
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft
File: RmieTZ937kzGyKiOZ57P7zdS9Dc.mft (raw, json)
Hash identifier: jgboupn9oqPBIzB19gLmeus2P1xw+849EKuiskJUgYI=
Subject key identifier: 9E:4B:52:F4:8C:AD:9B:4F:9F:05:45:44:94:90:23:EE:24:A9:98:B8
Authority key identifier: 46:68:9E:4D:9F:77:EE:4C:C6:C8:A8:8E:67:9E:CF:EF:37:52:F4:37
Certificate issuer: /CN=A91AC4F3/serialNumber=46689E4D9F77EE4CC6C8A88E679ECFEF3752F437
Certificate serial: 0C66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft
Manifest number: 0C65
Signing time: Tue 04 Nov 2025 18:37:18 +0000
Manifest this update: Tue 04 Nov 2025 18:37:18 +0000
Manifest next update: Tue 11 Nov 2025 18:37:18 +0000
Files and hashes: 1: RmieTZ937kzGyKiOZ57P7zdS9Dc.crl (hash: gXX8qJ1uW7qIndjRLsEOaBiPY4J6phNa4/rIP4zyQ5w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.crl
rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 18:37:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3174 (0xc66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC4F3, serialNumber=46689E4D9F77EE4CC6C8A88E679ECFEF3752F437
Validity
Not Before: Nov 4 18:37:18 2025 GMT
Not After : Nov 11 18:37:18 2025 GMT
Subject: CN=690a47de-b388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6e:4a:8f:ac:cb:08:23:66:c8:db:87:a5:1e:
b1:b7:2d:7a:cf:82:b6:51:7c:a2:b9:9b:24:15:ad:
3c:f1:a0:c7:5f:cd:ae:ad:9c:ce:c1:82:aa:a7:a6:
4b:d3:c9:4e:21:d7:07:54:7c:d8:1f:9c:98:dc:5d:
12:40:2b:50:46:b7:a7:9a:38:6c:4b:13:1e:31:c7:
86:37:a2:34:17:3d:5f:84:cc:30:c7:59:23:78:6a:
04:1b:ec:1d:c7:73:f3:95:2d:7c:3c:50:3d:d4:91:
b0:79:d6:d4:f4:5a:13:18:96:a3:8b:76:da:d5:ff:
81:e5:6e:3f:1a:28:cb:3f:d8:f5:64:75:4d:dc:87:
18:5c:ba:72:81:77:7a:03:0f:e6:29:88:96:66:9c:
93:70:1d:a2:36:25:af:39:45:6a:bc:0f:e2:37:bc:
98:81:ed:81:cb:67:1e:6c:58:ed:55:55:05:9e:9c:
b8:10:33:e1:86:e7:ac:d0:e5:9c:a5:58:bf:41:c5:
bf:59:96:61:9d:42:a4:c4:19:d9:4d:46:6c:12:b2:
ba:93:31:bc:28:1e:9d:f4:dc:0c:32:88:f3:28:f2:
96:94:05:fd:bf:93:6e:71:f4:18:de:78:ef:ee:5f:
8b:5f:e9:4f:48:e2:23:5b:cb:a1:78:97:34:46:bc:
5a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4B:52:F4:8C:AD:9B:4F:9F:05:45:44:94:90:23:EE:24:A9:98:B8
X509v3 Authority Key Identifier:
keyid:46:68:9E:4D:9F:77:EE:4C:C6:C8:A8:8E:67:9E:CF:EF:37:52:F4:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b4:13:83:14:cb:4f:e9:a7:d1:3c:ac:c7:56:0f:ee:f9:eb:
8d:d4:dc:36:cc:99:c8:6c:b7:59:59:85:f7:10:2a:79:1c:7c:
43:ff:f1:44:13:f1:77:e7:b7:8b:50:b0:86:4b:2c:5f:54:a0:
d7:43:0e:cc:6f:61:0e:fd:87:42:4d:2f:69:b3:ae:40:57:e0:
57:6d:4a:c1:d3:88:83:6f:77:b4:7a:45:54:87:f2:99:fb:f8:
79:2e:28:b0:4a:67:08:26:b6:4e:2d:65:4f:88:03:a4:cc:0a:
2a:fc:d1:f5:e2:7b:15:b6:c8:27:9a:34:3a:9e:db:4e:b4:ce:
a7:ec:a4:0e:81:e9:f7:b3:6d:c2:4c:4f:5b:30:87:83:e0:74:
e6:b3:99:70:29:30:82:bd:a1:a7:8a:6a:2d:9c:5d:7b:07:30:
04:11:19:05:77:80:bc:e4:0a:91:b7:3e:41:af:c0:31:bd:74:
bb:04:88:14:7b:94:b7:6a:21:f7:0e:fd:fa:de:3f:d0:e1:03:
20:8b:e3:06:14:29:1a:9b:ca:f1:bc:a8:e5:c1:74:76:54:d2:
86:9c:d7:e0:fa:59:ca:2b:1c:0c:67:c4:6d:bb:97:e3:26:9e:
eb:11:e9:8c:77:bf:44:f4:2a:09:88:0b:36:57:11:da:cf:3d:
cb:f7:f0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:02:21 2025 by rpki-client