
$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
File: jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft (raw, json)
Hash identifier: 9NLqEyNwJMw8XbXgtl7VmAd5M3KnkQqp1PkTdpOlyB8=
Subject key identifier: B7:61:30:FA:D6:AF:7A:ED:7F:2D:01:89:0E:79:E6:A5:18:BD:77:7C
Authority key identifier: 8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41
Certificate issuer: /CN=A91733A8/serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441
Certificate serial: 09AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
Manifest number: 098C
Signing time: Sat 18 Oct 2025 21:11:56 +0000
Manifest this update: Sat 18 Oct 2025 21:11:55 +0000
Manifest next update: Sat 25 Oct 2025 21:11:55 +0000
Files and hashes: 1: jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl (hash: e3JGvjKT8MoPH4v7fSc3KJaajxUX586hmuqeYng9IyM=)
2: F6810AC0D0DC11EA9B1DF432C4F9AE02.roa (hash: X16lFY6K2nhljbiLaCzlwi3FHh2sWAR/KpBd/NkhGQQ=)
3: E3A38380A1C811EA8C425C58C4F9AE02.roa (hash: 5iCZA8jYlZk3gHKxMQWGtU7Eku76azBHbjf03/KNSIU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl
rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 21:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2478 (0x9ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91733A8, serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441
Validity
Not Before: Oct 18 21:11:55 2025 GMT
Not After : Oct 25 21:11:55 2025 GMT
Subject: CN=68f4029b-a920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:7c:ff:57:6e:f0:86:ff:c9:ca:f9:57:26:
90:15:0b:be:e5:57:6d:4b:52:67:46:cf:07:5d:77:
d5:e3:3e:44:f1:e1:d4:e3:17:4b:10:5f:13:37:f3:
28:df:e3:2b:cb:d7:21:88:0b:d6:f5:07:69:1e:d8:
99:4a:23:9e:73:33:60:e0:27:25:d6:62:4b:88:c3:
fd:6e:f8:5c:e0:3a:7e:f2:0a:29:6a:2e:e7:2d:55:
11:c4:8b:cc:68:5f:44:4f:57:5d:b4:91:a5:cf:16:
69:32:9b:78:d2:7d:65:5a:4d:28:0f:e8:c8:8b:b9:
0a:91:19:e6:e6:6c:99:ff:4f:8d:ce:86:cd:79:a8:
4b:de:81:3c:14:46:3b:c9:2c:48:6b:71:ab:04:51:
ef:7e:e6:ad:6a:be:64:74:98:e2:0c:93:f9:1d:61:
ef:95:48:9f:f4:3a:51:85:5d:f3:db:01:c4:a9:ee:
7d:8c:7c:09:76:71:7b:ed:97:b7:4f:d9:78:96:48:
2c:15:4e:e9:32:ff:b0:b7:31:ed:a8:ba:74:42:eb:
6e:4e:f0:38:48:d1:c3:ca:4a:e4:d3:3a:77:f6:82:
e3:1e:a5:e5:88:d1:51:65:05:9f:de:c8:e6:7f:4d:
e3:24:c1:79:85:bf:c3:48:d6:63:b9:d9:97:fb:ba:
14:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:61:30:FA:D6:AF:7A:ED:7F:2D:01:89:0E:79:E6:A5:18:BD:77:7C
X509v3 Authority Key Identifier:
keyid:8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:15:85:cd:1b:00:00:2a:52:b9:90:90:a6:d0:5e:c3:78:5f:
7e:1c:f4:eb:ff:c0:d6:61:67:a4:2b:d6:fc:8a:ef:36:13:b3:
87:c0:29:b3:7e:4f:03:0b:db:df:ce:48:09:81:5c:f0:b5:db:
29:53:fe:ea:4b:5e:20:3a:f9:a6:7a:ee:51:d9:78:a6:bf:5d:
f6:5a:ce:c4:c9:b6:93:17:8f:8f:9b:7f:6c:aa:af:38:52:78:
c0:22:4b:0f:40:59:3d:c5:93:be:7d:d0:0e:c5:93:39:2f:b8:
43:fd:7b:5b:c4:f2:cf:44:53:0d:ba:26:d4:15:cc:96:e0:e5:
60:1a:ce:33:e2:bf:f9:4a:ae:26:79:7d:f3:8a:a9:c2:4a:78:
f9:b7:d8:45:d2:7e:55:1b:e2:34:a6:ae:38:fa:79:38:b0:13:
23:87:ed:f3:19:81:38:85:ea:0b:d4:0d:83:f6:72:a5:ca:73:
41:f8:bb:7f:1a:41:d2:3a:84:3d:26:b3:ef:32:63:d2:0f:4c:
ed:5a:f5:57:4d:9e:ed:e3:d9:30:5f:39:82:68:33:52:a1:32:
c4:99:fa:03:d4:87:24:38:ab:76:45:a3:5b:d0:d9:6a:5c:c0:
e8:22:5c:c6:ad:5d:53:09:70:89:16:08:bb:f7:41:d8:36:bb:
68:8d:35:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:27:44 2025 by rpki-client