
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
File: 9Jo51DCJcORwLfKfHU3PUh8KUTU.mft (raw, json)
Hash identifier: IDLVODUFXz14Q9HtTRjvY06uvtQMqkUS/sE505fiB1s=
Subject key identifier: 53:66:90:5C:70:F4:34:01:63:77:54:6B:92:9F:F8:0F:CD:A9:6E:66
Authority key identifier: F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35
Certificate issuer: /CN=A91D2258/serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135
Certificate serial: 0378
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
Manifest number: 0373
Signing time: Wed 05 Nov 2025 00:57:46 +0000
Manifest this update: Wed 05 Nov 2025 00:57:45 +0000
Manifest next update: Wed 12 Nov 2025 00:57:45 +0000
Files and hashes: 1: 9Jo51DCJcORwLfKfHU3PUh8KUTU.crl (hash: A16Zpk2jVAiEzCegvKhy4PhurHlIBxo13P6jDL9QbcI=)
2: E27CA57ECA9111EC9F9A7513C4F9AE02.roa (hash: C1ezUxuL3ClkX3BgQjjS1dTVihRitOogxbbsy9SR+JY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl
rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:57:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 888 (0x378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2258, serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135
Validity
Not Before: Nov 5 00:57:45 2025 GMT
Not After : Nov 12 00:57:45 2025 GMT
Subject: CN=690aa109-fbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:a2:64:f6:85:df:10:dd:9e:11:a8:73:11:
43:a8:0a:cf:44:24:52:21:e2:70:2d:5f:67:35:d7:
98:c2:c0:ad:69:e3:a3:e6:af:46:14:af:73:11:dd:
5a:0c:c2:13:f9:68:0e:f2:8b:fd:6d:4f:a9:44:de:
11:58:34:80:86:50:a2:41:35:fd:7e:ea:12:6c:09:
7b:24:01:8f:56:e0:4e:ea:40:d4:54:e4:69:96:39:
91:c8:4a:aa:4a:20:9b:07:e6:f0:47:70:2f:55:e8:
e8:e2:35:98:39:f6:ab:55:99:41:61:9b:63:ce:64:
a6:36:5a:2f:42:72:18:20:1a:9a:78:43:e1:c9:26:
ab:78:69:3a:73:f1:29:3c:bc:2e:ea:4b:44:29:73:
4d:60:7f:3b:d0:2c:f3:80:ba:98:f8:b8:de:31:37:
9d:0c:46:c9:00:f4:39:f0:c6:a3:99:c0:e7:9d:2b:
6d:0d:b7:ae:e4:2f:6b:48:e6:50:75:a3:c1:8b:b7:
0d:c8:21:d2:8b:e2:bb:c7:ef:a3:f2:d1:22:2d:08:
50:fa:53:b4:32:ba:da:59:c4:69:8f:83:0d:33:e3:
34:f9:be:43:99:d5:d6:d2:2b:c9:a7:34:dc:5c:8d:
bd:05:a5:a4:a6:98:28:a9:0b:5b:f5:d1:c8:cf:f3:
6b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:66:90:5C:70:F4:34:01:63:77:54:6B:92:9F:F8:0F:CD:A9:6E:66
X509v3 Authority Key Identifier:
keyid:F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:3f:4d:46:28:81:fc:2c:96:dc:54:5d:7f:02:e3:65:7a:dd:
d2:53:a6:71:59:4a:45:54:e9:77:d3:18:1d:3c:93:ad:19:8c:
94:9c:81:44:ac:f4:e3:c7:1e:ee:4a:02:a7:b1:93:15:cc:1c:
be:74:18:bd:08:b7:d7:24:45:41:17:15:f9:a1:4e:c6:aa:14:
78:a5:4a:14:64:8b:a5:19:f5:bb:17:7f:5b:47:e9:ed:02:2e:
1d:01:93:c7:88:36:91:6f:ae:f4:f5:51:82:39:ad:ed:64:92:
3c:34:81:77:4e:a0:53:97:0e:f8:8e:2a:c2:03:95:8e:b6:fd:
e3:86:b4:6f:79:56:da:64:28:db:d9:7e:52:78:f6:da:13:a9:
a5:6c:50:36:a9:da:7c:27:25:56:46:ca:1e:08:e7:a2:4d:d9:
d7:59:33:07:68:43:0c:41:de:a6:9d:a2:de:5e:96:fa:cc:bd:
4d:70:5a:f4:6e:b8:18:a1:3b:9f:24:83:1f:fd:3e:86:aa:a2:
42:53:fc:f4:34:b7:40:0a:04:dd:87:00:4a:94:5f:7e:b8:f4:
16:e3:5e:08:d5:bb:43:d1:0d:3d:ed:dc:c4:45:b6:d0:fe:94:
4b:01:5f:21:18:36:8a:b0:9f:88:64:85:71:09:2d:cf:a9:7d:
aa:fb:60:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDIyNTgxMTAvBgNVBAUTKEY0OUEzOUQ0MzA4OTcwRTQ3MDJERjI5RjFENERDRjUy
MUYwQTUxMzUwHhcNMjUxMTA1MDA1NzQ1WhcNMjUxMTEyMDA1NzQ1WjAYMRYwFAYD
VQQDEw02OTBhYTEwOS1mYmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxveiZPaF3xDdnhGocxFDqArPRCRSIeJwLV9nNdeYwsCtaeOj5q9GFK9zEd1a
DMIT+WgO8ov9bU+pRN4RWDSAhlCiQTX9fuoSbAl7JAGPVuBO6kDUVORpljmRyEqq
SiCbB+bwR3AvVejo4jWYOfarVZlBYZtjzmSmNlovQnIYIBqaeEPhySareGk6c/Ep
PLwu6ktEKXNNYH870CzzgLqY+LjeMTedDEbJAPQ58MajmcDnnSttDbeu5C9rSOZQ
daPBi7cNyCHSi+K7x++j8tEiLQhQ+lO0MrraWcRpj4MNM+M0+b5DmdXW0ivJpzTc
XI29BaWkppgoqQtb9dHIz/NrKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNmkFxw
9DQBY3dUa5Kf+A/NqW5mMB8GA1UdIwQYMBaAFPSaOdQwiXDkcC3ynx1Nz1IfClE1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjI1OC82MzhDMzg0NENB
OEYxMUVDOTMzQUIyMTFDNEY5QUUwMi85Sm81MURDSmNPUndMZktmSFUzUFVoOEtV
VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlKbzUxRENKY09Sd0xmS2ZIVTNQVWg4S1VUVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MjI1OC82MzhDMzg0NENBOEYxMUVDOTMzQUIyMTFDNEY5QUUwMi85Sm81MURDSmNP
UndMZktmSFUzUFVoOEtVVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCqP01GKIH8LJbcVF1/AuNlet3SU6ZxWUpFVOl30xgdPJOtGYyUnIFE
rPTjxx7uSgKnsZMVzBy+dBi9CLfXJEVBFxX5oU7GqhR4pUoUZIulGfW7F39bR+nt
Ai4dAZPHiDaRb6709VGCOa3tZJI8NIF3TqBTlw74jirCA5WOtv3jhrRveVbaZCjb
2X5SePbaE6mlbFA2qdp8JyVWRsoeCOeiTdnXWTMHaEMMQd6mnaLeXpb6zL1NcFr0
brgYoTufJIMf/T6GqqJCU/z0NLdACgTdhwBKlF9+uPQW414I1btD0Q097dzERbbQ
/pRLAV8hGDaKsJ+IZIVxCS3PqX2q+2Dg
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:03:19 2025 by rpki-client