
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.mft
File: sjZrmQQ2twaLXyVculqgXp29v30.mft (raw, json)
Hash identifier: /bHzqAUatMTJMUx1Lomq6+Okadwtz4O3GQm0DY9FoHU=
Subject key identifier: A6:AC:33:29:E7:2F:FE:11:C1:B6:AE:37:FB:D2:32:55:43:C8:6D:69
Authority key identifier: B2:36:6B:99:04:36:B7:06:8B:5F:25:5C:BA:5A:A0:5E:9D:BD:BF:7D
Certificate issuer: /CN=A91C9327/serialNumber=B2366B990436B7068B5F255CBA5AA05E9DBDBF7D
Certificate serial: 02B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjZrmQQ2twaLXyVculqgXp29v30.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.mft
Manifest number: 02B0
Signing time: Mon 03 Nov 2025 01:27:14 +0000
Manifest this update: Mon 03 Nov 2025 01:27:14 +0000
Manifest next update: Mon 10 Nov 2025 01:27:14 +0000
Files and hashes: 1: sjZrmQQ2twaLXyVculqgXp29v30.crl (hash: bkBzqJHKZpy/5w+CjOKxUanFOgD7Ssz8RzZDpN31cOA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.crl
rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjZrmQQ2twaLXyVculqgXp29v30.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 01:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691 (0x2b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9327, serialNumber=B2366B990436B7068B5F255CBA5AA05E9DBDBF7D
Validity
Not Before: Nov 3 01:27:14 2025 GMT
Not After : Nov 10 01:27:14 2025 GMT
Subject: CN=690804f2-dfb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a8:c1:52:6d:48:31:44:0b:48:cb:9b:7a:af:
90:89:2b:54:3c:d6:06:46:64:ac:1c:23:c6:c5:96:
06:6f:45:f3:ce:c5:31:0c:6c:30:33:47:8d:43:9f:
45:ed:ab:12:d2:09:47:03:5f:77:b6:13:78:0f:08:
fd:4b:d8:20:ca:04:c0:fc:07:f0:fa:87:b5:c6:c7:
bc:d0:e8:4c:c5:67:c5:e9:ca:a1:ed:4c:46:a1:2f:
32:72:b3:57:b0:52:fe:fa:3e:bd:cc:0d:4a:06:57:
dd:a5:8b:43:9a:24:3a:21:93:40:b7:e5:f4:65:03:
db:94:68:dc:92:8b:51:8b:b0:c5:26:59:4c:ec:3d:
19:99:11:42:90:aa:14:cb:19:34:8b:65:c7:0c:24:
64:23:2a:36:95:2a:d1:cb:2b:a1:9c:e6:e8:28:5e:
6b:eb:c5:f9:43:45:68:84:ac:e1:03:df:4a:84:86:
5c:37:67:73:46:d3:f3:a0:88:60:35:6f:3f:98:e2:
ab:75:f3:36:0d:91:8c:d3:87:c7:c8:85:7e:2e:17:
ce:2d:96:b7:ce:05:12:24:4f:12:22:f2:f4:f7:e1:
e9:52:63:14:ca:75:80:9b:a8:f0:66:24:8f:92:a2:
15:06:e1:58:cc:1c:ea:70:2a:ab:41:9d:9b:29:b0:
d8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AC:33:29:E7:2F:FE:11:C1:B6:AE:37:FB:D2:32:55:43:C8:6D:69
X509v3 Authority Key Identifier:
keyid:B2:36:6B:99:04:36:B7:06:8B:5F:25:5C:BA:5A:A0:5E:9D:BD:BF:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjZrmQQ2twaLXyVculqgXp29v30.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:90:4d:9e:4d:32:8b:09:21:b7:b6:76:97:6c:25:da:65:dd:
df:94:44:c0:f9:7b:f5:35:c8:85:71:c4:e2:e3:d1:c3:8f:c9:
40:d9:99:7f:09:42:93:2b:b2:31:8f:6f:a7:8d:aa:d7:2b:23:
6e:25:38:c1:6c:dc:bd:a7:67:59:14:cf:bf:25:ee:74:40:eb:
19:5f:92:55:77:bd:e1:69:d9:9c:1d:78:7e:cb:5b:8c:33:00:
ee:c2:44:05:94:c3:c1:12:30:92:72:80:11:be:ba:d7:44:98:
63:7e:f4:55:d1:ea:da:0b:3b:d1:7c:36:23:4e:f0:21:73:46:
09:43:3e:4c:0e:14:75:22:ff:2d:11:51:be:b8:0e:d9:8c:7b:
b5:18:0d:2c:31:72:54:42:2d:bf:be:87:ba:3c:1b:76:7f:79:
81:3f:8e:3f:5a:b7:24:fe:a5:1f:88:3d:83:6a:c5:17:c3:a7:
6d:13:05:f0:22:28:cf:3d:51:2e:b0:39:b4:b9:e8:38:d2:2b:
67:3b:ad:13:bf:cc:62:89:4b:df:5e:72:9f:bf:8d:64:49:bc:
88:e5:e8:82:8b:fb:99:a5:e1:3c:43:85:d3:b5:00:3f:3b:c9:
4d:ce:2f:ea:f5:28:de:40:f1:58:a9:38:e4:ed:a6:c4:66:cf:
d7:c2:fc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:26 2025 by rpki-client