
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
File: djSthmVu_mxF5O-Zj5S2l6w5vvE.mft (raw, json)
Hash identifier: r2x39hXXwhNB9Q8IRlZu2uWHrzWGEOsKvGf4Kf02cec=
Subject key identifier: A3:80:5A:49:DE:51:6A:41:77:4F:F5:6F:58:06:97:E1:52:58:09:61
Authority key identifier: 76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1
Certificate issuer: /CN=A91B23D9/serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1
Certificate serial: A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
Manifest number: 9E
Signing time: Wed 05 Nov 2025 06:31:18 +0000
Manifest this update: Wed 05 Nov 2025 06:31:18 +0000
Manifest next update: Wed 12 Nov 2025 06:31:18 +0000
Files and hashes: 1: djSthmVu_mxF5O-Zj5S2l6w5vvE.crl (hash: Grto3aDQxjWKRfzGT0q7qHnaaJDFqnmStifcMj/BfLA=)
2: 5FF7DA8AC9DD11EF9A19CE57C4F9AE02.roa (hash: +gnNwknF2udgbeSCQKAvlJ+Kl8XnvhGtCbKQkcxQ+I8=)
3: 7BC585BEC9DD11EF98B1E263C4F9AE02.roa (hash: ZZi0Gn/OMvF3e89O2m6QByhZ3253TVeiYiuccUZGQj0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl
rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B23D9, serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1
Validity
Not Before: Nov 5 06:31:18 2025 GMT
Not After : Nov 12 06:31:18 2025 GMT
Subject: CN=690aef36-19fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:81:42:54:78:73:e5:50:66:f8:bb:00:1e:35:
94:ae:51:87:99:0b:4d:24:54:bb:a8:35:b7:c1:77:
62:a0:43:9d:94:33:38:f0:da:60:13:44:89:ca:a3:
3d:45:bb:86:4d:c9:56:51:a5:69:f0:9c:c8:3d:8d:
0e:c7:24:5f:5c:46:0a:6c:8b:b8:d3:8b:db:01:57:
84:09:35:6d:bb:ca:c0:d5:10:a5:b3:78:b9:21:39:
7a:65:e6:4a:8b:90:5d:23:03:5d:9f:ca:42:85:87:
e8:8a:28:3e:53:50:96:6b:f1:9f:60:af:47:5a:fa:
1e:12:79:88:c8:98:68:9a:6b:56:4a:0d:4b:d7:85:
47:b9:03:b2:a6:21:9a:fe:3b:98:ed:7f:d8:d2:3b:
0a:69:1a:db:5c:ac:f3:8c:c2:ea:49:a2:0e:0c:71:
24:0d:45:a4:fe:02:23:20:9e:53:01:70:29:45:13:
ad:ae:68:76:4c:f4:49:df:8a:35:65:38:dc:9a:72:
50:24:51:b7:46:fc:e1:ee:35:f1:41:d9:e3:67:7d:
67:18:a3:52:5c:78:d6:82:90:4d:c2:26:46:28:77:
c7:3b:82:91:a3:ba:e3:ad:8d:6c:ed:b3:4d:44:99:
c0:49:cd:7f:02:6e:d6:b4:b1:bd:d1:25:0b:a3:3f:
32:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:80:5A:49:DE:51:6A:41:77:4F:F5:6F:58:06:97:E1:52:58:09:61
X509v3 Authority Key Identifier:
keyid:76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
da:41:d8:14:84:e0:64:1e:75:00:d0:6c:80:61:63:5d:35:59:
db:f7:ec:60:95:2a:22:bf:55:d8:15:3c:83:ca:32:b6:89:f6:
8b:8f:5c:75:e5:22:e4:98:3a:5b:fb:be:d2:01:72:5f:fc:e7:
10:4d:9c:f1:52:73:42:7b:ec:ed:7d:2d:45:7d:f2:de:06:f9:
65:8a:1a:c8:f0:b2:0e:ab:c9:03:e7:21:1e:72:26:a0:5f:57:
0c:02:e2:ac:66:d7:84:85:59:00:3d:27:2e:ec:89:94:5e:a7:
88:5a:0c:4a:03:90:1b:31:ba:57:18:01:7b:b5:23:5b:8f:81:
ae:0f:01:c8:eb:10:4f:c8:07:0b:d4:16:ea:42:c1:7f:65:fe:
0d:25:79:7b:b7:14:bc:92:8c:f9:7b:1f:c7:3c:8a:5c:54:04:
b3:59:09:a0:57:20:f3:ae:b2:17:63:43:5a:e0:04:91:86:da:
8d:77:76:91:cc:ef:78:93:89:d5:a6:3b:d4:14:0d:a8:ba:e1:
6a:f6:66:f9:bf:e3:86:0e:db:96:85:f0:2c:69:cc:0d:8a:4b:
7f:ee:8c:34:50:ed:32:b9:e6:fc:82:52:9a:2e:ad:c9:ad:82:
34:8b:c1:74:69:99:53:aa:01:9f:a5:b9:fb:d7:08:b1:60:da:
34:fa:c1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:32:34 2025 by rpki-client