
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
File: rbmJeP11H5nZqOsq5y08DFUEU6Q.mft (raw, json)
Hash identifier: C2ASNlVwdW4VyjRe46zQJa0pvV9FOmj91v6FoYe6Khc=
Subject key identifier: 93:15:98:0D:96:89:D5:26:E9:B2:F7:EA:AC:D2:1A:91:F4:9A:15:62
Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4
Certificate issuer: /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
Certificate serial: 057A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
Manifest number: 055F
Signing time: Thu 06 Nov 2025 15:58:59 +0000
Manifest this update: Thu 06 Nov 2025 15:58:59 +0000
Manifest next update: Thu 13 Nov 2025 15:58:59 +0000
Files and hashes: 1: rbmJeP11H5nZqOsq5y08DFUEU6Q.crl (hash: RLxXNUjHJsOLUdsJy12nSzaK1JLbBpUlf/nOawRw9tU=)
2: 5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa (hash: gNw6+2AtUDlZqQnfDSX/fakH8OEL/fzgw5/WC6J/FXA=)
3: 43AB9FC641A311ECA73C8C0EC4F9AE02.roa (hash: olSuTXg4z8rAQVRr4bLY3JWSgH6wfZWF5NWyI+YF42Y=)
4: CE99A9F2D33811EDAAE97C1BC4F9AE02.roa (hash: PtfkQkDsmXl3jve8vW5Bkmjd/2ESa8IcHz8xM5qInPk=)
5: CF49BBDAD33811EDAAE97C1BC4F9AE02.roa (hash: Xh3iMK0Ak0Tx1OewwcV+5j4ibHx4h2hLFwHOLVOVBKI=)
6: 0ECA9B023D9F11EC9EC18739C4F9AE02.roa (hash: aNH379FQc3LoP81plPwndyeL8gm1j9vMgI0IfOPvVJ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl
rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Nov 2025 15:58:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1402 (0x57a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
Validity
Not Before: Nov 6 15:58:59 2025 GMT
Not After : Nov 13 15:58:59 2025 GMT
Subject: CN=690cc5c3-5b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:b2:1e:60:74:e1:7b:38:5d:78:87:9a:21:
58:09:dd:50:4c:7b:cb:2d:4c:7c:0d:61:a4:2c:64:
0c:a2:8a:b6:34:ee:99:f7:4c:f2:4a:e0:2a:65:4e:
49:07:9c:60:a4:19:60:c7:b3:24:dd:80:1a:cb:02:
6a:fc:84:84:2d:6b:96:4c:4c:c8:6a:05:67:ff:4c:
32:ee:dd:e2:de:83:f8:79:b1:ce:59:7e:d9:b1:e2:
e8:bd:2c:88:c1:30:13:a0:0b:8b:66:df:94:62:a5:
4d:53:d6:22:07:92:c9:ee:ff:ce:aa:2f:f9:de:db:
fb:57:6a:bd:4f:91:b3:30:e1:e7:c0:63:ea:73:c6:
22:40:f7:d7:1c:dd:91:40:5f:61:2b:4a:3f:7a:79:
52:78:99:a2:de:fb:55:52:ce:01:bd:0f:26:0a:5e:
aa:e4:30:45:ed:53:f0:58:50:8d:a5:5f:e4:f1:2c:
cd:e1:87:9b:87:66:c2:0e:a6:20:94:c8:ab:f0:70:
79:e4:3b:8a:c6:4b:70:85:b5:36:4d:e6:36:d3:ef:
eb:96:e6:d7:70:26:95:fa:25:54:3f:3e:d9:cb:a7:
c1:d5:a5:47:45:ef:76:bf:87:8d:4e:28:05:a0:52:
fc:b4:f8:a4:ce:6f:90:1e:ba:d4:a9:d1:97:41:08:
dd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:15:98:0D:96:89:D5:26:E9:B2:F7:EA:AC:D2:1A:91:F4:9A:15:62
X509v3 Authority Key Identifier:
keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:b0:bf:d2:6d:a5:45:19:63:92:db:cd:4d:41:06:96:ea:f8:
7e:97:f1:ab:87:63:2b:c0:b8:dd:32:9c:46:8e:ce:8f:fd:c1:
88:69:f7:0f:b4:fe:12:fd:9a:85:25:ac:db:24:cb:8f:22:67:
32:61:b7:d0:66:02:6d:bd:78:76:3d:a2:b5:e4:56:e8:b1:d9:
21:69:45:55:1f:d4:9b:8d:0a:84:2a:c6:dc:3f:89:fe:21:1f:
31:d4:13:94:88:01:85:10:16:1d:56:60:b1:4f:54:3c:47:ea:
76:9f:84:d2:b8:3c:fa:8f:72:8f:bd:8c:2d:4e:93:40:b4:bc:
57:bd:a4:d0:e6:f1:33:f0:7e:da:62:74:34:bb:74:41:80:07:
ef:e5:2d:ac:9b:67:9d:eb:32:99:72:ef:f8:04:2f:8c:c5:c5:
e0:94:3d:d0:cf:84:5f:e8:e0:83:3b:25:06:ec:7c:f8:8a:32:
46:6a:17:00:fe:39:61:81:5e:68:eb:2a:38:3e:b4:41:f4:b0:
ee:5b:0d:ad:df:aa:02:22:15:ec:2c:0f:af:e0:94:93:ac:d0:
82:50:40:b9:ca:95:1d:a6:b6:6f:c5:9b:00:fb:7a:a6:44:81:
62:0e:39:e2:30:bd:4d:8a:57:c2:ae:0e:e0:a6:23:22:e7:92:
a7:a5:a3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 01:08:47 2025 by rpki-client