
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft
File: SXppmDQJrXDCF1ZAccz1vjTFG8c.mft (raw, json)
Hash identifier: 5bohjWz9zj8wwtlEt0zrvWzv47RgTZhLcGZQapOTnmU=
Subject key identifier: B1:D8:CC:6F:95:CB:FC:A7:5C:10:11:10:91:3D:D8:B4:C4:75:D0:99
Authority key identifier: 49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7
Certificate issuer: /CN=A91C751F/serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7
Certificate serial: 04C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft
Manifest number: 04B6
Signing time: Sun 02 Nov 2025 23:54:39 +0000
Manifest this update: Sun 02 Nov 2025 23:54:38 +0000
Manifest next update: Sun 09 Nov 2025 23:54:38 +0000
Files and hashes: 1: SXppmDQJrXDCF1ZAccz1vjTFG8c.crl (hash: 6hVBZV88s437drws+4QUBDSMi3vP4w8APlje3SsHPBE=)
2: E9237B16683211EDA8B5DD35C4F9AE02.roa (hash: m/W09ZD2DgnbOhKrF8d5SNMRuuUCLsB529DhjnozbkQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.crl
rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 23:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1220 (0x4c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C751F, serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7
Validity
Not Before: Nov 2 23:54:38 2025 GMT
Not After : Nov 9 23:54:38 2025 GMT
Subject: CN=6907ef3e-3d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bc:95:64:5f:84:53:d1:e9:94:07:22:06:32:
2a:6e:92:32:36:a5:8d:a9:cf:91:35:77:b2:b9:be:
81:5f:e6:b5:49:4f:4e:6c:e0:91:85:16:49:49:ca:
bb:d3:ac:d2:db:85:10:95:74:ca:ec:b4:a7:45:cb:
9c:bd:22:77:92:b6:23:ce:69:18:2c:b9:c0:e1:68:
c4:f6:f1:07:20:4e:82:92:42:25:05:5d:81:1e:2c:
bf:ce:6e:ab:36:78:85:78:7e:f8:97:b9:00:22:06:
7b:a6:22:0f:eb:55:ee:05:28:79:f8:47:25:45:0e:
8c:59:52:01:b0:15:4e:aa:dd:23:c6:f9:dd:0c:45:
de:bb:4e:ae:30:09:b0:53:84:88:4c:af:e9:02:17:
b6:24:40:f2:db:4a:1c:e8:ee:84:e8:ac:21:fb:d4:
f8:78:af:ab:ac:d3:2e:75:45:e6:e6:7f:bc:59:e0:
1b:e7:21:74:99:4e:3e:bc:8e:87:5b:94:b2:2a:aa:
8b:d3:cc:60:e1:e3:62:c7:13:25:74:d7:0c:98:fd:
a4:b6:e2:0a:2e:fa:3a:40:3f:28:15:09:00:81:f7:
01:6f:2f:8f:30:36:b9:cc:64:2e:7e:50:db:73:19:
4d:73:b6:d0:da:2f:66:3d:85:d4:3a:9f:b7:7d:dd:
d0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D8:CC:6F:95:CB:FC:A7:5C:10:11:10:91:3D:D8:B4:C4:75:D0:99
X509v3 Authority Key Identifier:
keyid:49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:1c:aa:72:f7:12:2d:b8:14:01:ef:c4:c1:13:26:20:4c:db:
9f:38:da:4e:60:86:46:be:97:17:45:0f:30:1b:0f:dd:8f:f2:
b9:ac:98:7a:3e:20:f8:7b:7c:97:61:0c:27:e5:49:8a:c3:60:
03:ff:e8:20:15:e9:88:8c:1f:3c:3f:35:b0:a8:1e:7e:ab:7f:
1f:8d:9e:a6:17:04:d4:4f:d9:57:4c:15:9e:c6:59:30:d6:0a:
14:74:fc:e9:34:52:65:15:bd:68:e8:3f:76:89:d9:28:5f:1c:
f2:1b:15:5b:18:7d:bc:ba:67:4c:e0:ef:4d:ae:6b:15:bd:a0:
49:3d:da:2f:86:a1:d4:c4:74:c5:a0:c7:2c:61:34:54:17:08:
51:1a:d5:e0:2a:1e:79:ec:6f:0b:4b:51:91:2e:a5:80:1d:77:
08:b4:73:e3:54:60:0c:43:de:1d:e1:ef:6d:2f:dd:b1:70:ac:
bd:d7:e2:e9:28:5f:f9:89:1e:1d:a2:36:37:ed:e8:de:d2:43:
3c:28:b2:d6:1a:37:fd:50:07:79:68:4e:1c:25:e1:e5:5f:3c:
8e:1e:71:15:7a:35:3f:77:3f:4b:b0:01:f8:46:34:42:42:25:
00:70:1a:35:05:8c:fc:d2:24:4a:f4:c2:ff:5c:da:e0:bd:12:
4b:18:2a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:24:23 2025 by rpki-client