
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft
File: je6uhW6V886s4RLAoeqXukWlekQ.mft (raw, json)
Hash identifier: CVBB176q1m8lrZuuZWo4WSCFaTSafgv0vs2nhAnJPno=
Subject key identifier: BD:F9:FC:65:EA:3E:EA:5B:7A:80:E3:51:0F:44:8F:73:C4:4E:74:0C
Authority key identifier: 8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44
Certificate issuer: /CN=A91C39D1/serialNumber=8DEEAE856E95F3CEACE112C0A1EA97BA45A57A44
Certificate serial: 0667
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft
Manifest number: 0660
Signing time: Sun 02 Nov 2025 22:36:38 +0000
Manifest this update: Sun 02 Nov 2025 22:36:38 +0000
Manifest next update: Sun 09 Nov 2025 22:36:38 +0000
Files and hashes: 1: je6uhW6V886s4RLAoeqXukWlekQ.crl (hash: 3/9VfDFpa3da4xslJeWDUupnGOvQX7QJHahI1bhsDCw=)
2: A26500A2A27F11EBBE87837FC4F9AE02.roa (hash: o6IdzF2JW4pdJz3buu3YPOk5TMt4Nbg8S9u/EOJTdU0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.crl
rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 22:36:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1639 (0x667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C39D1, serialNumber=8DEEAE856E95F3CEACE112C0A1EA97BA45A57A44
Validity
Not Before: Nov 2 22:36:38 2025 GMT
Not After : Nov 9 22:36:38 2025 GMT
Subject: CN=6907dcf6-28d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f0:13:03:da:2e:f7:73:ca:2c:79:87:e9:c7:
eb:9e:37:3a:27:48:d4:6d:64:6b:ba:ad:a6:5f:00:
31:fe:98:3b:9d:45:d9:a1:cc:b9:d6:a7:81:36:ef:
f7:e5:ba:34:35:e6:b0:e0:fd:fd:c6:8b:bb:a1:e8:
37:45:30:9b:38:23:5d:3a:8a:c8:4b:f2:f6:02:22:
06:cc:50:b0:8f:7f:44:47:0a:70:25:e1:ef:fa:fe:
6d:c2:31:67:68:b2:74:2b:44:9e:a3:33:72:4a:97:
0d:19:17:cd:a1:14:89:88:3a:67:bf:1a:22:91:5f:
fd:cb:a0:1f:ea:04:b1:65:a5:a8:14:9c:b0:a3:96:
5b:be:b1:0f:d9:14:f4:fc:f6:51:f9:06:4f:11:9a:
85:ba:85:05:27:13:66:06:8d:c5:96:3e:47:06:dc:
95:25:6d:c4:88:4c:2e:18:f3:0a:05:6b:73:42:86:
3f:e8:44:82:39:ad:9a:d1:04:d4:8d:9f:86:ce:52:
be:43:1b:4e:98:89:71:bf:1e:3c:7b:13:4b:1e:4c:
09:21:cd:bb:af:cf:cf:41:92:55:d8:8e:61:3a:5a:
43:df:92:cf:cc:30:d8:bc:bf:60:21:62:5b:89:55:
4d:d6:fb:1b:ff:b9:a1:39:a2:dc:ba:26:17:6f:7f:
5b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F9:FC:65:EA:3E:EA:5B:7A:80:E3:51:0F:44:8F:73:C4:4E:74:0C
X509v3 Authority Key Identifier:
keyid:8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:70:93:dd:3f:62:22:a8:8b:86:7e:24:9d:2f:1b:52:b2:82:
d2:8e:c1:a7:ae:39:96:74:ae:4e:34:47:7f:27:3f:8a:6c:89:
65:57:73:da:ca:f6:e5:ec:d2:1d:30:c7:af:09:04:81:45:1e:
b9:7e:a7:7d:a7:a8:86:72:44:2e:c5:79:18:c1:cd:9a:84:40:
04:d2:74:4d:7f:60:b7:48:b0:c8:70:20:79:d0:ea:04:45:73:
82:3d:a5:ad:41:9c:53:d5:49:f7:1d:72:ac:3a:20:3e:eb:29:
2c:e2:fd:81:30:e4:91:cb:66:e1:bc:0c:15:15:89:19:38:44:
36:f8:69:ec:df:58:ac:91:f5:74:19:d7:1c:ba:5c:42:19:d1:
dc:d4:a7:60:82:4f:ca:f2:f0:7b:2f:55:bb:e5:24:af:dc:d3:
61:cd:8c:a9:2d:1d:0f:0c:15:ab:b7:c2:19:63:fd:3e:43:7d:
fe:85:79:e5:6b:ba:bc:06:7f:44:ad:27:19:01:44:5a:ce:06:
5f:75:77:44:d8:7a:03:19:26:02:bd:7e:8b:bc:bf:eb:ea:c4:
32:b3:40:89:d6:df:b7:31:fb:3b:8e:08:8e:57:2a:d5:7e:c1:
3c:8d:51:1f:38:17:c5:23:ac:94:c0:0a:89:53:72:07:83:37:
9c:a0:b0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 12:17:01 2025 by rpki-client