
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
File: 75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft (raw, json)
Hash identifier: DIQQMzmIhcPQhbCvs/zb1PLk2URYOvVUo1eOiMMkh28=
Subject key identifier: A4:BB:F9:1A:23:A3:88:7B:4F:61:97:2C:A3:12:71:3D:09:A6:B1:6D
Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B
Certificate issuer: /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
Certificate serial: 0227
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
Manifest number: 01FD
Signing time: Mon 03 Nov 2025 02:46:41 +0000
Manifest this update: Mon 03 Nov 2025 02:46:41 +0000
Manifest next update: Mon 10 Nov 2025 02:46:41 +0000
Files and hashes: 1: 75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl (hash: QYVvYWWqo1fx8I+5AWmLWx7E3J5W7LKZyS0eV1+Zu0w=)
2: 267FE3681C4B11F082276911C4F9AE02.roa (hash: IwAZrjoyGmsUGmE4JOsWaeHq5fs6QvEAYA+JnsGMyLo=)
3: B8CCCFC8FE4711EF9822D46AC4F9AE02.roa (hash: OMFUXP/cctAoz4Xum6QNfmkgufq2udvA4e2an/c9gCg=)
4: 7C796C5E743311F0BAAA8B29C4F9AE02.roa (hash: oV+7pciFu8VhBC86X8ypaBvDmcSTDXLU7n3WAsVVpeU=)
5: F0405FAA173E11F0886E164DC4F9AE02.roa (hash: zzTZ2v/QQIL7TDyv16awWZb2KAHKEWBvbuP604gn8Co=)
6: E0A8B344173E11F093E0F04CC4F9AE02.roa (hash: baZGvTyIaF8PILI14dVTbXunLuwY6sMo3vWHfxxLvRw=)
7: 1A6C2ADE173F11F08E4D594DC4F9AE02.roa (hash: lfkr3wnF/gd810FZkIOk1rPPX3nFh2BPUr1atDdR1QQ=)
8: 6B2903E61C4B11F09DCEDB11C4F9AE02.roa (hash: /jkIGuU72p12nz6+bmqYXQjGUP7RRNXyE9lz7PQstzA=)
9: 19CBA44C173F11F08E4D594DC4F9AE02.roa (hash: fGTHrD4EoaVLUBeDI8+wRQTcKC/emxbBQTiRlGHrOYk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl
rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 02:46:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 551 (0x227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3C87, serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
Validity
Not Before: Nov 3 02:46:41 2025 GMT
Not After : Nov 10 02:46:41 2025 GMT
Subject: CN=69081791-2853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:62:1b:cc:d0:20:99:ac:18:4d:d6:cb:c7:77:
1d:3b:c0:39:58:6c:02:41:9c:7b:85:d5:5f:69:20:
13:be:36:6f:7c:6a:5a:e8:ea:b2:ad:77:5e:65:f6:
59:87:ec:3b:90:b0:4c:58:76:c9:3a:79:b5:11:7a:
a2:e2:62:78:79:62:8c:98:28:95:91:d6:7c:98:b5:
e9:a7:5e:84:06:98:da:8c:fc:3c:97:bc:42:2a:d4:
7f:01:c0:f9:1d:5c:13:ec:fe:17:44:ec:0f:37:aa:
aa:59:0d:e4:09:f4:16:c5:65:7c:18:62:92:2d:1c:
f1:ee:b8:5e:a2:59:48:a1:bf:1e:cc:e5:7b:8c:b6:
8c:7f:70:8a:ae:a1:20:a4:6c:10:f0:37:af:5c:97:
2d:af:55:77:98:85:4d:d7:55:ea:20:e9:32:6e:47:
b2:2c:89:7e:e6:59:17:e7:84:c1:11:61:8d:42:cd:
fc:e6:56:46:d7:8d:40:dd:c6:f2:7f:7d:c1:c4:c2:
01:7d:37:b3:d5:1d:66:41:68:73:52:db:79:96:52:
1f:4a:4b:36:f8:8d:f2:ba:57:7c:2c:9c:4b:60:9e:
dc:49:e3:8b:52:27:ee:a6:11:83:0d:fa:9a:6a:18:
95:4a:6f:e6:49:78:02:a9:d9:50:27:ec:e0:8e:7c:
0d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BB:F9:1A:23:A3:88:7B:4F:61:97:2C:A3:12:71:3D:09:A6:B1:6D
X509v3 Authority Key Identifier:
keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:d3:28:06:3b:b3:fa:6c:f7:c6:59:e8:c4:ae:e9:ef:e8:b9:
aa:77:ce:2f:47:e9:6d:81:73:d3:87:5d:c8:3b:14:e2:92:4b:
88:af:d7:27:8f:22:51:78:cd:9f:e5:10:fc:b0:f2:96:eb:59:
e4:5c:c2:8b:c4:de:ba:5c:19:9e:64:d6:d2:e9:ac:9e:56:42:
f1:3f:4c:73:71:40:3a:34:88:66:d5:9e:79:f3:cf:6d:22:da:
0b:ee:cd:c7:f1:94:d4:8a:0a:9b:ef:8f:7c:8a:bb:14:b1:4d:
b0:86:42:b0:0a:b5:84:5f:6d:57:0c:3b:f5:08:18:9f:df:20:
1b:69:a5:81:78:34:f9:61:b8:a3:3b:a3:a8:2c:e2:ac:e5:6f:
3e:93:13:ac:72:d3:c6:e8:4d:d5:b8:f3:ea:7a:1a:21:60:a8:
2f:13:53:e9:53:02:b1:db:54:89:7e:b3:47:cf:2b:86:be:0c:
15:bc:b0:74:0a:ca:0d:68:13:48:33:3c:8a:96:0a:86:d7:4e:
44:29:7e:5f:95:4f:c5:8c:31:41:5b:d2:d1:07:82:15:73:8f:
69:f6:52:4a:8e:ee:51:95:a1:b6:6b:c3:38:aa:66:7d:dd:28:
f8:ac:f2:1d:25:4d:d2:ef:39:6a:41:c0:28:16:41:f9:ea:61:
ca:59:42:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:01:48 2025 by rpki-client