
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
File: Im9yidTjf-ziJgxk07y6esAxWnU.mft (raw, json)
Hash identifier: CrRIpDZamjLbnAKkdU2BdNAcSFlw5k6lL+FTQ/OuCMk=
Subject key identifier: 20:62:00:13:37:16:B7:00:A8:CD:03:D2:45:FC:5C:FC:A1:6E:D0:F7
Authority key identifier: 22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75
Certificate issuer: /CN=A91BC269/serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75
Certificate serial: 037A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
Manifest number: 0372
Signing time: Mon 03 Nov 2025 00:52:17 +0000
Manifest this update: Mon 03 Nov 2025 00:52:16 +0000
Manifest next update: Mon 10 Nov 2025 00:52:16 +0000
Files and hashes: 1: Im9yidTjf-ziJgxk07y6esAxWnU.crl (hash: 04X9sLBiSEOokxOd6QA7imjr/4YXKnvGyih22O8SqPM=)
2: 16DDC0F4CFE811ECA193B36BC4F9AE02.roa (hash: Z0vQc/FiRt/D8hScnxTd8nBTWz7d3rs3scQ6DdSb1kk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl
rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 00:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890 (0x37a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC269, serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75
Validity
Not Before: Nov 3 00:52:16 2025 GMT
Not After : Nov 10 00:52:16 2025 GMT
Subject: CN=6907fcc0-887e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d7:86:0c:d5:e4:3a:8a:b5:ba:e1:9b:6d:99:
d0:d0:84:2a:ce:28:0a:12:83:f1:56:67:e5:06:2c:
a5:b8:de:7a:82:ff:ad:63:76:9b:b7:6f:4f:e8:49:
da:6d:4c:6e:b8:3e:f2:8c:64:56:07:29:df:57:ea:
bc:57:bc:d4:b7:e9:9b:37:ee:a5:8b:f8:f1:37:96:
d1:f8:71:cd:a7:b8:85:49:d3:64:f9:05:2d:89:f6:
f4:3a:b1:2d:75:49:b2:a0:8d:ca:91:f9:63:5f:14:
76:1b:1c:b6:14:ee:7d:e4:db:a6:11:ec:e3:c6:fe:
0f:27:ae:46:78:80:48:92:45:9d:e8:1e:97:f5:68:
33:54:55:46:07:9f:74:32:74:55:63:b7:9f:ff:96:
5b:0f:e9:31:89:3e:ee:02:19:52:ae:d9:c2:f9:0e:
22:b9:a4:6b:de:32:d8:b4:74:19:e8:18:df:00:e4:
5d:12:6c:45:ad:80:f7:31:7a:6b:f2:1a:a7:61:6a:
cc:a6:cd:c9:ee:8a:c4:6a:ce:8d:89:d6:0f:61:16:
c2:49:a3:1d:d6:90:0c:84:5b:14:ac:53:a0:4f:30:
b4:6b:49:5c:95:81:96:fa:7e:28:d5:ea:dc:52:a8:
12:ba:d8:13:0f:4d:eb:cd:93:db:f2:35:d2:79:ce:
75:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:62:00:13:37:16:B7:00:A8:CD:03:D2:45:FC:5C:FC:A1:6E:D0:F7
X509v3 Authority Key Identifier:
keyid:22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:24:2c:14:8b:4a:7c:10:8c:2a:01:34:24:ff:45:b3:ec:5e:
5e:6d:22:11:49:3d:51:6a:d8:16:5d:23:c6:dc:7d:e4:0e:fe:
28:34:e9:32:cf:8b:f0:8d:54:c0:60:98:11:4b:4f:d7:79:c0:
6e:85:e9:cb:59:82:88:f5:fb:f8:5d:2d:da:60:a4:21:a6:04:
9b:a3:a7:88:a3:b3:9b:0a:e1:4f:87:52:e2:dd:ec:5c:75:49:
c2:d1:10:b5:99:46:cd:27:4c:c5:87:c5:a8:63:2f:e0:6b:f6:
08:b7:96:a9:58:cd:df:50:3f:5c:24:98:2b:01:66:3f:91:a5:
72:de:f5:35:ef:74:5b:25:83:67:d7:f1:f9:3a:8e:09:24:87:
6b:39:56:ff:41:39:ed:80:81:22:63:f3:0f:4f:59:55:85:b9:
d5:cb:a0:f4:e4:95:43:f5:d1:66:2d:95:76:df:50:1f:cc:5f:
28:57:3a:3a:76:9e:30:e2:8e:d5:e4:f0:7b:ce:d3:3b:14:02:
dd:f5:d0:6e:d5:cb:15:ab:5a:4d:ee:22:da:5c:7c:29:5c:8f:
ac:88:df:0d:d4:74:dd:35:05:dd:3a:b9:f7:93:2f:98:68:2a:
08:14:01:2c:a4:1e:13:7d:e4:0e:b0:c8:64:ef:ac:fe:0f:a6:
05:ce:ec:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:58:34 2025 by rpki-client