
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft
File: jVurNwypLk9f14n8InMxD5rqOPY.mft (raw, json)
Hash identifier: IuM8HPy/6CI0fuwJFOmuInXB2Je824DzEMgSiBBZ6SU=
Subject key identifier: CC:85:C5:D1:59:73:D3:1F:C3:99:D6:AA:8A:35:54:79:87:21:8F:BE
Authority key identifier: 8D:5B:AB:37:0C:A9:2E:4F:5F:D7:89:FC:22:73:31:0F:9A:EA:38:F6
Certificate issuer: /CN=A91E7290/serialNumber=8D5BAB370CA92E4F5FD789FC2273310F9AEA38F6
Certificate serial: 0584
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVurNwypLk9f14n8InMxD5rqOPY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft
Manifest number: 0574
Signing time: Sun 02 Nov 2025 23:22:49 +0000
Manifest this update: Sun 02 Nov 2025 23:22:49 +0000
Manifest next update: Sun 09 Nov 2025 23:22:49 +0000
Files and hashes: 1: jVurNwypLk9f14n8InMxD5rqOPY.crl (hash: cmQ0FsozXwteghIz60cacRUw+SOHNlW+pyUwfoOKu0k=)
2: 4F3ABD0EE1BE11EFBB23912EC4F9AE02.roa (hash: dz/S8eDbHmndjXTOuJkGfGiQYc10aVqQzusp0F+1yvQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.crl
rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVurNwypLk9f14n8InMxD5rqOPY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 23:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1412 (0x584)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7290, serialNumber=8D5BAB370CA92E4F5FD789FC2273310F9AEA38F6
Validity
Not Before: Nov 2 23:22:49 2025 GMT
Not After : Nov 9 23:22:49 2025 GMT
Subject: CN=6907e7c9-b81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:c0:a2:15:a6:7e:40:b4:03:67:bd:56:d2:
a0:c4:b2:e7:0d:4a:05:d9:59:40:43:3b:d5:9a:9b:
0e:21:71:ae:8c:01:5c:6f:ae:22:b2:53:7e:35:7d:
16:6b:1a:cb:eb:5f:b7:53:89:69:1e:25:ca:55:ba:
05:76:6d:b2:db:4c:5f:b1:be:d7:c8:9e:db:fb:9f:
b0:a1:03:db:bd:e6:5e:88:bf:d8:ff:75:24:ef:b3:
8c:8f:87:60:e9:fa:4a:52:ef:9a:0a:19:74:7c:bf:
94:d5:29:20:82:b4:97:53:01:e2:7e:6f:3d:dd:9f:
0d:47:4a:c9:c5:df:b8:23:d2:7b:dd:80:06:f0:f9:
95:c2:b4:77:67:c1:81:d2:ad:4d:49:d3:fb:79:07:
8d:66:bb:fe:cb:37:47:0b:3e:5d:8a:47:a4:8b:52:
d3:42:a6:81:61:1d:5b:ce:ba:4d:49:65:9c:2b:28:
bb:42:f7:e7:49:64:8e:10:5b:33:3d:f4:55:6b:c8:
c6:10:97:8b:09:40:27:2a:0f:28:7d:59:6f:3d:92:
66:08:be:b0:c2:e0:07:43:cb:39:b6:b1:a3:64:94:
05:09:f0:f7:b8:af:50:6c:61:6f:bf:c9:1b:d3:ed:
97:9d:67:06:2d:c6:e5:35:2c:32:29:2c:71:17:73:
13:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:85:C5:D1:59:73:D3:1F:C3:99:D6:AA:8A:35:54:79:87:21:8F:BE
X509v3 Authority Key Identifier:
keyid:8D:5B:AB:37:0C:A9:2E:4F:5F:D7:89:FC:22:73:31:0F:9A:EA:38:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVurNwypLk9f14n8InMxD5rqOPY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:88:ff:60:be:8a:13:b7:9b:37:55:8d:ec:0a:eb:65:53:17:
a5:81:f0:00:a2:c0:16:0f:3a:9b:ee:b5:23:94:6b:22:ce:4f:
9f:92:aa:b3:06:9b:cc:e8:dd:b1:d5:2d:e3:c1:50:23:e0:66:
7c:e0:d4:3b:75:38:8f:5e:1a:a3:f7:c2:9c:b2:78:14:2f:a9:
cb:82:20:0f:39:b5:1a:75:68:3b:e9:b9:7c:c9:29:cb:13:76:
20:81:2a:a3:ae:cb:82:62:f2:85:f8:b1:67:57:aa:c5:cd:e5:
41:10:ef:76:7f:6a:b3:75:68:98:86:5d:34:80:10:81:3f:cd:
64:dc:2a:90:9b:c2:c7:65:14:30:19:e7:3f:6e:47:21:91:d8:
8c:f6:ba:00:20:ba:5d:ab:4e:76:08:7b:33:7f:0a:9b:b4:c0:
f7:64:9d:d8:58:59:43:af:1e:47:c6:84:2d:db:48:4a:df:47:
b1:a0:9d:04:6b:3f:af:e5:0f:b6:7d:07:e8:4f:8b:28:d3:ef:
a0:5d:c0:02:da:1b:90:06:c1:f4:ac:3a:03:87:0a:91:31:e5:
61:ef:ff:38:bd:71:3c:85:f3:86:f6:d8:d4:65:f4:f4:10:40:
8e:4c:df:68:9f:2b:a7:8a:d6:d6:3d:15:0c:ee:f7:2e:ed:21:
39:c1:aa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:36:44 2025 by rpki-client