
$ rpki-client -vvf rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft
File: 0xR9jSeprR3LgjR_FEsIVeBV4aA.mft (raw, json)
Hash identifier: ujPBvWI+ygnfokaKFAe7NkTt2VNuBxYZlMVVDr1EEMU=
Subject key identifier: 34:FE:E8:C8:FC:77:8D:D2:A2:CC:3C:58:77:22:FC:74:7A:E6:81:3F
Authority key identifier: D3:14:7D:8D:27:A9:AD:1D:CB:82:34:7F:14:4B:08:55:E0:55:E1:A0
Certificate issuer: /CN=A91402E0/serialNumber=D3147D8D27A9AD1DCB82347F144B0855E055E1A0
Certificate serial: 01AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft
Manifest number: 01AA
Signing time: Mon 03 Nov 2025 03:10:40 +0000
Manifest this update: Mon 03 Nov 2025 03:10:39 +0000
Manifest next update: Mon 10 Nov 2025 03:10:39 +0000
Files and hashes: 1: 0xR9jSeprR3LgjR_FEsIVeBV4aA.crl (hash: Aab/Cq1m6+GjYPzSwpDHf91m0R00cnDjSJDHgeSOANE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.crl
rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 03:10:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426 (0x1aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91402E0, serialNumber=D3147D8D27A9AD1DCB82347F144B0855E055E1A0
Validity
Not Before: Nov 3 03:10:39 2025 GMT
Not After : Nov 10 03:10:39 2025 GMT
Subject: CN=69081d2f-6daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:67:1e:c4:f9:fe:be:74:4b:15:21:76:ba:
e0:7c:3d:fa:be:bf:93:5f:fb:22:25:d5:51:fc:ee:
49:4e:07:68:bd:83:ee:53:53:a1:15:95:99:46:45:
a1:f8:5c:f9:89:db:de:c7:26:06:34:56:8e:59:9b:
90:ad:07:a2:62:67:75:5a:cd:fd:c1:a6:66:c8:75:
29:fe:c4:59:1b:52:49:b0:82:c8:09:b8:23:8b:e7:
51:68:2c:91:f3:25:20:fd:a6:97:98:7a:ac:e5:0c:
96:31:97:dd:50:bd:d1:59:4c:4b:48:84:dc:8a:8c:
d7:49:d8:eb:8e:da:ee:28:be:72:c3:e4:de:d9:de:
97:8d:c6:79:6b:b6:4b:e6:cd:24:b9:2c:57:17:7b:
a2:6d:79:8e:54:cd:8d:e4:93:7e:64:2a:99:04:c4:
d1:e5:ec:4d:3a:48:11:d5:91:c7:38:49:f4:11:45:
02:a1:fc:be:5c:25:7c:01:8e:c1:19:6a:b0:01:79:
f4:bd:8e:cd:44:d7:a3:49:cf:dd:43:fd:3f:8e:df:
4d:7f:69:b7:3d:dd:3e:de:97:46:fa:aa:f6:26:07:
3e:ac:5e:b2:67:33:b9:c4:cc:71:88:cc:a3:34:68:
47:f2:25:ef:9d:36:23:c5:97:03:ec:66:1f:f1:3d:
4c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FE:E8:C8:FC:77:8D:D2:A2:CC:3C:58:77:22:FC:74:7A:E6:81:3F
X509v3 Authority Key Identifier:
keyid:D3:14:7D:8D:27:A9:AD:1D:CB:82:34:7F:14:4B:08:55:E0:55:E1:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:15:fc:7f:55:60:6d:29:7d:04:07:5d:1e:95:38:eb:12:12:
2f:b9:24:5a:45:c0:86:08:ad:1c:64:22:3e:29:59:a7:a5:24:
52:11:ee:84:4b:13:1b:25:e8:08:09:56:97:9d:0e:fa:df:23:
1c:2e:95:18:e7:b0:67:c5:5d:09:03:19:d1:bb:b4:51:45:48:
ab:d7:b8:49:f0:ee:27:05:32:97:55:a3:2a:35:01:4a:44:49:
fe:d6:2b:c4:a5:96:97:68:a3:3a:58:40:c1:8e:e6:c8:8d:b6:
65:39:96:b8:a8:1e:4c:f2:2f:0c:2f:98:4c:73:f4:b1:87:53:
c3:82:25:68:e7:55:73:63:c2:5c:76:2c:35:9c:60:ba:33:4f:
3e:67:55:73:a7:55:ef:c7:fb:8b:d5:e6:86:c0:58:72:f6:64:
a7:e6:2f:b7:6f:95:4e:76:0e:39:b7:95:51:0f:5f:8c:b5:51:
de:96:e1:39:64:82:13:00:4b:f1:76:40:46:9a:5b:cd:a8:fc:
06:67:fe:4d:e2:d0:e1:e6:4a:bb:ea:5f:7c:d1:ed:a9:0a:ff:
3e:08:5c:c3:a8:11:d8:0a:cc:1c:4c:0a:3c:6c:35:8f:d2:12:
ce:77:0a:88:c5:e9:fa:e0:2c:2b:f6:44:01:c9:f6:3c:9d:1f:
ce:de:f6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:16:39 2025 by rpki-client