA7cY=)
2: 38E02CDC04EE11EE89900876C4F9AE02.roa (hash: +0GRxYO2GKHW0qvFUQkbtc7koZkiCwiB0U5TojZcsvM=)
3: EE0C206E96FF11ED87B56F84C4F9AE02.roa (hash: Ma1fK8A2BnEQxkntLkAUafOlFP+pb/E30IvuoC7r5bk=)
4: EF1E23F896FF11ED87B56F84C4F9AE02.roa (hash: S5t27YbvUIBsEi+zxF5EsG2NIOAo49u3/IX5fyPJ2Lc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl
rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 591 (0x24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911285C, serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7
Validity
Not Before: Nov 5 02:02:28 2025 GMT
Not After : Nov 12 02:02:28 2025 GMT
Subject: CN=690ab034-7251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:0d:cf:9d:1f:5c:18:93:a1:ac:27:7b:72:
88:cc:3e:78:b2:f3:43:b6:72:6a:2c:7a:27:d2:1c:
21:37:f5:57:c1:57:1c:9b:6a:40:ce:39:a0:db:80:
e9:28:29:8c:37:52:c2:42:fa:c2:c2:d1:22:ce:fd:
c8:be:81:45:22:87:dc:50:27:ad:9f:b1:1e:c4:90:
08:16:6c:6c:7c:13:ab:e4:bf:92:20:c3:f5:57:83:
a8:ae:4d:3b:a2:0a:e4:cd:b5:51:9c:7a:41:6c:21:
36:d2:33:82:fb:1d:6f:a9:88:cd:85:f5:58:fd:90:
d6:63:5c:40:c4:2f:a2:79:92:4b:48:5f:97:81:10:
ab:88:ea:7e:07:b3:e6:63:82:97:eb:fb:95:cf:ad:
a4:9b:00:90:e5:ee:6d:a1:0e:ed:21:c1:c4:d5:84:
c3:aa:ac:fc:d1:c7:dc:32:ac:6b:3a:50:19:0f:1d:
d7:1c:ac:9e:a6:72:8b:f9:48:94:16:a8:87:8c:84:
7a:3e:53:d3:b0:b6:33:e4:95:eb:67:36:17:2b:5b:
17:06:5b:57:aa:5b:6a:96:ea:69:7b:a0:ec:62:8c:
c7:2e:02:db:01:aa:8c:1a:0e:79:ad:f2:cf:69:ae:
39:f3:2e:b6:86:73:f0:53:3a:bc:9c:f3:6d:dc:ab:
d6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0F:98:31:26:3A:5B:D5:1B:86:52:B0:2B:27:BB:11:82:B1:EF:65
X509v3 Authority Key Identifier:
keyid:AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b9:d0:59:3f:75:94:35:4c:93:7b:7b:fc:af:3b:02:d8:c3:
08:02:7f:cb:62:4d:8c:7a:fe:63:12:dc:40:26:4b:70:f1:e2:
71:12:1a:81:77:92:dc:be:ef:9b:45:22:17:97:b0:85:c8:45:
c1:59:2a:37:bb:f3:bb:4b:e3:83:73:c5:cf:1b:3c:c5:5b:aa:
1b:b9:cc:d2:03:08:b7:7a:48:73:da:94:55:5d:27:28:d3:9b:
54:72:b6:bb:f5:bf:05:c9:d8:86:72:12:bc:bb:bd:95:34:1c:
97:83:62:74:0a:5e:27:ff:86:17:2f:59:2a:77:a7:da:d9:9d:
e1:f8:8d:bc:70:24:36:ce:7e:e7:ab:da:b7:b9:f2:b0:3b:1f:
17:d9:c2:3b:bb:88:11:c7:ef:a4:f9:d5:8c:97:e4:aa:43:e9:
8e:f8:58:20:92:f1:a2:f6:08:5c:9a:b1:10:55:14:56:2e:11:
86:95:44:f7:01:f0:b8:61:39:37:cf:77:b6:2d:63:a2:d3:7c:
48:ca:0a:15:60:1f:0a:39:c0:4d:cf:32:84:de:7a:51:3a:67:
45:30:5c:c4:3a:e1:4f:bf:2a:9a:53:1d:4c:29:84:34:74:47:
70:92:94:67:1b:43:cb:94:de:bc:b1:aa:d4:20:e4:7a:bf:69:
20:8a:12:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:18:34 2025 by rpki-client