
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
File: _7jr91F1lPQetjZXPZajVwaXSbk.mft (raw, json)
Hash identifier: l8v2TB4QhqbXogdauNi8619D5fb/JhRk7qhJb39MgEk=
Subject key identifier: E6:E0:A8:28:70:A5:C8:47:54:97:D1:F6:24:F0:36:B5:EB:96:87:F4
Authority key identifier: FF:B8:EB:F7:51:75:94:F4:1E:B6:36:57:3D:96:A3:57:06:97:49:B9
Certificate issuer: /CN=A9191136/serialNumber=FFB8EBF7517594F41EB636573D96A357069749B9
Certificate serial: 16
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_7jr91F1lPQetjZXPZajVwaXSbk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
Manifest number: 15
Signing time: Mon 03 Nov 2025 07:53:58 +0000
Manifest this update: Mon 03 Nov 2025 07:53:57 +0000
Manifest next update: Mon 10 Nov 2025 07:53:57 +0000
Files and hashes: 1: _7jr91F1lPQetjZXPZajVwaXSbk.crl (hash: cffj1wfeYqnu2ksWe02F5becvCEum5GSRK+XTJ8DuMs=)
2: 97B512889AA911F08374FE83C4F9AE02.roa (hash: uH6Z9g6mupXrJXF3TsZUP4n4WGUuKWh4WvUq+eRHejo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.crl
rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_7jr91F1lPQetjZXPZajVwaXSbk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 07:53:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191136, serialNumber=FFB8EBF7517594F41EB636573D96A357069749B9
Validity
Not Before: Nov 3 07:53:57 2025 GMT
Not After : Nov 10 07:53:57 2025 GMT
Subject: CN=69085f95-94b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:45:55:b2:a4:37:d2:0d:26:4b:c7:fa:90:
45:6e:40:ef:13:6a:31:86:d9:e1:61:45:7d:3c:33:
82:41:5b:69:5c:cb:47:c0:cd:e0:75:d3:52:37:64:
ea:47:23:15:59:07:ac:36:fb:2b:ff:fc:5d:6c:5f:
e1:d5:fc:ef:bf:1c:de:a4:3d:84:dd:fa:b2:be:e6:
af:fb:36:a5:4a:fc:ec:86:66:dc:50:30:42:ff:f9:
60:cc:9d:5e:20:64:54:54:39:88:80:38:30:86:5e:
a3:fc:de:9d:8a:44:3e:02:e5:1d:26:c5:34:ee:1a:
4e:74:c2:55:d9:43:3e:8d:6f:23:aa:85:a2:72:da:
64:85:ab:88:c9:34:0f:31:1b:d9:4e:d3:ad:ea:82:
1a:36:c1:76:ab:75:17:59:33:0e:aa:69:58:ea:85:
cc:57:12:5b:06:e7:29:93:1f:9d:8b:74:ef:ef:a3:
7e:d3:fe:c2:b7:67:04:c3:87:df:4f:22:04:d6:4e:
63:50:52:fa:9a:5e:88:2d:0f:69:9f:9c:08:cf:55:
1a:e6:9f:6c:6a:dc:94:9c:cf:9e:a0:3e:f0:20:66:
93:66:94:e1:a4:be:35:22:1e:8e:2b:76:aa:03:a0:
60:fc:6b:08:61:bf:5b:3b:1c:83:9b:5b:96:8c:45:
80:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E0:A8:28:70:A5:C8:47:54:97:D1:F6:24:F0:36:B5:EB:96:87:F4
X509v3 Authority Key Identifier:
keyid:FF:B8:EB:F7:51:75:94:F4:1E:B6:36:57:3D:96:A3:57:06:97:49:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_7jr91F1lPQetjZXPZajVwaXSbk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:81:e3:0a:64:b9:02:24:77:ca:d2:69:7c:7b:74:a3:95:6a:
c4:27:93:78:29:b1:07:bc:ab:3e:ae:1c:cc:15:3b:ca:5c:a9:
07:03:d2:0b:1e:0f:89:96:6b:4c:2d:1c:07:c0:b2:92:d5:e5:
92:9e:56:65:8c:59:e0:9e:ab:4d:ee:01:fb:88:42:2e:b5:56:
39:a0:8f:27:ed:66:00:c5:a6:f4:8f:91:f8:f2:e4:f1:2f:b3:
6c:f0:65:d5:9c:f3:f7:d6:f7:44:09:7d:cb:b5:ff:8d:52:49:
f2:4d:bf:8e:7c:74:03:a5:9c:b1:05:27:0a:73:f2:34:6a:69:
e3:b1:71:c9:e7:e7:55:66:a2:13:5c:09:8b:1f:76:bc:6f:8c:
91:20:47:44:dc:89:8c:12:93:14:89:71:cd:7c:14:c9:89:c8:
30:d0:8c:11:55:49:cc:49:63:33:ad:05:50:65:fb:d6:0a:bd:
a7:0e:93:71:46:52:09:ce:b1:7d:de:52:41:7a:55:b6:ab:7c:
4a:ce:f5:24:47:a1:c1:b0:5f:7e:85:88:19:64:14:99:14:79:
88:cb:8e:b5:8a:65:7a:6a:6b:86:7f:53:4e:f6:77:bb:66:bf:
46:fb:5f:50:c5:5c:a1:0f:c0:0d:9e:37:cb:e6:83:08:1f:f3:
33:c7:73:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:12:30 2025 by rpki-client