
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
File: bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft (raw, json)
Hash identifier: v8UTNnmujcurmtZ9Gtz5KI34mEwaU+X51JR7ioV5aYY=
Subject key identifier: 7F:A3:22:3A:98:F6:AC:99:65:0E:E6:66:89:FA:CE:90:47:AB:5F:46
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial: 369A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
Manifest number: 35CD
Signing time: Sun 02 Nov 2025 14:17:44 +0000
Manifest this update: Sun 02 Nov 2025 14:17:44 +0000
Manifest next update: Sun 09 Nov 2025 14:17:44 +0000
Files and hashes: 1: bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl (hash: dQT+3VJd2ituDmL3qGYd67ECMGt5l4bVbccEg1E79FQ=)
2: 119B023E80A111EFAC559545C4F9AE02.roa (hash: zYkOqurzCzToKjFWw1JFREq9sP5L0Ox+j8SjAIM1s0g=)
3: 4703352E2BC311EEA3EEFA66C4F9AE02.roa (hash: QIkAoP/By0cGmSZKZV7Us1AkVMW2odFekLlf+/kQhNs=)
4: FCBF1666677C11EBB2A3F00CC4F9AE02.roa (hash: mbhuy04A8zuqh2VQYoyVQz/nubKm5uM/LXn3ihnguHc=)
5: 88978730772311EBB972032EC4F9AE02.roa (hash: HjKqHMfxVfYxTOl9WdJ4/LY87H7R42UxSxjcHgvm5bI=)
6: 331F345A383611E6B2282B5DC4F9AE02.roa (hash: BOms9OY6+UIB6aMBGACYroj4QGSk/YT0f0983Woe8qE=)
7: 7EF4796CA7DF11F0B8B8DF33C4F9AE02.roa (hash: gBzIoTcl0pF/I9Mogf5bYnX80PYd1Prm+6rq6teZd8w=)
8: 318FB51A383611E6B2282B5DC4F9AE02.roa (hash: I6jxZTqpjwiUfJAwpZoNi2Gm52AIuuh+evMbf0QauW8=)
9: 328EDB76383611E6B2282B5DC4F9AE02.roa (hash: LVPfSpZ0kKMp22v4SWIIQyCCry6IBJmlcWqFISdxj5A=)
10: 3204348A383611E6B2282B5DC4F9AE02.roa (hash: aOSpyI8MZjB7JifoHMKo83Bhs4V52OgvV8PHhV/cS3k=)
11: 89A73D46772311EBB972032EC4F9AE02.roa (hash: ENYLfShbh18F4DkP0j/X7mK87WIoKIhUNMFfz+VNeYQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 14:17:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13978 (0x369a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Validity
Not Before: Nov 2 14:17:44 2025 GMT
Not After : Nov 9 14:17:44 2025 GMT
Subject: CN=69076808-3027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:1e:c2:2b:6f:27:52:d2:7c:2f:c7:15:4b:
9e:dd:6c:56:cf:6c:24:1c:b5:39:b2:14:24:d7:e8:
59:52:9e:2c:3f:66:db:aa:45:85:52:5b:ed:5c:30:
4c:00:3c:28:82:78:57:0d:4a:d1:90:bf:d7:ec:56:
ff:00:77:2c:71:44:f4:67:52:90:75:8b:a9:d2:3f:
42:0e:9a:c6:4b:7d:06:5c:26:93:ce:38:34:a9:63:
bc:96:a8:c4:44:96:f9:f0:3d:69:0c:da:6d:97:b5:
23:d0:d3:dc:17:ce:c0:11:3f:dc:c4:0c:0d:18:57:
d7:17:27:c2:9d:6d:b6:09:a2:34:2a:c0:4b:bb:bf:
fb:53:82:97:6d:2f:e2:3a:de:86:7d:1a:30:f8:e6:
58:26:ba:f5:bb:c5:02:19:8c:80:f8:b6:50:70:0d:
59:8d:1b:01:8f:fa:d1:44:35:50:59:35:8e:b3:fe:
5b:3a:a2:44:e5:05:cc:d9:87:7b:01:38:03:f3:37:
e9:c1:b9:4f:1e:be:83:5b:97:1d:75:a5:0a:6a:94:
08:e2:b6:fd:37:35:7a:1c:91:b2:34:17:0d:c3:5d:
89:7d:65:36:82:ee:c4:23:54:91:41:58:4c:ab:14:
fd:95:9b:8a:0d:46:3d:76:92:ad:fd:38:d1:21:cb:
72:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A3:22:3A:98:F6:AC:99:65:0E:E6:66:89:FA:CE:90:47:AB:5F:46
X509v3 Authority Key Identifier:
keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e3:26:ee:cf:49:33:61:e9:e6:2a:27:98:0d:64:be:ca:17:
e4:9f:47:ef:48:ce:c3:b2:7a:16:34:c9:69:23:13:0f:de:c5:
f8:3e:f6:22:ba:8a:3d:71:47:98:ff:93:79:b3:6d:50:5d:d7:
04:a8:90:0b:2b:89:78:09:79:fc:d6:67:1a:d5:3a:23:19:b9:
7c:29:9a:07:3d:7e:5e:85:62:96:88:21:a3:3a:59:e8:b8:a9:
8b:93:b8:4b:b9:92:8a:72:5c:0a:12:06:1b:fc:ef:0f:aa:a0:
38:4a:b6:9b:4e:ac:dd:9c:f7:7d:81:26:54:c3:0d:c6:df:61:
b4:07:d6:56:f4:ee:57:fc:8c:18:3f:c2:9b:21:51:d1:92:e7:
8d:82:37:1c:25:d6:33:a8:35:ef:f8:07:cf:13:fd:be:e4:3f:
00:f8:90:fb:39:7e:56:40:91:6f:dc:5b:fa:d5:80:3d:02:63:
ba:b5:9c:b6:98:65:44:a1:bb:e8:fb:a7:91:11:86:ee:1e:c1:
7b:c8:bb:36:7a:46:7b:ec:cf:bb:e8:7e:03:2f:a9:d8:1e:14:
c0:79:94:94:ad:66:b0:bf:57:4a:4c:17:68:f4:53:6d:29:7b:
09:28:79:9f:a9:c5:27:77:e9:ec:98:84:5c:55:4f:f4:22:5a:
f4:02:0a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:18:57 2025 by rpki-client