
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
File: J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft (raw, json)
Hash identifier: 7mc1Ju6w6uLjflWx2oCFlXjir2iBJ7WtPzGVTH53v8k=
Subject key identifier: 95:F8:6E:73:1E:3A:54:52:99:51:69:E0:27:84:43:94:AB:B1:D2:97
Authority key identifier: 27:C8:7B:5E:30:B0:3C:2C:15:0A:22:E6:C4:2A:5E:06:99:C9:0B:FC
Certificate issuer: /CN=A91C2610/serialNumber=27C87B5E30B03C2C150A22E6C42A5E0699C90BFC
Certificate serial: B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8h7XjCwPCwVCiLmxCpeBpnJC_w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
Manifest number: B8
Signing time: Mon 03 Nov 2025 06:01:19 +0000
Manifest this update: Mon 03 Nov 2025 06:01:18 +0000
Manifest next update: Mon 10 Nov 2025 06:01:18 +0000
Files and hashes: 1: J8h7XjCwPCwVCiLmxCpeBpnJC_w.crl (hash: Kpkuw7L6nCTPq59p8r+yJhTrKyu92ASFGUyu4GvBUYw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.crl
rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8h7XjCwPCwVCiLmxCpeBpnJC_w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2610, serialNumber=27C87B5E30B03C2C150A22E6C42A5E0699C90BFC
Validity
Not Before: Nov 3 06:01:18 2025 GMT
Not After : Nov 10 06:01:18 2025 GMT
Subject: CN=6908452f-3c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:7f:2b:97:62:0a:bf:77:e6:73:56:e0:f4:
c3:78:01:08:08:c3:82:f5:73:ab:c6:e4:b0:8f:d4:
fc:3c:fe:df:d2:5e:5d:f9:f7:64:0e:f4:93:03:65:
34:98:af:fc:56:52:d3:06:20:f4:c1:71:ce:3f:73:
3c:3c:e0:bf:c6:ab:f7:3d:e7:ac:fa:98:50:62:ef:
f9:b6:80:13:69:3e:aa:76:a8:f6:d3:63:c8:1a:1b:
cb:10:29:17:7d:7a:4c:c5:f1:d7:c2:c9:07:f2:9d:
73:15:19:c2:31:26:c3:92:c4:77:28:67:e5:84:6a:
a5:8d:51:da:a5:df:b2:5d:7e:4b:a0:a6:d0:26:59:
05:5a:84:43:7c:18:17:59:a9:7e:20:1a:94:fc:24:
cf:6f:ca:13:0b:bf:ef:0f:9c:c3:72:44:76:19:cd:
1b:a7:bc:4f:bd:54:49:9f:5f:2e:e4:9b:fd:8e:37:
b2:7a:8a:3f:4d:c1:d5:88:2b:80:27:5d:14:16:20:
d4:b0:1d:d6:73:9e:eb:d1:d8:9e:7c:23:c7:32:cd:
4a:25:4d:58:b6:49:c3:0a:27:a4:46:90:9f:6a:19:
14:99:34:7f:4c:1d:16:ba:dd:df:28:9c:87:9a:f8:
d5:99:24:8c:0f:c3:a9:c7:2e:e4:98:7f:df:bc:21:
bd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F8:6E:73:1E:3A:54:52:99:51:69:E0:27:84:43:94:AB:B1:D2:97
X509v3 Authority Key Identifier:
keyid:27:C8:7B:5E:30:B0:3C:2C:15:0A:22:E6:C4:2A:5E:06:99:C9:0B:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8h7XjCwPCwVCiLmxCpeBpnJC_w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2610/BFD3E92EA1E411EFB98B0C4EC4F9AE02/J8h7XjCwPCwVCiLmxCpeBpnJC_w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b2:8d:5f:33:eb:c8:2d:90:aa:d4:19:4f:e4:ca:06:72:3e:
f0:95:71:98:6a:fd:fa:44:a3:98:76:c8:bd:a2:cb:c9:55:16:
ce:b5:98:87:29:97:17:9e:bc:91:0b:20:d7:77:60:aa:4b:ef:
24:78:ba:c1:e8:4f:6d:fd:83:18:2b:01:2d:ff:05:a9:16:44:
40:4a:56:60:37:80:cb:82:cf:bc:61:ba:63:44:ae:08:a7:25:
84:c0:8f:71:69:00:e5:bb:c6:4f:ce:4c:75:e2:75:c4:29:61:
40:43:df:84:b7:30:d6:76:17:92:47:1b:e0:6a:d1:d0:cb:17:
67:57:ed:54:9b:1d:e0:cd:bd:16:90:4a:d1:4a:53:23:c7:c0:
49:6f:fa:0e:08:86:a3:c2:24:59:b1:42:23:a0:d2:12:80:5a:
b7:a2:0a:2c:7b:50:98:d3:ad:2e:c8:9c:e4:4b:df:bd:0f:3f:
55:a5:7c:c4:cb:4a:93:55:55:a8:1d:c8:e9:0a:e9:2e:78:d7:
83:41:ab:dd:29:91:26:62:44:43:32:e8:e9:f7:5e:cc:98:f7:
dd:70:89:ba:1c:2a:e6:33:13:75:3a:59:30:33:43:3d:f7:b8:
b4:bf:db:05:9b:d9:5c:30:1c:1a:d5:81:cd:eb:8a:31:5f:45:
d5:79:5f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:10:26 2025 by rpki-client