
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
File: JfPSFoirk4Gqi5UrziZBKTVCp_I.mft (raw, json)
Hash identifier: D2wu7kqn4fz+z+QyRmAzibguXV3+yompkF70LG8rDNs=
Subject key identifier: D6:15:E8:A5:77:6C:9B:C8:B4:A7:C4:2F:1B:00:77:31:A2:DE:73:97
Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2
Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2
Certificate serial: 07DB
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
Manifest number: 07BB
Signing time: Sun 02 Nov 2025 21:23:52 +0000
Manifest this update: Sun 02 Nov 2025 21:23:52 +0000
Manifest next update: Sun 09 Nov 2025 21:23:52 +0000
Files and hashes: 1: JfPSFoirk4Gqi5UrziZBKTVCp_I.crl (hash: J5k1WRLp/hjtg7DLk3H9lYFh+ynRqhqACRd9HJZXzWg=)
2: 7C76080E08D611EE82522448C4F9AE02.roa (hash: k9frDxKJ4wpEb7uq/4jS+05SvZ2Ew23IDjuHbFB36uo=)
3: 27D76814848711EF8CFAA23AC4F9AE02.roa (hash: AlSQiWdBlK2D6fUaLlzUbdGdJEpnbwRmjimYOA50uq4=)
4: 2A67700A9B4411EFA1772153C4F9AE02.roa (hash: umP1jM7YynccOJheC11YvDxU2JNxDYT6vSOoFYsUbhA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl
rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:23:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2011 (0x7db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBAF1, serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2
Validity
Not Before: Nov 2 21:23:52 2025 GMT
Not After : Nov 9 21:23:52 2025 GMT
Subject: CN=6907cbe8-6179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:55:95:9a:62:0a:91:92:9f:62:aa:66:6e:
03:6b:f4:44:e1:df:e3:f1:51:e6:25:a1:ff:80:b0:
4f:ca:18:a5:26:5f:d7:7c:f6:8f:48:91:4a:84:9a:
67:aa:fe:9b:06:39:12:7a:c2:57:82:59:47:cf:42:
12:98:65:44:60:3a:22:77:48:fa:3d:eb:4f:2a:06:
01:2d:fc:16:39:58:44:9a:48:80:ce:df:20:71:28:
bb:7a:30:b1:ef:d0:22:04:56:ad:8f:c4:3a:36:4f:
4b:68:de:3a:23:46:62:33:49:a0:8c:22:8c:80:6c:
96:15:19:fc:5c:88:b2:b7:78:66:e1:6f:00:a6:74:
b0:1f:b8:1e:83:3a:d7:71:fd:95:8d:62:a1:11:30:
cf:3d:9b:f0:2d:d8:3f:4b:fb:ae:48:b3:4b:96:64:
bf:08:05:5f:8a:c0:3a:09:33:d8:89:08:eb:ae:aa:
a2:33:0e:ae:67:17:a0:32:f6:15:1f:d7:8f:7b:e2:
49:cf:ae:6c:02:9d:bf:31:06:dd:37:89:d5:71:18:
fb:d5:4d:e1:d7:05:e0:9c:e7:24:c5:da:d8:63:2a:
79:c3:62:b6:b1:77:1a:98:8f:c2:ed:1c:23:bf:35:
eb:cd:0f:b8:7d:cc:82:fc:32:20:14:d2:df:3a:bf:
e6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:15:E8:A5:77:6C:9B:C8:B4:A7:C4:2F:1B:00:77:31:A2:DE:73:97
X509v3 Authority Key Identifier:
keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:26:78:07:93:cb:76:eb:c1:c2:63:05:be:9a:25:cb:b5:47:
aa:ad:df:c4:15:dc:fe:27:83:c8:cb:b5:49:c9:6c:75:80:bc:
24:d0:ae:53:9d:b0:c0:7a:1c:63:0a:2e:1a:87:dc:aa:a6:02:
08:25:d4:5e:55:bf:50:98:65:51:f8:c6:f1:9d:ab:2c:35:b4:
87:c4:45:b1:2c:59:20:de:27:16:f6:9f:2b:e6:98:11:b8:c1:
4e:fd:a1:f6:b1:b9:84:36:67:2e:41:07:55:4f:1e:0a:1c:03:
cb:e3:82:9d:22:a4:da:17:e9:98:09:76:60:28:94:d5:75:95:
d4:2d:5b:d7:79:a7:36:9b:52:75:34:79:94:65:7f:6f:7f:00:
56:6b:e0:b9:0e:86:26:cd:36:0e:d7:62:e5:09:a3:fb:76:99:
26:ee:14:08:d2:b2:af:cc:9b:ce:b8:e5:21:17:4c:67:57:ad:
28:ae:3a:7e:c6:0f:ee:f7:74:a9:96:73:1a:e7:9e:0d:e7:aa:
1e:bb:fa:00:a0:66:bc:b6:ce:8b:38:5d:d5:96:c5:74:90:f1:
22:56:d8:c8:a2:f1:5d:e5:2c:32:38:22:57:77:49:8a:4a:1c:
d4:0c:5b:f1:ed:6a:7f:2a:30:d8:e0:51:c8:21:8e:55:34:4d:
83:9d:7c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:14:33 2025 by rpki-client