
$ rpki-client -vvf rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
File: pjmEmL39gbnWUbUS4OnwRXr6TSg.mft (raw, json)
Hash identifier: nlwWVDAq/NZQtkuyx9zwZw6efRZvy2oGKnXW39p9YRQ=
Subject key identifier: 1C:31:A8:09:5C:ED:DD:AA:F6:82:68:09:D8:26:05:E9:70:9C:A1:E7
Authority key identifier: A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28
Certificate issuer: /CN=A916333C/serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28
Certificate serial: 08E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
Manifest number: 08DA
Signing time: Tue 04 Nov 2025 20:29:14 +0000
Manifest this update: Tue 04 Nov 2025 20:29:13 +0000
Manifest next update: Tue 11 Nov 2025 20:29:13 +0000
Files and hashes: 1: pjmEmL39gbnWUbUS4OnwRXr6TSg.crl (hash: 26VBAujBXC69+7kZkim2RIcsZwqUiLgOcXs1V7pFoTI=)
2: A211CBBEBF3911EABB1C5578C4F9AE02.roa (hash: 455pSZuKbmJ74DtLJhv6Pu72i25WA9DRuhrIcycnTSM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl
rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 20:29:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2273 (0x8e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916333C, serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28
Validity
Not Before: Nov 4 20:29:13 2025 GMT
Not After : Nov 11 20:29:13 2025 GMT
Subject: CN=690a621a-86c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:0a:fb:8d:74:49:64:ab:74:69:22:5c:e7:
48:96:b8:e6:2b:3c:63:96:a3:ab:3e:a0:14:e3:e1:
a6:be:61:26:38:c8:a5:eb:f8:0e:bb:22:02:20:fb:
df:36:a2:05:6a:40:c9:03:19:e7:ce:47:1a:fd:13:
d9:29:1a:b9:a5:f6:d5:1c:7b:55:bc:4a:d2:5f:03:
21:7b:e3:7c:38:8f:6b:4e:f2:ee:60:09:df:da:f1:
bb:7f:27:c9:e3:be:59:1f:9b:33:c3:69:a4:39:89:
da:fb:a8:4d:3e:10:3c:89:70:68:74:67:63:05:8a:
19:09:1d:30:d0:3f:db:45:8d:28:92:a0:34:8f:72:
a4:10:0c:89:4c:07:6d:ee:f2:78:e1:ea:7b:a1:ce:
55:af:66:1b:a8:f1:a4:0b:2e:30:96:17:e8:fe:47:
85:b6:0c:c8:ee:7d:ac:ba:33:94:dc:dd:ea:03:77:
d2:2f:6b:64:4e:1b:1d:fc:9b:98:11:9a:27:87:78:
96:89:d1:11:6b:84:06:b5:a8:b8:d9:8e:ae:dd:18:
39:dc:0c:f5:6f:50:2f:f7:1e:72:44:0c:79:9f:e0:
df:48:02:c3:9b:ad:e7:aa:24:aa:87:b9:86:66:fe:
17:33:95:15:ec:b1:35:8c:be:26:7e:32:00:de:f3:
93:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:31:A8:09:5C:ED:DD:AA:F6:82:68:09:D8:26:05:E9:70:9C:A1:E7
X509v3 Authority Key Identifier:
keyid:A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a5:b6:f2:9d:cc:eb:31:e2:9f:78:d9:09:2d:93:c7:87:2b:
b8:b5:d1:40:dd:82:7c:39:76:4c:b1:6c:92:6c:8d:02:fb:5d:
a6:dc:14:6c:6f:67:91:21:c8:c9:18:8b:f0:ab:ea:53:f8:8d:
7e:cf:ea:6e:5d:99:e1:d1:e8:74:b9:43:44:e6:66:2d:4b:a5:
ec:b6:97:88:d2:1d:9e:47:40:3f:55:10:3a:44:3a:e7:5d:a3:
55:54:e8:a7:5f:6d:1b:8b:60:05:4b:8b:60:ef:bb:c8:ac:4b:
9b:a8:7a:36:23:91:7d:f1:a8:5f:73:fd:44:7f:00:a8:0d:90:
80:af:10:05:09:d5:5a:4d:71:f8:a1:2e:95:94:69:5a:1a:7b:
f9:ce:bb:f1:af:dd:87:2f:f1:05:cd:7e:60:ce:8e:29:1d:58:
8b:4e:ad:ff:6c:9b:39:ba:4e:27:c3:8e:d0:56:9f:4b:95:9e:
1f:db:72:64:a2:ba:4d:67:e1:98:26:38:26:9a:64:c9:26:a7:
42:0a:ff:cc:d1:9a:cb:86:bc:40:fe:c1:1a:55:b3:36:e3:2e:
6f:13:39:51:8c:5d:60:1f:89:1a:a4:4d:55:08:09:57:45:89:
cc:fd:a4:24:82:d5:e4:6b:ae:b8:b1:d8:21:02:70:eb:34:79:
b1:f1:ee:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:54:58 2025 by rpki-client