
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
File: XBJjPm2nhhExvM_qH3t6vTUdIy8.mft (raw, json)
Hash identifier: 34GXg+vZrHx+/xDBn6N31bJlaB1dP4Qr/gu0WYBbTjQ=
Subject key identifier: 1D:5D:CB:F8:46:82:70:F3:B6:C9:B2:78:6D:3C:D4:34:98:68:0B:2D
Authority key identifier: 5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F
Certificate issuer: /CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F
Certificate serial: 02F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
Manifest number: 02E8
Signing time: Mon 03 Nov 2025 01:14:24 +0000
Manifest this update: Mon 03 Nov 2025 01:14:24 +0000
Manifest next update: Mon 10 Nov 2025 01:14:24 +0000
Files and hashes: 1: XBJjPm2nhhExvM_qH3t6vTUdIy8.crl (hash: MtEyREsA8xmtbqG9HZnvoHXe04cCX2v0eCg7nCiwKz0=)
2: 92F62AF0032811ED8DFE1842C4F9AE02.roa (hash: 5ddtdaIVi4uZX5Kvh4OHCGdOxyTvl3WbsBWufhivC2Q=)
3: 6B10211E032B11ED8B3C5B4EC4F9AE02.roa (hash: ELuUl8jYoHQdUknrof/L+Xlspg+bgQj1KmK60+o/Jfs=)
4: 418966DA032011ED84D6CA1EC4F9AE02.roa (hash: KuSwuFXT3RlQeIGfpEWkiu/ifBNFInANnuYBrAg51Cc=)
5: 94584738031A11ED934E3D58C4F9AE02.roa (hash: cMcwlHYnO9+mh5veotjRirRXB4y0F0TlStRvvkDezXU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl
rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 01:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 761 (0x2f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5577, serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F
Validity
Not Before: Nov 3 01:14:24 2025 GMT
Not After : Nov 10 01:14:24 2025 GMT
Subject: CN=690801f0-c6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ac:7e:8b:fb:de:60:65:b9:bf:ee:e9:5c:1b:
31:48:df:f0:a2:6f:e9:71:9b:da:1d:0e:86:7a:36:
20:6d:b1:30:ed:16:93:e4:30:60:32:39:c4:95:b0:
81:26:7f:30:57:e3:b5:bb:94:04:a4:50:18:6a:94:
5c:14:cb:75:ee:55:e3:7d:49:34:40:af:d2:2a:12:
d3:71:02:30:17:78:2e:55:5f:d6:f7:81:3e:63:63:
95:2f:90:9a:01:97:e2:42:f0:3b:f7:da:23:28:2b:
94:b1:d7:47:ea:c9:5e:a6:55:80:5d:da:51:e9:4f:
57:db:e9:d1:21:0d:d0:54:f3:53:c3:e8:33:15:4c:
ea:a9:f8:4e:2c:6e:06:ad:fc:cd:67:c9:55:df:d6:
1c:d9:b0:27:e7:69:1b:8e:6c:5c:79:73:60:e3:a7:
ca:06:00:88:8a:1b:7a:11:fa:56:d5:15:3c:1c:c3:
8f:cb:47:d3:33:c1:23:c9:f6:2f:3f:17:5c:ed:27:
d1:b1:4f:32:25:55:22:a8:6c:46:2c:6d:17:a3:8f:
0f:0b:b4:6d:9c:2b:e4:fd:8c:3f:9a:cf:4b:ac:6a:
ed:d4:99:72:1a:f9:f5:23:74:af:e0:39:1c:cb:4d:
fb:85:fe:d6:b8:b5:75:4e:79:ce:4a:70:15:9c:d8:
54:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5D:CB:F8:46:82:70:F3:B6:C9:B2:78:6D:3C:D4:34:98:68:0B:2D
X509v3 Authority Key Identifier:
keyid:5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:09:b7:47:2c:2d:73:2a:a8:89:ca:4c:c3:2f:06:b0:4a:ed:
c4:9b:00:58:c6:92:b3:55:b7:04:94:52:90:22:d7:9c:2a:f4:
61:85:37:96:c6:e9:36:23:eb:6b:76:60:21:01:ff:16:e2:5b:
0c:da:4f:b7:b2:c5:24:79:e5:c3:74:05:f3:ff:8a:9d:62:51:
d1:9c:bb:f5:d5:13:1b:ba:66:dd:e6:34:1d:fc:05:92:b0:12:
c3:a6:11:8b:c4:06:4f:68:63:05:12:08:84:aa:33:27:3d:ba:
a7:33:e1:e6:c6:ce:fe:15:17:30:f5:e5:84:7f:8b:43:a9:dc:
94:d5:55:24:74:d0:f4:86:dc:26:c5:9a:66:ad:de:8b:75:0b:
42:e6:29:90:3d:df:9c:06:e7:c9:80:dc:ce:ee:7f:14:90:6a:
5c:e4:d2:c6:82:6a:65:d8:a3:0e:71:39:19:28:42:81:00:31:
d3:e2:bf:85:a2:84:1a:05:e4:7e:03:ba:8d:ad:49:d1:92:dd:
b9:44:b6:7c:5b:f1:3e:35:93:40:6e:00:5d:dc:a8:f7:9f:47:
ab:9a:ba:94:d8:17:2e:bf:5b:85:be:69:ae:c5:40:93:93:d6:
fb:9d:13:ec:c2:d8:51:6b:b6:04:dd:7c:c9:c9:0b:e4:aa:b0:
f6:e3:3d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:19:28 2025 by rpki-client