
$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft
File: j4ta_C0ziN3SUYrpoHOQj4-loKU.mft (raw, json)
Hash identifier: Vp9KIZ3TzIe9dWOTaxT6OZ7NbIxqoRettAGN6em1QFc=
Subject key identifier: 7E:DC:22:CF:8B:56:7F:84:A9:2E:E5:CF:76:FF:4B:66:76:AB:12:84
Authority key identifier: 8F:8B:5A:FC:2D:33:88:DD:D2:51:8A:E9:A0:73:90:8F:8F:A5:A0:A5
Certificate issuer: /CN=A91817E6/serialNumber=8F8B5AFC2D3388DDD2518AE9A073908F8FA5A0A5
Certificate serial: 0926
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4ta_C0ziN3SUYrpoHOQj4-loKU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft
Manifest number: 0B35
Signing time: Tue 04 Nov 2025 20:22:32 +0000
Manifest this update: Tue 04 Nov 2025 20:22:31 +0000
Manifest next update: Tue 11 Nov 2025 20:22:31 +0000
Files and hashes: 1: j4ta_C0ziN3SUYrpoHOQj4-loKU.crl (hash: L3Lbb8p08jC8qDTmw+S2nruoWJVwmNZHF0xm5UTPyaQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.crl
rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4ta_C0ziN3SUYrpoHOQj4-loKU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 20:22:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2342 (0x926)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91817E6, serialNumber=8F8B5AFC2D3388DDD2518AE9A073908F8FA5A0A5
Validity
Not Before: Nov 4 20:22:31 2025 GMT
Not After : Nov 11 20:22:31 2025 GMT
Subject: CN=690a6087-570f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9a:ae:51:76:2b:e7:78:4f:33:92:b8:a0:42:
d2:fe:f8:2c:2f:57:67:e8:2f:cb:d4:2b:44:c3:90:
76:8c:80:7a:16:83:87:9e:cd:8f:cc:8b:61:6b:57:
b3:2d:e8:66:2a:c4:d2:6e:af:c5:04:30:42:5b:49:
b1:ed:cc:1c:3a:ae:56:78:2e:e8:60:43:60:be:49:
24:e8:64:82:9f:93:cf:6c:36:bc:18:83:3f:3d:bd:
b0:37:97:44:47:5c:d8:9a:0e:df:6f:77:43:20:cd:
8e:53:74:5b:ff:e8:2b:18:76:46:a4:24:58:29:c8:
ae:ee:66:26:05:19:11:bf:ac:74:74:40:ad:d8:76:
b4:da:80:83:ad:6b:a7:ba:5a:0b:fc:f3:f3:32:38:
5a:a2:25:16:53:a3:a6:a6:57:69:1b:f0:78:d6:c1:
3a:fd:ed:ff:c6:85:6b:95:10:34:cc:77:92:72:0b:
b2:09:f5:f8:e4:3f:d8:18:1f:49:8d:dc:42:05:11:
8b:2b:c4:d7:34:0e:89:fb:42:f9:1e:f3:18:00:fc:
0e:e3:a4:85:07:db:f0:23:9b:73:5a:e0:46:02:0f:
4f:d0:80:0d:5f:26:c4:61:d7:6d:86:36:d9:3f:01:
30:d0:0e:20:9b:dc:3d:4f:a0:32:54:29:53:1d:36:
c9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DC:22:CF:8B:56:7F:84:A9:2E:E5:CF:76:FF:4B:66:76:AB:12:84
X509v3 Authority Key Identifier:
keyid:8F:8B:5A:FC:2D:33:88:DD:D2:51:8A:E9:A0:73:90:8F:8F:A5:A0:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4ta_C0ziN3SUYrpoHOQj4-loKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:91:b6:5d:d3:27:e5:7a:47:84:18:9f:6c:a0:b3:38:c1:f9:
4c:d2:97:f9:77:11:fa:8c:a0:3f:c0:02:a9:4b:ad:43:18:99:
fa:ba:c1:c6:eb:cc:16:bb:d4:c8:c5:e9:dc:10:cd:ac:1c:60:
3d:86:ff:52:15:ca:49:88:58:c7:87:6f:42:f4:b6:52:6a:d5:
c2:a8:84:b2:64:71:70:65:58:e9:e8:64:0e:bb:88:e5:df:a3:
58:aa:3a:31:d2:86:35:c2:70:8a:37:0a:39:fe:cf:d9:fe:73:
07:a4:d6:f0:87:7f:a6:ad:ba:84:b9:5a:54:34:a9:d0:04:8c:
29:cf:39:55:d0:b8:f8:e3:9b:04:ed:b8:e1:fe:83:39:9f:9c:
89:5e:ca:11:ac:d2:92:9a:a3:80:ed:05:a5:c1:e8:7d:41:b8:
d8:a5:04:23:64:bf:56:3b:d8:4d:50:0a:0d:b6:26:74:16:33:
d0:f3:97:fd:86:5b:ab:35:51:38:72:1a:b2:32:9a:15:79:79:
9e:7e:20:59:d1:61:88:fe:20:1d:57:7b:b0:cb:41:52:1e:29:
56:00:0e:6a:8b:60:d2:56:79:09:17:b0:39:64:15:27:2a:c1:
6f:0a:24:08:c7:40:e9:26:fd:c6:ae:bc:d5:56:56:76:28:a4:
74:61:d6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:10:28 2025 by rpki-client