
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
File: XBJjPm2nhhExvM_qH3t6vTUdIy8.mft (raw, json)
Hash identifier: 7QuAmvWOTfmXizBT9i0PSV7/fs7T2jcZy/KXwfoRBYI=
Subject key identifier: 91:8B:12:02:BA:DF:26:C3:0E:6B:BF:16:EF:C7:B5:E8:BF:CB:EB:7B
Authority key identifier: 5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F
Certificate issuer: /CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F
Certificate serial: 02FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
Manifest number: 02E9
Signing time: Wed 05 Nov 2025 01:22:09 +0000
Manifest this update: Wed 05 Nov 2025 01:22:08 +0000
Manifest next update: Wed 12 Nov 2025 01:22:08 +0000
Files and hashes: 1: XBJjPm2nhhExvM_qH3t6vTUdIy8.crl (hash: wo6ZM4/GjzcEun/OpGuQl59KgK+6sWB/AdtqcqIf2Xk=)
2: 92F62AF0032811ED8DFE1842C4F9AE02.roa (hash: 5ddtdaIVi4uZX5Kvh4OHCGdOxyTvl3WbsBWufhivC2Q=)
3: 6B10211E032B11ED8B3C5B4EC4F9AE02.roa (hash: ELuUl8jYoHQdUknrof/L+Xlspg+bgQj1KmK60+o/Jfs=)
4: 418966DA032011ED84D6CA1EC4F9AE02.roa (hash: KuSwuFXT3RlQeIGfpEWkiu/ifBNFInANnuYBrAg51Cc=)
5: 94584738031A11ED934E3D58C4F9AE02.roa (hash: cMcwlHYnO9+mh5veotjRirRXB4y0F0TlStRvvkDezXU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl
rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 762 (0x2fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5577, serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F
Validity
Not Before: Nov 5 01:22:08 2025 GMT
Not After : Nov 12 01:22:08 2025 GMT
Subject: CN=690aa6c0-e90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:11:d7:27:c1:7d:08:88:a9:77:3b:71:b7:a0:
11:3e:6c:c0:60:36:be:38:7d:c5:67:75:4d:d5:ad:
70:6e:ef:87:41:d3:db:54:4b:bd:5e:04:eb:13:44:
31:ff:e8:86:1e:05:45:20:ba:62:87:15:f3:69:b9:
ca:84:40:c7:c0:c3:aa:73:09:b6:7e:61:8c:97:8d:
6b:ad:8e:d4:55:54:11:0f:73:fd:07:45:f2:24:86:
02:c0:03:c7:3e:4d:e4:25:99:bb:38:ec:53:3c:04:
a6:57:9a:52:61:ce:68:1e:8f:d6:30:33:06:d2:8f:
bd:8b:fc:6a:9f:fe:73:c2:2c:ad:b0:c5:7c:7a:6c:
37:e5:29:f1:54:93:d0:dd:7e:b2:45:e7:9d:61:d6:
6e:d8:a8:57:1d:cf:69:29:f2:85:8f:ca:e9:ca:41:
10:e6:74:2a:8b:30:5b:ed:f7:3b:7e:89:29:43:e7:
e6:2b:c9:72:48:98:fc:40:14:e6:ef:54:53:ea:77:
0b:42:63:8d:5c:d1:c5:e0:7e:de:05:35:5b:fb:3d:
41:15:e7:fd:74:84:41:f7:a8:68:95:49:79:2c:3b:
fa:64:e5:58:26:2b:92:fe:d9:17:a7:6b:78:ad:7a:
86:ee:7e:a9:1c:7f:86:78:23:71:87:c8:c4:20:8a:
e2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8B:12:02:BA:DF:26:C3:0E:6B:BF:16:EF:C7:B5:E8:BF:CB:EB:7B
X509v3 Authority Key Identifier:
keyid:5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b8:26:2a:48:77:01:90:8d:b7:d3:ab:6b:ad:a7:2d:11:07:
e6:b2:08:03:e4:9e:59:53:b3:66:51:78:e6:3d:a6:ee:8f:9a:
85:e0:64:28:3d:ff:50:4a:35:54:07:17:f2:8d:21:27:e3:0f:
da:2d:70:02:82:11:80:b3:e1:ec:11:8c:57:5e:8c:e5:20:f1:
f1:d1:f8:07:a4:d8:96:47:f6:91:5b:1e:af:2c:48:4e:89:ea:
89:a9:c0:99:cc:9c:d9:d6:a4:ad:aa:4a:2b:17:67:63:21:12:
fc:62:3e:6a:53:04:66:f9:06:7a:91:f1:2e:ae:20:23:6f:ad:
e9:e5:6a:69:bf:f1:c0:66:74:7e:9e:e2:99:34:57:ba:8b:3e:
8d:b6:00:1b:e6:23:12:87:5a:6b:1c:d4:1b:2b:d0:19:28:93:
a1:e4:a0:62:94:86:6f:dd:1c:1a:11:d7:9d:9c:f0:cf:be:4a:
fd:f2:d2:91:73:f4:bf:f8:7a:14:02:8b:c5:0b:68:d6:d5:a2:
b0:41:ab:75:18:5f:2c:f0:e7:9a:f7:86:9c:5b:30:a3:52:5c:
98:06:e8:0d:85:20:57:10:0c:98:e8:70:9f:6a:27:d7:86:71:
5c:52:e3:eb:40:22:3c:e0:ce:50:e4:2b:62:dc:ac:3e:94:db:
57:1e:86:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:34:08 2025 by rpki-client