
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
File: E3PX27MxtT_PfCjcDfs-n9p-9JA.mft (raw, json)
Hash identifier: Y0u4rLlcS+ZfljDUZQe5QQSlg/VuR9nfMRHr+dAVPgU=
Subject key identifier: 11:3E:51:05:CE:D8:F0:31:FE:09:6E:AE:7F:CD:47:AE:C8:E8:B0:A7
Authority key identifier: 13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90
Certificate issuer: /CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490
Certificate serial: 0510
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
Manifest number: 0507
Signing time: Mon 27 Oct 2025 00:39:05 +0000
Manifest this update: Mon 27 Oct 2025 00:39:04 +0000
Manifest next update: Mon 03 Nov 2025 00:39:04 +0000
Files and hashes: 1: E3PX27MxtT_PfCjcDfs-n9p-9JA.crl (hash: yaHOMvD5gmRmibEs4c2zvAXZtutB1NdCvRcgstKsdYw=)
2: 308C0A50A13C11F08C94C134C4F9AE02.roa (hash: MLNLxFV3l3v2qlx4z+7rlnxH45oQLQQp7Zd4nT4lSgg=)
3: E7676A04A13B11F0B587F733C4F9AE02.roa (hash: oawqQy1Pv+77G3a1CKrM3zleGZuJqEu++rzrzzXvl0g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl
rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 00:39:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1296 (0x510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9288, serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490
Validity
Not Before: Oct 27 00:39:04 2025 GMT
Not After : Nov 3 00:39:04 2025 GMT
Subject: CN=68febf28-3a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ae:13:95:6e:1d:0c:5e:2e:ae:6e:f5:b9:ef:
16:82:3c:3c:12:ac:61:4f:f4:7b:b7:52:04:d6:40:
fd:ec:e3:6a:8f:c6:eb:d2:08:e7:29:2e:7b:7d:3d:
af:6f:5a:ed:14:b3:a3:e4:fd:84:9e:0f:78:1f:06:
5b:90:d0:76:96:0f:48:cf:be:fc:43:47:70:cf:14:
e1:a4:07:a8:8e:32:4f:39:47:cb:d4:32:62:65:c2:
6f:48:9c:82:ec:09:2f:d3:38:e2:50:4a:7f:44:c5:
e1:80:5c:ff:96:43:8c:15:58:02:d6:05:2b:3d:c2:
b1:11:96:5f:32:94:e3:34:03:ad:97:aa:d7:f7:c5:
87:25:0b:da:db:25:e3:59:b9:16:0a:bd:74:f9:0d:
85:07:0a:8a:d5:5d:c4:1f:8e:6c:a4:bb:b2:92:2b:
a2:8e:a1:90:13:3c:b8:09:d0:fc:05:31:9d:91:be:
31:42:8a:8c:ad:69:60:51:2b:d3:1e:ba:f8:07:f9:
ba:27:bb:c9:95:a4:0a:74:35:1b:3e:10:fa:72:3c:
5c:c8:c8:78:f2:b4:40:13:ca:18:ca:b6:5e:33:64:
d9:02:d9:71:76:0a:de:6b:32:43:fe:df:38:27:d7:
da:fc:c1:de:88:45:7b:cd:1b:cc:98:f9:28:8d:1c:
06:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3E:51:05:CE:D8:F0:31:FE:09:6E:AE:7F:CD:47:AE:C8:E8:B0:A7
X509v3 Authority Key Identifier:
keyid:13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:de:38:95:2f:d8:88:3d:1f:78:81:9b:97:e0:8c:9a:dc:c2:
b6:ce:20:5f:0a:63:10:4f:a0:8e:f4:f4:81:0d:44:84:d9:97:
cf:91:3e:3a:f8:bd:20:c9:d4:a8:6c:40:b4:5b:99:c7:4a:3c:
dc:92:4a:32:f7:09:7f:74:b5:59:1f:ef:9e:ad:c6:87:0e:6b:
45:bd:61:23:4b:85:97:7f:58:9d:2f:ad:35:2b:57:c3:16:73:
ce:d7:1f:5e:63:76:d9:d2:c6:fc:9f:61:bd:14:e1:80:70:98:
8b:cc:69:2b:83:3f:7f:b5:0c:63:fe:18:4c:ac:5b:86:01:aa:
31:8e:c5:0e:85:33:8a:b6:24:69:0c:23:31:fd:a9:22:21:cb:
76:3e:56:74:1f:6c:45:8f:32:81:07:69:0c:3e:38:34:92:82:
5d:19:48:06:54:7b:bb:bc:6a:2f:7f:97:92:67:2b:1a:f9:6c:
90:a3:00:c0:7e:f8:f0:a1:08:5f:45:60:17:1c:bf:ea:59:e3:
44:a7:e8:de:bb:9e:b5:8d:50:4f:80:12:fc:93:24:84:78:05:
9c:6e:00:da:3f:b9:d5:3e:39:17:45:31:1d:a2:fa:6c:18:3d:
88:3f:05:d8:05:ff:0c:e4:70:15:d7:2b:ea:4d:38:90:a5:9e:
7b:d4:0a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 00:19:54 2025 by rpki-client