
$ rpki-client -vvf rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
File: N-A1JLWEfb6tAP43jEar0MpwRfg.mft (raw, json)
Hash identifier: DoSA2EZttc4RhLsXKL0KOL5gvRjijDal7vKRGZVsHHc=
Subject key identifier: ED:59:29:ED:0C:AF:CB:49:A3:CB:B4:5D:B9:AA:8F:FA:6C:3C:76:B1
Authority key identifier: 37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8
Certificate issuer: /CN=A91799A0/serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8
Certificate serial: 0402
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
Manifest number: 03F2
Signing time: Mon 03 Nov 2025 00:28:37 +0000
Manifest this update: Mon 03 Nov 2025 00:28:37 +0000
Manifest next update: Mon 10 Nov 2025 00:28:37 +0000
Files and hashes: 1: N-A1JLWEfb6tAP43jEar0MpwRfg.crl (hash: sc99JGIZ1uoayGPImwHhbqEjHDx8gPw4kv+jKttezPk=)
2: 99C173847DA711EFBC48DB25C4F9AE02.roa (hash: WOIniZiHfKK2LXS4UqzBre9hhY37jz+wS/A1b1+/uig=)
3: B0A47CAE7DA711EFB7190E26C4F9AE02.roa (hash: sWYV6f6Mq/gOtK8jl6qm1FHDusM3lQd7MnyI98UBc+A=)
4: 46A569387DA911EFAC4E642AC4F9AE02.roa (hash: OW6cdcKORRWUDvnbMhKStDDiNQb7XK3dKBXO16VeQlo=)
5: F39CE41C7C3811EFBF44AF4FC4F9AE02.roa (hash: mzXsIviLzqNFssHWjKdPxrfrQjIOrQyDdrnRheg5sAE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl
rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 00:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1026 (0x402)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91799A0, serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8
Validity
Not Before: Nov 3 00:28:37 2025 GMT
Not After : Nov 10 00:28:37 2025 GMT
Subject: CN=6907f735-1b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e8:da:f3:20:63:37:7e:7f:7a:bd:af:ac:12:
ac:a6:be:29:b8:39:17:ba:32:c4:fb:99:f1:7e:8a:
3e:8e:3d:92:c4:e2:f4:6b:4c:7d:de:74:77:e6:f5:
14:84:56:35:fa:45:3f:55:a5:81:54:f0:b5:d5:eb:
19:0e:ee:89:f0:86:e4:ea:40:89:4e:68:89:e1:a3:
0f:e8:01:a9:e5:66:ea:65:a3:0d:7d:4b:a6:a2:59:
75:28:5b:35:08:92:23:76:16:02:7a:40:37:96:cc:
36:8e:86:cc:80:7a:88:3e:50:2d:1c:7d:40:ea:51:
93:53:79:a8:1d:a3:a8:ac:83:71:39:61:b5:5b:37:
b9:b3:a9:23:98:f6:4e:58:9e:e8:7d:df:30:15:37:
b7:81:6b:11:4b:12:67:4b:63:56:e5:13:4d:ee:59:
4e:fb:ca:4b:eb:f2:78:c5:63:04:e1:74:85:d9:06:
9a:0e:97:1e:10:ce:49:5e:0e:dc:c5:72:ee:d8:8d:
a7:46:4b:2b:ae:38:4c:d9:94:4b:16:ae:89:d8:00:
e4:33:5a:09:c2:41:be:bb:99:d9:2f:9b:8d:c3:25:
8c:b4:f0:2f:96:7c:31:86:01:a9:d7:37:bc:19:e8:
34:a1:15:cd:19:6b:cd:ec:fe:72:c2:40:13:0b:01:
f7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:59:29:ED:0C:AF:CB:49:A3:CB:B4:5D:B9:AA:8F:FA:6C:3C:76:B1
X509v3 Authority Key Identifier:
keyid:37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e6:3c:d3:59:87:15:d2:48:d6:37:8b:4f:5e:c3:b3:91:08:
db:2d:46:85:8d:33:ed:5e:97:b6:a8:a8:e7:c5:e0:3e:a7:db:
30:0b:b8:37:df:4e:82:77:e0:63:a4:5a:f9:c6:52:1d:74:f6:
71:60:08:dd:4b:d9:27:62:a6:a6:a1:11:c5:05:11:e1:09:47:
ed:eb:30:1e:80:60:f3:ce:ca:bc:04:81:32:5b:cf:fb:e3:6f:
b0:9e:a3:35:2d:1f:97:c6:33:c8:8f:81:64:5e:7d:42:c5:df:
59:0e:e5:a5:90:83:b7:cb:39:ec:87:07:fb:0e:09:ae:8a:0d:
56:cc:96:08:45:5f:6d:db:71:35:cd:b2:7c:74:6e:27:ce:e3:
43:ba:d4:71:13:e6:a5:72:3a:eb:6b:5b:3a:20:d3:4b:1b:c4:
6e:e7:e9:d6:b5:28:a9:e4:b8:1a:29:a9:ef:ec:ed:2e:20:07:
46:16:18:14:ac:a8:4e:89:7b:98:49:02:5c:81:7e:c0:00:cf:
6c:0c:28:f4:17:c7:3f:00:4c:d1:96:6b:29:cf:92:44:c1:99:
34:51:31:26:65:e0:23:81:53:cc:34:83:11:24:47:6d:53:eb:
45:f9:27:61:33:68:1a:c0:b6:ab:d4:f2:89:cc:4e:0b:89:5a:
d9:cb:60:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:16:38 2025 by rpki-client