
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
File: Im9yidTjf-ziJgxk07y6esAxWnU.mft (raw, json)
Hash identifier: xV/mbutP7NNDIpKW+NpWqcMEmmXPdc7ojaKtE/QJG1o=
Subject key identifier: 3A:8E:9D:FA:68:96:E9:0E:9D:06:3A:40:F4:13:59:76:00:60:90:B1
Authority key identifier: 22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75
Certificate issuer: /CN=A91BC269/serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75
Certificate serial: 037B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
Manifest number: 0373
Signing time: Wed 05 Nov 2025 00:59:54 +0000
Manifest this update: Wed 05 Nov 2025 00:59:53 +0000
Manifest next update: Wed 12 Nov 2025 00:59:53 +0000
Files and hashes: 1: Im9yidTjf-ziJgxk07y6esAxWnU.crl (hash: TOcDm679WChaKXy0zNDAeZohYQy5nl5EB6xKSouh2f4=)
2: 16DDC0F4CFE811ECA193B36BC4F9AE02.roa (hash: Z0vQc/FiRt/D8hScnxTd8nBTWz7d3rs3scQ6DdSb1kk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl
rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:59:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 891 (0x37b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC269, serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75
Validity
Not Before: Nov 5 00:59:53 2025 GMT
Not After : Nov 12 00:59:53 2025 GMT
Subject: CN=690aa189-5481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c8:0b:4b:ec:cb:09:d6:1d:26:f5:5a:e7:55:
93:e7:f3:3e:64:96:10:ff:7b:ea:8e:ba:08:22:f3:
91:bb:b7:dd:7b:5e:87:9c:14:54:e7:f9:4d:9d:30:
90:76:90:f6:1e:5f:f0:f9:3b:dc:18:98:06:df:95:
fc:42:ca:7f:17:cd:9a:03:51:a3:11:97:49:bf:d2:
13:f7:55:f7:cc:89:d3:7a:70:e8:ba:65:28:76:b7:
b3:b6:a9:c2:c3:ec:c8:44:9e:b6:69:48:48:cc:f2:
1f:40:1b:e0:16:1f:9e:dc:27:3b:aa:ee:9a:cd:28:
ff:b3:e3:c4:40:a2:2a:d5:ad:b7:47:20:85:f1:53:
40:7c:60:0a:84:35:12:5b:a1:f6:6a:2d:f8:34:c3:
02:dd:69:58:dc:58:04:54:81:3c:97:bb:a3:04:e7:
6c:17:30:b6:e3:2f:eb:60:b5:fd:0c:eb:6b:e3:dd:
29:c3:1b:ce:0c:1a:6d:ac:c5:ef:19:9f:87:1c:86:
92:99:15:74:3c:18:43:de:1f:c2:75:83:f6:f2:d7:
82:c8:99:fc:70:f8:23:44:72:6b:0b:86:89:85:8e:
bc:5d:6b:b1:0b:c0:7c:c4:b5:c7:d5:67:db:8b:c5:
c9:c1:a8:17:0e:5b:ba:a0:25:76:82:b5:56:3b:e7:
73:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8E:9D:FA:68:96:E9:0E:9D:06:3A:40:F4:13:59:76:00:60:90:B1
X509v3 Authority Key Identifier:
keyid:22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:a9:1d:af:06:84:25:f5:76:57:41:fc:f1:7e:e4:44:3f:72:
fc:d7:02:02:27:27:0a:c1:f2:96:c8:0c:5b:ec:6a:cc:a7:7a:
e2:dd:7d:35:dc:da:6f:f7:6e:16:35:99:c8:04:1d:df:d3:44:
ac:78:7f:47:37:bf:0d:07:cd:d3:56:b3:02:d7:a5:c6:53:26:
c8:fd:3a:96:40:40:cd:6b:d9:ca:cd:d9:b1:09:69:5e:e2:ce:
a5:f0:7e:28:06:50:a6:09:57:20:e8:d6:bf:c8:ac:e7:d5:ba:
a6:72:40:56:89:f0:ab:5b:28:55:e5:11:24:3c:b0:89:8c:46:
bb:c5:0e:ed:10:68:e0:30:f8:68:a2:4f:74:e3:5a:d5:15:2a:
f0:5e:5c:ff:8b:e5:3a:51:17:27:de:3f:d9:38:35:c5:aa:65:
e8:8b:98:d9:4d:87:8c:c0:77:6f:da:90:39:03:8a:75:58:cb:
7b:3c:67:fd:30:f1:dc:fe:d8:49:2c:9f:b0:dd:81:bc:1a:06:
52:47:ca:73:f7:2c:86:fd:83:37:b9:e0:1d:1b:df:20:f5:fc:
e3:0a:c7:27:ae:66:16:f5:76:b6:f8:c6:18:41:aa:06:7e:2c:
3a:97:7a:1a:44:98:8d:85:59:f1:ab:0c:75:94:cd:c4:52:e2:
f2:c8:80:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:05:55 2025 by rpki-client