
$ rpki-client -vvf rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
File: Ip7mz7eVhLojEKzORSg496SKUB4.mft (raw, json)
Hash identifier: arD6+Rng5/CjIaxdp3DmULwgPLNbWg/YqpnDreBlOEE=
Subject key identifier: 59:0B:D5:A1:FF:A4:BC:BC:07:6A:40:8A:E0:7D:E7:AA:A2:8F:3A:3D
Authority key identifier: 22:9E:E6:CF:B7:95:84:BA:23:10:AC:CE:45:28:38:F7:A4:8A:50:1E
Certificate issuer: /CN=A91106C7/serialNumber=229EE6CFB79584BA2310ACCE452838F7A48A501E
Certificate serial: 0112
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
Manifest number: 0108
Signing time: Mon 03 Nov 2025 05:04:40 +0000
Manifest this update: Mon 03 Nov 2025 05:04:39 +0000
Manifest next update: Mon 10 Nov 2025 05:04:39 +0000
Files and hashes: 1: Ip7mz7eVhLojEKzORSg496SKUB4.crl (hash: aVZicN5TBOPT6Py69Ej0jFJHGaV8K7xvqq8LAmmIJuo=)
2: 4F179FFA45C711F09D90C528C4F9AE02.roa (hash: AoqGhpw1dfLgh3xeboUCFj7o3T5zts+KEOp4p0FPim4=)
3: E02064A0C9E911EFABA90568C4F9AE02.roa (hash: 1KWYaNEqXlQZbYyzbVPFnEogKXP5LSRzPFTHIQIRAMw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.crl
rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 05:04:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91106C7, serialNumber=229EE6CFB79584BA2310ACCE452838F7A48A501E
Validity
Not Before: Nov 3 05:04:39 2025 GMT
Not After : Nov 10 05:04:39 2025 GMT
Subject: CN=690837e7-aa30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:72:1b:44:7c:9a:fb:6b:20:39:5a:6c:57:1b:
2d:f7:11:9a:a1:34:7f:06:b8:fc:39:76:a8:40:2b:
e8:3d:ed:67:38:11:19:c5:24:da:e9:53:d3:48:9e:
21:81:5f:69:2b:d3:bd:2d:5c:d0:8a:e6:a1:a7:9d:
b9:31:c6:a8:74:d1:f2:ab:01:3d:18:10:02:52:0e:
ff:ad:1e:d3:94:6e:76:0e:2c:64:cb:28:f1:0f:92:
5b:37:03:c7:64:da:ce:eb:77:71:21:52:9c:a5:6b:
0a:7c:4a:f6:e5:8b:86:9f:82:0a:16:3b:f1:ff:4e:
32:8a:e2:79:4a:10:70:9a:19:aa:d4:33:0a:2d:1d:
10:89:39:09:e2:2c:22:c0:a2:75:dd:bd:97:fc:80:
de:1c:9a:88:b5:8e:70:b3:30:44:86:25:68:8a:2b:
1f:fc:69:da:9b:e5:9c:b6:50:2c:ee:06:50:a5:96:
3b:23:0a:d0:e0:60:bd:e6:18:74:0a:6a:22:37:15:
25:ad:65:1d:ea:7a:12:b5:0d:dc:15:d5:dd:9b:88:
71:e9:d5:f6:f2:83:47:9c:e7:f1:74:ae:5c:9a:30:
78:c4:38:65:ab:89:4e:20:6f:e1:d2:d4:b7:15:2e:
c1:2c:41:0c:4b:41:fe:67:1e:0d:cd:81:bc:77:f1:
57:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0B:D5:A1:FF:A4:BC:BC:07:6A:40:8A:E0:7D:E7:AA:A2:8F:3A:3D
X509v3 Authority Key Identifier:
keyid:22:9E:E6:CF:B7:95:84:BA:23:10:AC:CE:45:28:38:F7:A4:8A:50:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:84:c3:c3:aa:40:2b:6f:d4:45:11:22:df:19:09:40:c3:eb:
0f:d4:71:fd:a0:a0:4e:92:f5:53:16:df:9c:8a:fb:24:23:a1:
69:52:5d:7a:c9:76:d7:3d:5c:ef:15:41:75:bf:d7:be:70:b1:
76:ee:4e:42:76:e1:af:59:21:75:59:6a:12:79:2e:c4:07:80:
5a:5c:4e:b6:93:d6:57:48:df:44:53:bb:57:75:92:3a:65:f3:
7c:af:b9:09:45:6e:9f:1b:0a:b9:bb:45:76:8e:1c:b3:6a:3c:
eb:32:94:27:17:d4:10:1f:89:9c:07:90:59:ca:54:ea:d8:62:
9a:f8:65:a6:69:ce:37:e7:e7:eb:91:c8:e8:85:e5:aa:01:db:
38:37:94:98:cf:0c:e4:df:18:0b:8d:ef:f9:cc:fe:ad:f2:2f:
d6:fe:db:19:e3:8c:cd:a9:d1:53:a3:0f:58:e3:16:6d:4e:b3:
00:d4:d5:2d:76:9f:dc:fb:40:74:5f:0e:66:ad:fe:9b:80:80:
45:96:25:b6:80:88:40:34:9c:0e:40:54:bd:55:f3:68:7c:62:
b5:50:50:0b:e2:d0:40:80:1b:7b:0d:e0:5b:29:9d:fe:b8:55:
df:ed:af:c5:d3:5e:78:e1:3f:a1:35:8d:33:e1:79:d7:ef:f3:
72:a3:61:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:18:16 2025 by rpki-client