
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft
File: JCmj7lCI89RTcqjjs2g0x16ubSk.mft (raw, json)
Hash identifier: c23rn1i0yl65TbUukmIlzRBzs50LflAxLBgguxZWzRo=
Subject key identifier: D3:CE:4B:F7:85:46:21:32:92:9B:DC:49:83:04:16:64:78:88:FE:5D
Authority key identifier: 24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29
Certificate issuer: /CN=A91EE96E/serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29
Certificate serial: 91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft
Manifest number: 8B
Signing time: Mon 03 Nov 2025 06:38:21 +0000
Manifest this update: Mon 03 Nov 2025 06:38:21 +0000
Manifest next update: Mon 10 Nov 2025 06:38:21 +0000
Files and hashes: 1: JCmj7lCI89RTcqjjs2g0x16ubSk.crl (hash: MkFD2WL79low3p6e4RN21ERaqfn3jkaxDT/HUhsqTq0=)
2: 92B377C82CB011F0A2E86B16C4F9AE02.roa (hash: FoDHZvXeH5e/XFJzf3AymBW0SIuGnIL2DXJhgfsRixg=)
3: 7F639A182CB011F08B722116C4F9AE02.roa (hash: 8SOJ6SdOtJ/q3NwLkWGRY6LjHM44wHGZjzKG2cwDOuk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl
rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:38:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE96E, serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29
Validity
Not Before: Nov 3 06:38:21 2025 GMT
Not After : Nov 10 06:38:21 2025 GMT
Subject: CN=69084ddd-61a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:50:41:7a:22:40:fe:23:24:17:3f:29:97:d8:
27:ea:e0:80:05:a4:09:6b:bf:e3:7d:b1:99:2e:56:
1d:cb:72:d7:a1:95:3e:c8:a2:95:50:6d:09:cf:70:
0f:ed:b3:f0:28:66:43:91:19:aa:28:44:4e:a1:af:
5e:54:9f:15:4c:3b:a6:8c:e9:8b:d5:42:53:ce:c5:
0f:71:2d:7f:d0:dc:73:e9:bf:64:f7:26:70:b4:2b:
a0:53:f3:2d:2c:bd:fc:ea:e2:45:59:ff:42:d1:3e:
86:c1:39:4e:57:76:d1:a1:2f:94:be:28:52:76:e7:
ea:ed:d1:0a:eb:0b:e3:b6:2a:ab:ca:63:bb:4f:19:
4b:79:ad:71:79:6f:48:55:29:b8:27:72:54:b4:7c:
64:e9:77:67:9c:77:35:0d:b8:94:81:cb:62:af:c7:
be:31:72:cf:c4:c2:c3:19:5a:b1:52:32:c7:e0:5e:
81:fc:12:6d:05:ac:8a:04:19:22:2e:6e:08:78:88:
c4:49:f3:74:9e:f8:a5:6e:94:08:2a:53:f4:cb:38:
f9:f2:3e:60:7a:40:47:01:74:be:e8:4e:a1:8e:91:
de:7e:bb:61:09:d3:3a:a8:4d:b2:a1:d9:c6:55:ae:
7f:ff:34:de:a0:cd:3a:9a:ee:16:ed:d8:57:d7:fa:
ce:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CE:4B:F7:85:46:21:32:92:9B:DC:49:83:04:16:64:78:88:FE:5D
X509v3 Authority Key Identifier:
keyid:24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:41:1a:15:a2:9a:6c:79:0e:e2:29:e3:a0:43:2d:94:1e:ca:
09:7c:b0:60:4f:63:be:b6:4a:89:0f:8c:f6:55:65:c8:22:cf:
39:50:38:67:26:fa:c6:c8:ba:1c:2b:ee:91:d5:a7:c3:e6:3e:
27:cf:28:b8:6f:bf:62:d9:d2:bc:03:71:d5:3a:ff:3a:29:e7:
2f:5a:ca:3e:81:a5:58:d3:6b:39:d0:8b:80:71:86:4c:68:61:
d1:52:d6:e2:7d:41:e1:29:8d:b5:f8:6a:39:d9:92:3a:1a:f4:
18:b8:d7:cc:34:48:d6:b8:4d:d5:70:d0:2b:89:a7:e6:21:de:
ea:26:2a:68:00:aa:a9:53:d4:7e:98:41:12:f2:f7:73:f9:43:
91:c6:57:7b:13:a3:0c:69:5a:7e:7b:74:80:f2:46:50:73:73:
30:0d:27:25:ce:a3:71:2e:3b:9d:61:78:2a:9a:b6:ed:20:e1:
3c:ee:8d:27:65:0f:23:26:a4:a8:76:8f:b5:55:53:ef:2f:8c:
9a:cd:69:ca:28:79:d6:e0:0c:7b:e5:4d:ab:ca:bc:ca:7c:2a:
a3:db:f0:96:d1:07:93:cf:89:0a:e8:87:54:92:45:16:66:c5:
8e:d9:23:8b:9e:7e:74:15:05:b1:3a:58:df:0f:98:a2:3f:06:
f6:0a:a8:06
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUU5NkUxMTAvBgNVBAUTKDI0MjlBM0VFNTA4OEYzRDQ1MzcyQThFM0IzNjgzNEM3
NUVBRTZEMjkwHhcNMjUxMTAzMDYzODIxWhcNMjUxMTEwMDYzODIxWjAYMRYwFAYD
VQQDEw02OTA4NGRkZC02MWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1lBBeiJA/iMkFz8pl9gn6uCABaQJa7/jfbGZLlYdy3LXoZU+yKKVUG0Jz3AP
7bPwKGZDkRmqKEROoa9eVJ8VTDumjOmL1UJTzsUPcS1/0Nxz6b9k9yZwtCugU/Mt
LL386uJFWf9C0T6GwTlOV3bRoS+UvihSdufq7dEK6wvjtiqrymO7TxlLea1xeW9I
VSm4J3JUtHxk6XdnnHc1DbiUgctir8e+MXLPxMLDGVqxUjLH4F6B/BJtBayKBBki
Lm4IeIjESfN0nvilbpQIKlP0yzj58j5gekBHAXS+6E6hjpHefrthCdM6qE2yodnG
Va5//zTeoM06mu4W7dhX1/rOMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPOS/eF
RiEykpvcSYMEFmR4iP5dMB8GA1UdIwQYMBaAFCQpo+5QiPPUU3Ko47NoNMderm0p
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTk2RS8yM0QyRjE2RUVD
MjExMUVGQTM1NTYwNUZDNEY5QUUwMi9KQ21qN2xDSTg5UlRjcWpqczJnMHgxNnVi
U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pDbWo3bENJODlSVGNxampzMmcweDE2dWJTay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RTk2RS8yM0QyRjE2RUVDMjExMUVGQTM1NTYwNUZDNEY5QUUwMi9KQ21qN2xDSTg5
UlRjcWpqczJnMHgxNnViU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCDQRoVoppseQ7iKeOgQy2UHsoJfLBgT2O+tkqJD4z2VWXIIs85UDhn
JvrGyLocK+6R1afD5j4nzyi4b79i2dK8A3HVOv86KecvWso+gaVY02s50IuAcYZM
aGHRUtbifUHhKY21+Go52ZI6GvQYuNfMNEjWuE3VcNAriafmId7qJipoAKqpU9R+
mEES8vdz+UORxld7E6MMaVp+e3SA8kZQc3MwDSclzqNxLjudYXgqmrbtIOE87o0n
ZQ8jJqSodo+1VVPvL4yazWnKKHnW4Ax75U2ryrzKfCqj2/CW0QeTz4kK6IdUkkUW
ZsWO2SOLnn50FQWxOljfD5iiPwb2CqgG
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:47:41 2025 by rpki-client