
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft
File: rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft (raw, json)
Hash identifier: 1vNsTflp+bXySqF21U0JSjSfnPDdwthVWhmA/nLZ8BU=
Subject key identifier: 2B:94:25:C8:01:A9:F4:2F:49:25:5D:52:19:65:46:71:11:4B:83:75
Authority key identifier: AC:9F:95:B7:D4:78:E9:82:85:CF:44:BF:C5:7D:81:59:55:34:56:6F
Certificate issuer: /CN=A91BFD87/serialNumber=AC9F95B7D478E98285CF44BFC57D81595534566F
Certificate serial: 07AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft
Manifest number: 07A3
Signing time: Sun 02 Nov 2025 21:24:16 +0000
Manifest this update: Sun 02 Nov 2025 21:24:16 +0000
Manifest next update: Sun 09 Nov 2025 21:24:16 +0000
Files and hashes: 1: rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.crl (hash: Q2NxR8K5FhfD+9Losf7QyGKy9EHRle2F2NQi9z1pnSE=)
2: 304D6C7E24C211EBAC07F90DC4F9AE02.roa (hash: RopP9bCjnaxwbQMfD3uls170c24lrepvVAUEUJQ1Ffk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.crl
rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:24:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1962 (0x7aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFD87, serialNumber=AC9F95B7D478E98285CF44BFC57D81595534566F
Validity
Not Before: Nov 2 21:24:16 2025 GMT
Not After : Nov 9 21:24:16 2025 GMT
Subject: CN=6907cc00-53db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:34:78:83:69:3a:bd:1d:96:43:9f:33:25:65:
28:37:8b:41:8d:bf:bf:93:5f:58:9f:4e:9b:a7:1a:
a4:4c:14:fc:59:fb:cd:89:a7:13:fa:17:19:95:b2:
4b:70:66:e7:80:38:50:0d:25:49:6a:c0:bc:42:4a:
0f:72:1f:74:53:f7:7f:d9:16:27:7b:dc:d6:bf:a5:
2f:36:79:0f:a7:c0:26:92:d7:0b:0c:59:03:f1:71:
4a:a8:7c:2d:83:b6:3c:01:97:05:e6:16:ff:d7:45:
c8:35:b1:68:6a:96:18:cf:7f:14:37:21:98:6f:d5:
8c:7e:75:69:c5:dd:24:97:d5:2f:30:48:4b:fd:bc:
86:bd:7e:17:d5:81:33:bc:e4:09:e0:ae:42:5f:e2:
66:e1:ab:23:f7:88:e0:c9:9a:0b:2c:29:ba:da:75:
ce:b4:55:9b:17:5a:fe:8d:39:bf:88:07:a7:4d:67:
30:eb:8e:48:36:95:ed:4d:a9:b9:57:ba:d8:8e:18:
73:1e:bd:8c:f0:1c:ce:e7:2c:c5:a1:a2:5b:ce:be:
24:f6:b4:e2:9b:f2:45:e7:a5:c7:6c:e7:63:31:b9:
54:d7:0a:0b:2d:a9:8a:6b:ab:b4:21:22:4b:a8:25:
de:8f:d6:3d:f2:1e:0d:4c:34:59:85:17:fe:ff:a5:
dd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:94:25:C8:01:A9:F4:2F:49:25:5D:52:19:65:46:71:11:4B:83:75
X509v3 Authority Key Identifier:
keyid:AC:9F:95:B7:D4:78:E9:82:85:CF:44:BF:C5:7D:81:59:55:34:56:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0e:3f:29:43:2d:24:0f:81:59:a3:dd:74:c7:0b:97:0e:89:
aa:84:5f:c7:63:91:21:fb:c1:61:5c:21:46:19:78:1e:40:25:
74:e7:27:17:2a:dc:1e:0a:ad:ce:d0:2c:e1:0a:f7:e7:69:56:
f7:8b:dd:cd:c0:d9:39:d1:c3:7b:0d:e0:14:74:62:df:03:ca:
37:f4:50:59:5c:ed:0c:14:47:87:1c:bf:b5:7c:94:13:af:6a:
87:8a:84:67:3d:11:73:5f:f1:ce:01:5b:c8:c7:ec:0e:79:90:
81:83:dd:1d:58:b4:4c:b7:5f:fd:e1:c7:b0:e6:28:fd:29:f3:
29:59:8d:49:a3:5d:bd:a6:ef:ae:06:48:13:13:ad:2d:c2:19:
7a:00:e1:48:10:68:1e:90:7f:52:6e:c2:9a:d6:4d:d4:31:b0:
e0:52:e8:c5:11:cf:34:7c:79:71:4a:bb:19:41:e1:17:1f:e8:
6f:68:99:d4:a1:5a:00:f5:bc:74:71:d2:c1:5c:c1:60:66:39:
01:2b:9b:da:d0:a9:90:53:31:80:4c:2b:ac:f6:5a:17:6c:ef:
14:e8:21:14:9d:c0:db:bd:21:4f:68:34:3b:6c:9c:ac:b4:d2:
d6:96:cf:98:9a:40:04:e7:a7:5f:2b:b1:8e:80:dc:1d:50:3e:
a1:03:6d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:13:33 2025 by rpki-client