
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/HsZtkG95Qt87d7_e3f0An-sr_SE.mft
File: HsZtkG95Qt87d7_e3f0An-sr_SE.mft (raw, json)
Hash identifier: fi4zLdXFQ8nDyHhgPxVaX4aK3VL6DMkAvq2U4DHam8g=
Subject key identifier: D8:F9:A5:FF:BD:E0:91:38:3C:92:6A:31:D7:5A:9A:25:B4:15:FD:8B
Authority key identifier: 1E:C6:6D:90:6F:79:42:DF:3B:77:BF:DE:DD:FD:00:9F:EB:2B:FD:21
Certificate issuer: /CN=A91D4781/serialNumber=1EC66D906F7942DF3B77BFDEDDFD009FEB2BFD21
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsZtkG95Qt87d7_e3f0An-sr_SE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/HsZtkG95Qt87d7_e3f0An-sr_SE.mft
Manifest number: 0F
Signing time: Mon 03 Nov 2025 07:57:31 +0000
Manifest this update: Mon 03 Nov 2025 07:57:30 +0000
Manifest next update: Mon 10 Nov 2025 07:57:30 +0000
Files and hashes: 1: HsZtkG95Qt87d7_e3f0An-sr_SE.crl (hash: XDS2hm3XzCggaV04IQfC4spYIdCMKdDSnISp5VsMjIU=)
2: B2D021C8A55A11F094B38083C4F9AE02.roa (hash: y/V1QRbYCKw+U4t4QASRjqSZUaC3x4XO8OAQeMFDOTk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/HsZtkG95Qt87d7_e3f0An-sr_SE.crl
rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/HsZtkG95Qt87d7_e3f0An-sr_SE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsZtkG95Qt87d7_e3f0An-sr_SE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 07:57:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4781, serialNumber=1EC66D906F7942DF3B77BFDEDDFD009FEB2BFD21
Validity
Not Before: Nov 3 07:57:30 2025 GMT
Not After : Nov 10 07:57:30 2025 GMT
Subject: CN=6908606a-4f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:06:3e:b1:90:61:cd:49:f7:08:39:e0:40:1b:
dd:e4:0d:22:8e:f1:f0:66:13:77:67:64:71:32:22:
5b:d8:bb:fb:4c:be:88:73:84:d0:66:d4:2f:fb:50:
ef:b9:58:bf:2d:08:78:c2:37:85:a8:7c:b8:7d:53:
be:cb:a4:ec:4b:53:ab:af:a6:68:49:c9:2c:24:a5:
f6:6d:a5:af:89:c5:02:1f:e2:90:a4:64:46:26:b1:
68:9c:84:03:4f:ee:48:18:d6:d7:1c:08:dd:38:e6:
84:f1:b4:5c:96:3d:b5:3c:87:a9:ad:8d:94:16:d4:
19:ff:7b:91:b3:9f:61:4a:c0:81:8d:5f:a9:47:9f:
d8:64:36:d3:a4:c3:82:66:12:d6:66:27:77:6a:1d:
26:67:62:8c:de:c1:75:84:b0:59:d8:9e:88:d6:18:
66:92:88:76:12:9d:66:8a:bf:04:ff:df:4a:4e:f9:
cf:7c:5f:16:85:96:50:5b:b4:5b:b6:d6:3f:af:23:
b8:55:57:7f:ba:8d:d5:6d:3e:6b:d4:6c:53:78:3f:
ca:1e:4d:34:df:d5:45:2e:ef:b0:f1:2a:c8:2d:6a:
30:3b:96:8b:a2:80:be:96:6c:64:f5:a9:b1:38:65:
1a:8e:0e:1d:b3:12:56:e6:63:95:e5:ea:30:66:39:
24:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F9:A5:FF:BD:E0:91:38:3C:92:6A:31:D7:5A:9A:25:B4:15:FD:8B
X509v3 Authority Key Identifier:
keyid:1E:C6:6D:90:6F:79:42:DF:3B:77:BF:DE:DD:FD:00:9F:EB:2B:FD:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/HsZtkG95Qt87d7_e3f0An-sr_SE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsZtkG95Qt87d7_e3f0An-sr_SE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/HsZtkG95Qt87d7_e3f0An-sr_SE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:ba:d9:bb:55:19:88:3c:98:35:2f:bf:3e:22:dd:f8:82:86:
c1:78:61:df:85:a8:7e:e3:ba:cd:70:4f:49:36:f0:00:61:c3:
74:fc:a7:a7:74:75:90:56:ae:a0:5a:c5:e1:b5:3f:21:75:cb:
7e:e5:53:3f:8d:3d:74:9f:a9:cf:9b:88:5c:50:fd:cd:89:d8:
9c:a1:14:90:49:b9:08:28:cb:52:7b:2a:41:62:9d:4d:5e:d4:
9c:19:6a:47:a6:ec:df:eb:12:ff:26:45:a0:d5:02:6f:49:82:
a7:60:3d:b7:fe:d3:bb:e3:82:81:63:dc:cc:58:85:68:03:2e:
ea:48:fc:8c:b0:28:97:69:90:74:39:32:6e:0a:dc:6c:67:ce:
14:d8:62:91:a1:e4:a0:e1:3b:23:a3:a7:f3:ee:ed:95:3a:4d:
df:ff:cb:ca:ea:2f:e4:34:f0:75:df:44:dd:65:1a:0c:0b:9c:
f8:ff:93:ad:38:13:12:4b:a1:62:d3:7f:f8:cf:bd:7a:f3:2a:
b2:be:d9:d4:1f:45:52:44:d6:a1:63:fe:68:17:1a:d3:69:6d:
53:33:bc:97:d1:c3:70:60:63:b4:6c:5e:16:a4:f3:4f:34:c6:
5f:bd:1e:87:62:93:01:89:36:4f:69:b0:ba:69:c8:8d:f2:a8:
18:a8:8e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:10:17 2025 by rpki-client