
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft
File: J6IiDxq_zcps_VIjbsEKERKog0U.mft (raw, json)
Hash identifier: u4Dhee7geqcPkncumThRwRLICrpq608tDdxGwdUhZ2U=
Subject key identifier: 58:F0:05:FE:84:7C:6A:4D:91:D7:CB:EC:EB:E6:E2:37:01:C6:A1:30
Authority key identifier: 27:A2:22:0F:1A:BF:CD:CA:6C:FD:52:23:6E:C1:0A:11:12:A8:83:45
Certificate issuer: /CN=A91CC7EA/serialNumber=27A2220F1ABFCDCA6CFD52236EC10A1112A88345
Certificate serial: 0155
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft
Manifest number: 0152
Signing time: Wed 05 Nov 2025 04:20:43 +0000
Manifest this update: Wed 05 Nov 2025 04:20:43 +0000
Manifest next update: Wed 12 Nov 2025 04:20:43 +0000
Files and hashes: 1: J6IiDxq_zcps_VIjbsEKERKog0U.crl (hash: O31unXQX0IgEcX/AXHiNNBnuxtn/G2bR5YiS4mAUabM=)
2: 6734E4C4B57411EEBCB6B977C4F9AE02.roa (hash: FA7x6xVF2Cw2uJbqOHPR0PvfekjSEl4pesKDhFGadGE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.crl
rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC7EA, serialNumber=27A2220F1ABFCDCA6CFD52236EC10A1112A88345
Validity
Not Before: Nov 5 04:20:43 2025 GMT
Not After : Nov 12 04:20:43 2025 GMT
Subject: CN=690ad09b-75de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ca:e9:1e:7a:e1:4e:d4:1e:b6:76:3e:08:f7:
8d:67:78:d0:1d:94:26:1b:46:6f:8a:0f:8c:2c:6c:
5b:36:d7:c2:61:0e:12:8e:35:23:eb:0f:86:97:c2:
ee:6c:13:e3:38:11:d1:b7:84:99:90:27:f5:ad:9e:
ec:69:50:a8:70:c7:a0:0d:fa:72:7b:67:b0:08:32:
92:80:76:f8:c9:c4:d2:22:76:61:65:bc:17:bd:e2:
fc:d2:53:2e:bd:29:ff:11:cf:c2:8f:ce:de:35:9d:
af:5f:ef:88:e4:7b:05:7c:a5:65:b2:b8:f3:56:4a:
84:b7:ef:14:66:cc:47:51:e7:60:22:bc:df:7c:9b:
b1:95:b7:8a:71:6d:01:aa:09:b1:e8:3f:60:8b:aa:
cc:81:23:54:1d:4d:12:61:14:b2:2f:12:db:a3:82:
2b:25:98:20:3b:0d:6d:aa:a3:1d:2e:50:db:db:8c:
bf:de:cb:31:b5:1f:75:eb:2a:78:5c:1d:86:96:3f:
c9:ba:8d:b9:db:e1:62:2e:c3:a2:b0:3a:0a:73:a4:
82:f7:1d:a3:85:ef:d7:57:37:0b:65:ff:a3:0c:a1:
58:b1:ee:29:d1:15:99:c5:af:4a:28:0a:7b:9f:44:
cc:41:86:4a:6b:64:50:05:ff:de:f1:84:b0:24:d0:
90:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F0:05:FE:84:7C:6A:4D:91:D7:CB:EC:EB:E6:E2:37:01:C6:A1:30
X509v3 Authority Key Identifier:
keyid:27:A2:22:0F:1A:BF:CD:CA:6C:FD:52:23:6E:C1:0A:11:12:A8:83:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bb:7c:36:cf:2b:10:ee:b3:dd:0f:5a:40:65:60:51:2f:86:
c7:d6:91:82:39:4e:48:ee:0a:bf:5f:d7:cd:a0:6e:77:10:90:
91:5b:70:1d:3a:3c:f2:d4:33:f1:b3:86:02:67:36:1d:be:3b:
4b:fd:39:bd:80:18:ab:87:45:6d:2f:90:d2:9a:69:8a:e2:ff:
95:e7:b1:64:dc:d9:43:ae:b0:c1:f5:60:bb:1a:48:ef:d7:4e:
10:17:49:f5:51:ac:63:13:c8:3f:34:20:e8:52:84:46:59:ea:
08:e1:79:e2:5c:f1:9e:c4:1b:ea:47:27:62:cc:42:4e:2b:c5:
26:07:76:29:6e:1f:5d:2c:bd:2c:89:a1:59:e6:d3:86:1e:ec:
01:9f:55:ba:f7:8c:d2:35:0d:55:27:b8:f1:17:26:73:db:f5:
d7:aa:7c:f2:fe:5c:79:d3:d2:6b:df:a9:a5:c7:6c:ed:fb:2a:
39:00:2c:08:f2:ed:8b:8f:04:ef:32:e5:15:47:7f:16:9d:0f:
f0:13:e6:98:5f:87:55:9a:b8:c6:5e:76:42:01:77:68:d0:98:
29:09:a1:41:a9:0b:a9:a9:1a:ab:64:a9:e4:e1:bd:06:1a:48:
10:a3:25:48:18:28:7c:be:cf:de:3f:ab:b5:37:d7:0e:c3:2c:
26:01:ed:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:10:14 2025 by rpki-client