
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft
File: fJ9yIp7REllMdyLTwhtRBeKfxIo.mft (raw, json)
Hash identifier: hOFKP5R6nJolmm6s82CpLiONIx/a5+PYC8sSIo5tHZY=
Subject key identifier: F9:96:A4:6B:85:D0:7E:6F:AB:75:4B:56:D5:36:C0:11:6C:B8:A7:54
Authority key identifier: 7C:9F:72:22:9E:D1:12:59:4C:77:22:D3:C2:1B:51:05:E2:9F:C4:8A
Certificate issuer: /CN=A91F77AD/serialNumber=7C9F72229ED112594C7722D3C21B5105E29FC48A
Certificate serial: 01C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft
Manifest number: 01BA
Signing time: Mon 03 Nov 2025 03:07:30 +0000
Manifest this update: Mon 03 Nov 2025 03:07:30 +0000
Manifest next update: Mon 10 Nov 2025 03:07:30 +0000
Files and hashes: 1: fJ9yIp7REllMdyLTwhtRBeKfxIo.crl (hash: B5sBkiUsX1jzkpuUlYIUmICymPRDKYl01v2TwDVGs98=)
2: 0D99319006F011EFA8C8D445C4F9AE02.roa (hash: A4DVK+hVAcm077tOI0UtMRITW1ft4Rq073mjOE1b4lQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.crl
rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 03:07:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448 (0x1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F77AD, serialNumber=7C9F72229ED112594C7722D3C21B5105E29FC48A
Validity
Not Before: Nov 3 03:07:30 2025 GMT
Not After : Nov 10 03:07:30 2025 GMT
Subject: CN=69081c72-6529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:75:46:0b:72:1c:45:ea:1c:74:b5:2f:5b:ad:
a5:52:ea:04:a1:35:25:44:43:d9:c1:c8:6e:a5:4e:
17:20:57:ee:48:44:71:b0:0d:b4:a9:8e:ab:0c:8c:
b8:02:99:3a:3a:91:65:39:b7:dd:c1:9b:c6:31:11:
3f:80:6e:55:a0:37:23:9b:b3:1a:5a:0f:e0:11:6b:
75:8b:86:b8:a8:83:0d:ba:b8:23:37:43:9f:2f:19:
9a:a9:99:f9:27:19:27:1b:52:2a:ad:a8:f2:9e:c1:
6d:35:e3:30:5b:53:ee:6a:60:4d:b5:48:6f:29:23:
4a:32:26:2e:70:f1:15:21:71:5b:6f:59:1a:ea:42:
d5:98:ae:4a:ce:25:0c:ad:ad:a0:4d:0c:67:ee:ac:
fa:8b:55:7d:8f:2f:ea:c4:13:b6:4a:5c:cd:7e:52:
d1:75:d4:69:4b:91:74:39:79:35:b9:9c:c2:a1:5d:
b9:82:6a:6c:d0:62:27:f5:7b:8f:52:9a:6f:ff:0f:
ef:fb:58:82:91:40:dc:bf:ec:69:e4:a8:bb:cd:8a:
a1:b8:ff:c8:e1:d6:a2:4d:84:cd:c6:0a:b7:54:38:
ec:d3:40:b8:07:4e:bb:30:e5:f1:7d:c1:ce:33:2e:
e1:50:8e:77:ca:bb:7c:84:a6:cc:8b:26:8a:24:11:
26:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:96:A4:6B:85:D0:7E:6F:AB:75:4B:56:D5:36:C0:11:6C:B8:A7:54
X509v3 Authority Key Identifier:
keyid:7C:9F:72:22:9E:D1:12:59:4C:77:22:D3:C2:1B:51:05:E2:9F:C4:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:6d:7b:60:94:50:82:4e:55:d9:a0:7e:36:28:df:c9:ea:11:
05:38:4c:e7:dd:7c:fd:38:cc:fb:93:6a:44:d3:3e:36:00:dd:
fa:c4:55:b4:86:d0:9d:0c:99:4f:5f:aa:15:fa:b0:80:b0:86:
c1:36:ea:16:d9:80:9b:27:80:79:73:0c:5b:f2:62:63:b6:cd:
61:cc:63:5a:2c:d0:3a:97:7a:04:97:b6:d0:40:72:5f:0a:8b:
20:f7:b9:b2:d3:6a:3a:33:f5:de:9e:b2:a1:cc:00:f6:74:40:
97:ac:87:ab:87:37:63:ac:f7:3f:38:c7:10:bb:21:5b:a0:61:
ea:27:56:32:14:91:3e:b9:32:27:42:da:78:5b:eb:2d:d1:24:
3d:2e:01:ee:29:cb:73:81:fb:78:b3:e4:d4:e7:9a:d8:69:24:
4e:51:aa:b4:c9:b9:f6:38:0c:4b:50:c5:5c:49:19:ff:09:2f:
ae:55:9b:61:5e:3c:31:e5:6f:2d:a6:ac:56:e8:2e:af:72:95:
d5:f0:d1:40:f3:61:13:56:9d:c2:bc:76:5b:1e:2d:47:9c:ed:
9f:3a:8c:ab:0f:26:dc:12:d2:1f:a9:48:35:a5:61:cf:2f:53:
51:7e:50:f7:85:29:f3:0e:92:73:0c:ad:33:8f:fc:02:89:6b:
c5:44:a2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:17:14 2025 by rpki-client