
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
File: rJMLYl2DnFaNqBmeOP-dt-N4M70.mft (raw, json)
Hash identifier: 5UwmDKAO4NwzwpnRQYmdDiy9I9uuOu6ncpN43rppvnM=
Subject key identifier: 8D:E3:4D:52:6B:A7:2A:7F:F6:0D:F7:A7:E2:AA:28:8B:45:D2:A8:F0
Authority key identifier: AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD
Certificate issuer: /CN=A91B7948/serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD
Certificate serial: FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
Manifest number: FB
Signing time: Mon 03 Nov 2025 05:07:33 +0000
Manifest this update: Mon 03 Nov 2025 05:07:33 +0000
Manifest next update: Mon 10 Nov 2025 05:07:33 +0000
Files and hashes: 1: rJMLYl2DnFaNqBmeOP-dt-N4M70.crl (hash: mpLHJ89Zg8zoX9yHV6A2sQ5qMgKAWxh1ZzZrpclJ4K0=)
2: 7152252C37D111EF99A8011CC4F9AE02.roa (hash: qhoMwiHCkLg+1nceUxGKr0G4jwDK8ySCQp1HaHpIIeY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl
rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 05:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253 (0xfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7948, serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD
Validity
Not Before: Nov 3 05:07:33 2025 GMT
Not After : Nov 10 05:07:33 2025 GMT
Subject: CN=69083895-c1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e8:dd:4d:41:f5:85:99:9b:b9:01:3f:29:c5:
85:95:2c:c0:ca:bc:63:a2:a3:6d:b1:59:4e:2a:aa:
f1:cf:4e:ba:db:08:ba:90:51:a4:e1:2a:9c:e2:41:
4c:0d:17:fe:27:1e:db:73:5c:e2:90:16:0d:f0:3d:
cc:69:c9:e0:6d:7c:28:01:4d:7e:17:c4:64:50:13:
6d:4c:5e:24:37:6a:05:82:57:9b:fb:e2:5a:92:17:
a4:d1:fd:7a:bb:9b:86:95:6f:e0:17:91:f3:ce:23:
8e:a8:a1:71:83:a1:65:6f:b1:0d:94:c9:1b:05:ca:
ce:27:ed:5b:84:68:71:64:ce:fa:fd:40:24:ff:c7:
e6:9f:f0:f0:aa:0e:aa:05:fa:a2:52:f5:f1:d5:87:
33:ec:f7:0e:89:5b:a7:1e:a9:78:6a:6a:ee:7d:02:
90:30:c6:2c:04:ce:08:86:2d:16:54:e6:91:4a:2f:
0d:2f:45:7a:66:ae:0b:47:d2:54:91:39:49:cd:3d:
1f:22:e0:7d:5e:1f:d0:09:88:de:06:07:2a:24:00:
c9:38:49:10:84:73:03:a2:b2:fa:5f:df:43:cf:aa:
c2:c5:21:5b:33:b5:66:09:75:58:6e:93:da:51:64:
d9:c0:50:99:1f:58:63:2b:87:e5:1c:a5:28:f3:22:
3e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E3:4D:52:6B:A7:2A:7F:F6:0D:F7:A7:E2:AA:28:8B:45:D2:A8:F0
X509v3 Authority Key Identifier:
keyid:AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a8:6d:1f:a3:83:13:ca:cf:bb:8d:49:52:e7:6e:50:7b:0f:
82:02:f4:5b:45:0e:fe:13:84:f0:e9:32:7d:96:db:68:73:22:
a8:8a:f4:b5:de:75:f2:df:53:a0:36:1b:d3:0b:21:72:90:f9:
bd:99:31:2d:b4:f2:de:1f:57:9a:07:87:1b:ae:81:d2:37:1e:
5c:b5:cf:f4:14:3e:5c:89:13:ac:18:b7:ad:dc:c2:8a:ea:ff:
2d:60:93:aa:28:83:2b:7d:ca:cc:2f:7e:d4:64:d8:c2:00:64:
55:6b:d5:26:a1:26:50:11:3a:63:0f:20:07:d0:ee:d0:5d:d1:
36:d5:cd:d9:0a:e5:81:a9:8d:c1:d5:38:f2:85:ae:4f:8b:f2:
91:92:ce:0c:78:91:31:03:82:e4:2f:15:b6:95:94:45:79:43:
4b:e7:42:d9:59:86:82:2a:c9:38:89:8f:61:d3:ac:51:da:38:
86:14:bf:7a:d5:05:b2:9c:fd:e4:ef:c3:e1:4c:44:1b:9c:bb:
62:60:b8:c4:9f:71:1e:a1:2b:42:43:ac:cd:35:4f:79:7e:9e:
1e:91:fe:09:96:41:51:4a:70:78:c0:64:28:0c:e8:c1:0a:fc:
72:6f:e2:c3:6f:c8:e7:77:99:88:d6:04:b9:30:91:60:22:cf:
64:b0:01:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:22 2025 by rpki-client