
$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
File: JHItMcJRPk5_h-23Df6dyU-EaLo.mft (raw, json)
Hash identifier: FLeyo8PFJzFE2JD3+ItB4hY3QtGhTGs8e5vV+B1w5gM=
Subject key identifier: 01:B7:79:6C:8A:EC:EE:ED:3A:6F:D2:87:97:07:EB:3F:AE:A6:5E:3D
Authority key identifier: 24:72:2D:31:C2:51:3E:4E:7F:87:ED:B7:0D:FE:9D:C9:4F:84:68:BA
Certificate issuer: /CN=A91186C2/serialNumber=24722D31C2513E4E7F87EDB70DFE9DC94F8468BA
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
Manifest number: 97
Signing time: Mon 03 Nov 2025 06:25:29 +0000
Manifest this update: Mon 03 Nov 2025 06:25:29 +0000
Manifest next update: Mon 10 Nov 2025 06:25:29 +0000
Files and hashes: 1: JHItMcJRPk5_h-23Df6dyU-EaLo.crl (hash: aabefFnEVfqJCC3CFHzWA3bJx3bJlX29RQZv5FELBqE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.crl
rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:25:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91186C2, serialNumber=24722D31C2513E4E7F87EDB70DFE9DC94F8468BA
Validity
Not Before: Nov 3 06:25:29 2025 GMT
Not After : Nov 10 06:25:29 2025 GMT
Subject: CN=69084ad9-0f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e4:87:ef:3a:05:b5:17:fb:7f:e7:15:95:39:
6e:f1:7f:c8:f1:10:a0:d8:35:4b:54:0b:21:a8:93:
c2:68:6f:6e:59:ab:d0:51:c6:c5:e9:d9:bc:39:53:
06:a1:eb:21:f8:c4:3e:1c:45:14:e9:8b:d3:60:a8:
7f:6a:f8:be:29:18:07:0d:86:1c:68:d7:ac:eb:38:
76:99:da:46:94:48:5d:1c:a5:41:86:a6:ac:1a:eb:
b7:eb:89:51:5b:bc:5c:2f:b3:39:7c:17:5d:4d:54:
b9:ca:0d:07:83:36:f3:f9:db:8e:85:43:ad:e7:48:
93:ea:8e:85:7b:b7:5c:50:6b:75:75:86:52:85:43:
ff:62:6c:8a:d1:71:a2:6d:24:d1:b8:54:de:b1:16:
fe:5c:45:a4:a6:80:85:d6:15:a4:cc:bb:8d:11:8e:
fb:4e:bb:d0:8e:8a:16:1c:19:c4:7c:d3:a1:5d:b1:
ef:f9:e5:0d:26:7a:5d:7c:40:0f:b4:4d:1b:59:d3:
42:ae:6a:16:22:b2:dd:b0:1c:17:c9:77:e4:8c:7d:
99:9e:89:de:94:13:60:0a:c6:f7:7e:53:fc:b9:ab:
66:f2:49:b6:1d:5b:db:60:97:52:fb:da:75:73:57:
1f:16:18:75:7e:92:13:9a:13:9d:df:aa:80:a3:5f:
04:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B7:79:6C:8A:EC:EE:ED:3A:6F:D2:87:97:07:EB:3F:AE:A6:5E:3D
X509v3 Authority Key Identifier:
keyid:24:72:2D:31:C2:51:3E:4E:7F:87:ED:B7:0D:FE:9D:C9:4F:84:68:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c7:c2:9b:b5:ae:a6:2c:44:d8:c3:af:b5:56:14:e3:6a:c6:
a4:2c:23:4e:a0:79:68:56:1a:4e:d2:dd:78:0b:57:95:74:ae:
5a:1f:3a:ce:38:b4:8e:69:f6:8b:3a:98:45:e2:0b:9b:b5:d2:
39:3e:4b:db:72:c4:58:05:9e:39:39:db:ca:d7:77:23:3b:32:
7b:71:0d:b0:b9:0e:d8:f9:d9:ba:17:ee:ba:da:98:86:a4:ba:
3f:d1:83:c8:98:3d:42:cc:2c:b4:d0:8b:b6:b9:f9:b9:36:b7:
a0:17:5b:15:eb:73:8a:ba:6e:40:dc:d4:65:ec:8f:b2:a3:0b:
91:d0:d8:fe:75:6b:e1:2e:a4:3e:4b:f7:c4:50:f4:18:9c:80:
7b:59:42:9e:93:db:e7:e2:5c:c8:bf:91:4c:27:53:cb:d4:60:
ed:6c:34:a2:02:1c:b3:c1:a7:fc:9f:c7:2e:03:55:66:32:ff:
3b:9b:98:7f:f4:47:c3:a9:3a:f2:7a:97:06:22:ad:35:c1:13:
82:95:ae:5d:d8:fb:d6:32:13:98:89:f1:df:8a:e5:84:5f:22:
b2:51:23:37:0d:95:80:84:4c:56:98:d2:b2:1e:93:44:80:5c:
5a:7d:e2:43:b6:fa:c8:33:f1:0d:3f:fe:12:ca:1d:19:92:b5:
85:09:d4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:06:52 2025 by rpki-client