
$ rpki-client -vvf rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.mft
File: 3JGEsEpTx6Fy980mJV612APjRwU.mft (raw, json)
Hash identifier: /erQ8KdMhRHiz5CnO7u/AZUlpPg/W46q3C3P9TNyMgw=
Subject key identifier: 81:CA:48:6F:34:4E:BC:BB:4B:F5:82:91:DD:B1:EE:C3:F4:B7:B3:16
Authority key identifier: DC:91:84:B0:4A:53:C7:A1:72:F7:CD:26:25:5E:B5:D8:03:E3:47:05
Certificate issuer: /CN=A919910B/serialNumber=DC9184B04A53C7A172F7CD26255EB5D803E34705
Certificate serial: 06FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JGEsEpTx6Fy980mJV612APjRwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.mft
Manifest number: 06EF
Signing time: Tue 04 Nov 2025 22:04:49 +0000
Manifest this update: Tue 04 Nov 2025 22:04:48 +0000
Manifest next update: Tue 11 Nov 2025 22:04:48 +0000
Files and hashes: 1: 3JGEsEpTx6Fy980mJV612APjRwU.crl (hash: ePjtII1gSObgejkBdg+uciZvcjvf7vMtLS5yDzlmYVk=)
2: BB199EBC6F8711EB9E412A2BC4F9AE02.roa (hash: DGzXCeNwvDBe7tehCzISldKuF3rMgtSzwuNEMYEu//8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.crl
rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JGEsEpTx6Fy980mJV612APjRwU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1787 (0x6fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919910B, serialNumber=DC9184B04A53C7A172F7CD26255EB5D803E34705
Validity
Not Before: Nov 4 22:04:48 2025 GMT
Not After : Nov 11 22:04:48 2025 GMT
Subject: CN=690a7881-8117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:db:66:fc:14:ab:27:46:1c:e2:7a:83:38:6a:
ac:0e:21:22:2a:e3:55:dc:24:10:f2:92:74:39:c1:
6d:4f:d6:cc:68:df:14:ce:57:f9:18:ad:4f:b1:dc:
0e:83:aa:fa:f3:09:1c:8c:b5:ce:2f:1d:f5:a5:12:
5f:de:12:d9:07:8d:ee:a7:21:21:1b:6c:36:53:06:
63:d5:d8:b6:d3:d8:c7:2e:69:36:50:46:c9:a9:76:
f6:93:3a:ba:d8:34:ec:7b:bb:1d:8b:a1:42:a8:bf:
d4:bd:b8:63:28:51:d6:7e:90:42:1c:20:0a:3a:82:
ce:c8:18:e2:1c:eb:66:45:db:c7:8d:03:80:24:ad:
fe:f6:d5:46:1c:1e:30:80:02:23:81:b2:9d:c2:e1:
4f:8f:4b:15:d5:b6:cc:1d:1d:61:b6:3d:ec:10:a8:
ac:8f:4f:a5:cb:31:a0:4d:4d:e7:2a:db:26:67:f4:
c6:40:72:16:74:6a:e9:3b:91:13:ee:29:0b:cf:bf:
96:09:8e:bd:2f:e4:f8:e0:8d:54:07:32:cc:14:d7:
f5:4b:fa:f7:0e:f1:b8:54:28:c2:64:0b:cf:02:25:
ec:9f:72:c0:c6:83:7b:5f:7a:c0:c0:08:69:f2:5d:
96:a0:f3:04:cb:d6:16:57:5c:a7:29:ff:cd:4a:63:
af:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CA:48:6F:34:4E:BC:BB:4B:F5:82:91:DD:B1:EE:C3:F4:B7:B3:16
X509v3 Authority Key Identifier:
keyid:DC:91:84:B0:4A:53:C7:A1:72:F7:CD:26:25:5E:B5:D8:03:E3:47:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JGEsEpTx6Fy980mJV612APjRwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919910B/623D1E066F8511EBAC5AC96CC4F9AE02/3JGEsEpTx6Fy980mJV612APjRwU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:0d:d7:e4:eb:c7:fd:39:29:ad:6f:3d:43:29:29:3c:a3:39:
cd:97:21:4b:70:84:90:fe:e3:0f:90:bb:fa:9f:0d:70:cc:17:
ac:70:b8:fe:e2:69:26:1b:fc:aa:f1:cf:8c:f0:b3:30:18:56:
ba:be:4d:0e:22:6d:08:6c:7e:3e:85:37:10:51:bf:2b:19:94:
e3:d5:bd:27:88:4b:45:71:bf:c4:09:cb:62:fb:29:a2:2a:21:
47:da:6c:55:91:28:9d:48:00:9a:48:31:30:a9:d8:e9:ce:99:
eb:18:f2:2a:0a:52:19:2f:50:23:63:58:40:66:2a:7f:6a:b1:
50:d6:8a:79:e7:09:0d:91:3d:d1:77:de:26:02:2b:fd:55:e4:
47:66:ad:04:41:a6:bf:7f:cf:af:1c:b8:e6:52:5e:c4:01:47:
4f:52:b7:b4:7b:eb:b9:73:b1:40:88:a5:80:c4:7c:71:cb:3c:
18:8f:b6:a9:db:78:e5:46:b3:2d:df:e5:33:d3:83:af:cb:f6:
f2:ed:c6:4e:ea:71:84:b0:7d:c1:d3:e9:14:56:5e:7f:22:ef:
10:a5:43:c4:05:49:b6:ab:c4:72:8b:44:6c:7e:10:ec:dc:7c:
51:d1:d4:9e:cb:77:f0:ac:a3:51:d4:87:ed:30:4d:2b:de:f7:
67:32:23:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:29:52 2025 by rpki-client