
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
File: SXscTqbbFagx-8FyKi9jR0UM80E.mft (raw, json)
Hash identifier: 0laUPtqBqQh15FCURBAiap7qaelybR+DYVX1yQoCrWc=
Subject key identifier: B5:23:08:02:01:E9:02:F1:06:0D:95:51:B2:3C:82:81:A9:29:42:CC
Authority key identifier: 49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41
Certificate issuer: /CN=A91D366E/serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341
Certificate serial: 34DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
Manifest number: 34D7
Signing time: Sun 02 Nov 2025 15:17:28 +0000
Manifest this update: Sun 02 Nov 2025 15:17:28 +0000
Manifest next update: Sun 09 Nov 2025 15:17:28 +0000
Files and hashes: 1: SXscTqbbFagx-8FyKi9jR0UM80E.crl (hash: ubMFsmMVRN/DJAqjYxzENaQBbtCcRe92xgsoFQLhEsQ=)
2: E72434CA69E011EFBD9DBA75C4F9AE02.roa (hash: rYc9zikfT0tRDa7zasMyBZpEVFa00oL4CS7Q4S+HlQg=)
3: E6C24E8669E011EFBD9DBA75C4F9AE02.roa (hash: 0DLMcfV/Llm+3fYXZIJn54Ysw/AzVCrvYXgQgG2YQmU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl
rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 15:17:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13532 (0x34dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D366E, serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341
Validity
Not Before: Nov 2 15:17:28 2025 GMT
Not After : Nov 9 15:17:28 2025 GMT
Subject: CN=69077608-4405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cf:80:b6:38:64:05:a1:f5:8a:c1:00:43:ae:
65:bb:15:90:fc:79:34:32:12:2d:60:cf:22:67:c6:
ab:59:6e:1e:cf:fa:14:31:ea:77:ea:21:89:82:db:
76:63:25:8e:31:ed:2a:a1:d4:66:7e:12:7d:08:83:
2c:f2:ba:fd:e3:41:b6:c6:8b:15:c0:4f:f4:28:fb:
fb:d4:46:0f:8f:b2:ab:ea:6f:6c:35:b3:9f:26:23:
43:19:6c:e4:a5:82:a0:a0:1c:fb:24:c3:cb:7f:a0:
76:be:51:ed:dc:20:0a:6e:95:4b:04:46:4b:06:a2:
f1:7b:1c:18:f8:49:ea:a5:0a:e2:88:4e:51:68:ec:
c2:00:56:55:8c:03:6a:c7:03:5e:b5:f2:f4:92:0a:
8a:4d:2a:bd:85:ca:08:e4:07:64:fe:54:23:18:85:
0c:bd:2c:64:49:08:fc:77:7a:57:d6:19:98:92:6b:
65:f6:cf:85:e0:88:17:30:61:c8:62:57:e6:65:5b:
f8:67:38:80:40:68:94:cc:8b:88:ac:90:e1:2b:ba:
79:44:11:a4:5e:d8:e3:30:04:30:4a:d9:df:3c:73:
c7:0f:b1:eb:2f:c3:dc:f4:bc:46:ce:c8:e5:fb:64:
0e:ef:ee:d1:4f:7f:18:cf:64:c2:36:5d:c6:4f:cf:
30:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:23:08:02:01:E9:02:F1:06:0D:95:51:B2:3C:82:81:A9:29:42:CC
X509v3 Authority Key Identifier:
keyid:49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:a0:be:62:40:db:e6:fc:19:b8:99:43:14:b3:d5:0a:55:7f:
7e:d5:fd:ec:6e:3a:a4:bc:45:ff:ca:b9:91:90:1f:3f:ad:9b:
5c:55:12:4a:1f:81:de:b0:9d:a2:d0:4d:e1:a6:a4:f2:99:b2:
0e:d0:dd:94:7b:23:7e:a9:f7:56:9a:a2:f9:5c:61:93:cb:88:
8c:e7:bb:34:87:97:47:f0:dd:9b:50:79:38:6a:5c:72:96:b3:
b4:58:1b:21:35:43:ab:f4:a2:2c:c9:1d:be:74:f1:ed:a4:b5:
cb:db:f4:d3:22:41:1c:a5:fb:21:f9:cc:a3:dd:93:d8:41:8d:
81:04:42:c4:7e:4c:13:a8:f3:96:5a:b1:3d:8e:47:23:52:8a:
50:c9:1b:4e:e6:5c:2d:a5:db:99:44:f5:4e:ca:f9:95:17:54:
25:a4:b9:64:12:98:7f:a0:ec:17:d0:90:29:96:c4:b5:c0:bd:
d1:e6:60:70:82:f1:c8:80:2a:a2:87:35:be:23:5e:dc:01:50:
52:f4:3a:cb:9c:8b:28:9b:75:08:5d:89:df:89:86:b4:d5:34:
b3:cf:af:d7:30:bc:69:a9:5d:5f:86:41:26:6f:ee:9d:4c:54:
d6:ad:32:f4:00:b7:95:24:19:94:b0:e4:9c:8a:87:ff:dd:53:
c7:ff:19:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:17:19 2025 by rpki-client