
$ rpki-client -vvf rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft
File: 22JQZX_rwWTrghx2UqvjqF-prNQ.mft (raw, json)
Hash identifier: 2wJHo3OBJfwiEt5xhmQie//vRjJA5T92HXAOBbNLi/M=
Subject key identifier: F0:1C:5D:C2:C7:35:10:E5:21:23:84:58:3E:90:8B:2C:98:96:02:B5
Authority key identifier: DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4
Certificate issuer: /CN=A91197BC/serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4
Certificate serial: 098D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft
Manifest number: 0972
Signing time: Sun 02 Nov 2025 20:07:59 +0000
Manifest this update: Sun 02 Nov 2025 20:07:59 +0000
Manifest next update: Sun 09 Nov 2025 20:07:59 +0000
Files and hashes: 1: 22JQZX_rwWTrghx2UqvjqF-prNQ.crl (hash: z5UNhxfB1beHM8xhGyPStfuqKHVie06A07M3znmUAh4=)
2: 51408896A3E211EF8DAB713BC4F9AE02.roa (hash: nnJopRuWF4IPI2CoSPvt+TdVM1R3rgDYOUPBMtlzCqI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl
rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 20:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2445 (0x98d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91197BC, serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4
Validity
Not Before: Nov 2 20:07:59 2025 GMT
Not After : Nov 9 20:07:59 2025 GMT
Subject: CN=6907ba1f-cd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:58:b4:66:d8:ea:9c:4e:47:16:2b:65:6b:
e0:9b:8a:2a:58:de:73:c1:a5:d1:70:d7:5c:a7:ef:
37:c3:6d:b7:11:62:f7:c1:9b:d5:a9:83:23:24:d7:
2a:a8:66:bb:92:b7:76:22:7e:f9:ae:54:56:42:4e:
56:be:4d:73:ec:9b:3f:b3:fe:81:7c:ff:5e:bb:af:
20:7f:5f:90:24:5a:2c:12:2b:15:3a:e7:ee:8a:61:
b5:48:78:74:6f:87:04:7c:18:5d:81:8a:18:8a:fb:
1e:9d:a4:e6:de:23:de:3b:8f:eb:d4:18:22:db:55:
f4:33:d0:4f:1f:68:b5:bc:ea:0d:e8:81:a9:8d:41:
d6:42:0c:97:07:3a:07:2b:f7:35:c3:bc:91:73:a0:
bd:25:da:56:70:0c:3f:bc:64:da:64:ce:a5:b0:b5:
b8:01:80:61:9c:81:02:03:af:55:a0:e8:81:83:8c:
96:40:c8:91:bb:34:9c:a7:39:33:f3:8d:70:97:ff:
d1:44:e2:a8:6b:7a:45:6b:1d:33:c0:6f:a6:ca:e0:
7f:4a:02:20:5c:f3:a2:3d:b7:2e:c8:2b:f4:c3:88:
27:82:ac:68:f2:50:b8:fa:a6:e5:91:54:ec:14:57:
31:a3:1d:a5:bd:78:3b:92:d2:80:78:e0:da:17:65:
4b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1C:5D:C2:C7:35:10:E5:21:23:84:58:3E:90:8B:2C:98:96:02:B5
X509v3 Authority Key Identifier:
keyid:DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:c7:7d:ae:d0:26:50:68:73:f1:51:24:18:ce:fa:4b:67:49:
ad:ff:1d:a3:53:d0:25:92:38:85:71:40:eb:fb:77:07:16:33:
cb:c6:55:4a:f3:8e:fc:76:52:11:06:86:7b:38:8c:67:f5:90:
10:e1:0c:59:a7:30:8f:94:18:2b:dd:b9:59:bc:44:ff:87:41:
8f:71:d2:0c:77:66:9b:96:49:27:ee:f5:9d:9c:cf:7d:d2:20:
67:cd:d7:07:e8:42:9c:b3:5b:10:ce:61:d7:c6:62:cb:c1:e8:
c1:3e:b7:f4:2f:af:85:e2:76:f9:52:94:47:87:04:b1:54:e8:
79:b1:96:98:9e:5e:7a:5f:b4:24:6f:c1:b6:97:42:d7:b6:0f:
e8:fe:d9:ae:63:4d:00:64:ba:a8:05:e1:88:0f:26:1e:32:c8:
48:9f:f7:a1:ce:24:e5:d1:45:b4:dc:d5:02:fe:3f:45:0a:42:
c0:b8:88:53:c0:42:e2:05:4b:8d:ec:3e:60:10:d7:16:ba:1e:
55:19:2e:1e:86:8c:4a:c0:f6:38:a9:fb:6a:ad:02:8c:9f:5b:
83:4f:33:39:30:15:e9:68:56:02:a7:21:09:14:7b:bf:97:fd:
ef:9d:a4:78:56:7c:9f:f0:3a:01:8b:72:d3:3a:65:3c:36:bc:
af:bc:85:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:17:06 2025 by rpki-client