
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft
File: SslcipdeTPMQhCyVVkBRdT3rAok.mft (raw, json)
Hash identifier: 519VPOg/AH5LlVFRP5fINa0tBDZfBQ+N5Qgrt/9INzI=
Subject key identifier: C4:35:1B:77:53:58:D9:0D:20:63:C8:82:DF:2C:A6:CF:16:2A:42:87
Authority key identifier: 4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89
Certificate issuer: /CN=A9110D07/serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289
Certificate serial: 01BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft
Manifest number: 0199
Signing time: Wed 05 Nov 2025 04:03:20 +0000
Manifest this update: Wed 05 Nov 2025 04:03:19 +0000
Manifest next update: Wed 12 Nov 2025 04:03:19 +0000
Files and hashes: 1: SslcipdeTPMQhCyVVkBRdT3rAok.crl (hash: vX7u/pPwECg4jFY28jJ2rMc77+NKvOqT19/d7afQlNo=)
2: 5B66C6FEB4DB11F0B3DC6D7BC4F9AE02.roa (hash: VCw7RYuCqRgcxZgWZmzpPEk1YCa+byu4rAUKwjjwm9k=)
3: 83851AF0B4DB11F0AB70077CC4F9AE02.roa (hash: +9BxnlBD3UNYEFNJ83BbPOZ+8B4N+QVOpPQfjDIm2gY=)
4: CDF495A4E47D11EFAFC6496FC4F9AE02.roa (hash: 28Pcqodr/XiyCXR1rm1sG8vgE+8OCqXnMRTKbKZwlik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl
rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110D07, serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289
Validity
Not Before: Nov 5 04:03:19 2025 GMT
Not After : Nov 12 04:03:19 2025 GMT
Subject: CN=690acc87-a770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d7:a5:4d:ab:de:ac:d4:7b:91:7e:23:e1:e1:
a5:4d:51:dd:fb:3e:2c:84:66:cc:1a:bd:99:02:69:
1a:9c:7b:03:fa:c8:16:5d:a3:a5:b0:18:e4:17:0d:
06:24:ee:1c:aa:c5:b6:dc:91:bd:f2:9d:e0:28:59:
1d:39:0d:a7:fd:d7:58:81:20:8c:df:4e:3b:1e:68:
59:ff:97:cf:f0:11:dd:30:d2:2c:2a:7c:1f:97:fa:
ee:3a:08:24:0f:c7:a9:34:27:23:fb:16:92:9b:35:
95:55:6c:d5:5b:96:59:01:58:67:e7:ce:62:5e:84:
7c:ed:8f:29:c2:dc:d7:8c:8a:4b:e5:11:ce:aa:38:
9a:53:01:c0:21:b6:43:69:22:2e:28:2f:38:bc:04:
23:e5:a8:82:c0:c7:3e:af:0f:d2:09:0b:3d:16:b6:
30:72:2a:6a:2c:00:e2:58:c8:c6:15:ce:63:b9:78:
b5:8f:f2:72:58:74:6e:dc:fe:90:00:6c:94:c2:3a:
7f:ef:87:4f:0c:1d:56:61:e6:82:64:f6:1a:ee:6f:
10:13:21:37:95:11:97:d1:0f:b4:71:ed:ba:ce:fe:
3e:4b:4d:e7:a1:28:46:77:3d:13:cb:64:f7:38:69:
d4:64:97:4c:8a:25:33:6c:94:e9:98:3e:71:37:a1:
90:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:35:1B:77:53:58:D9:0D:20:63:C8:82:DF:2C:A6:CF:16:2A:42:87
X509v3 Authority Key Identifier:
keyid:4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:1c:3c:c0:60:6b:45:cc:25:7c:23:57:ef:bb:3b:3a:b7:c6:
fe:c7:ea:c5:6a:42:81:ba:1c:73:0c:ed:9d:38:f6:c5:99:2e:
74:18:d5:8c:43:40:d6:5c:d6:b9:55:4e:56:06:d2:93:f0:ef:
a1:4b:2a:1e:16:6f:e9:fa:c5:64:ed:c5:73:d4:b7:fe:f5:a9:
38:eb:8e:49:8e:dd:fa:1a:2c:6f:bb:a4:b0:2d:5b:1f:19:0b:
d3:86:4f:72:ad:d4:0a:9a:75:94:d9:24:33:5f:7e:13:03:31:
2e:c9:f2:4a:44:ee:34:a7:10:d3:9c:05:db:58:e7:77:07:51:
81:17:1b:75:2c:df:ea:bd:35:71:1a:8c:46:88:5c:b6:2b:bc:
ad:ff:bb:1b:e3:ff:0e:f7:ca:25:dd:ec:e2:80:9d:9c:d7:dd:
cf:3c:ee:03:cd:11:c3:ab:73:b4:31:f3:1a:58:08:58:34:3b:
79:da:a7:2d:6c:32:0f:88:3d:7a:e1:68:9a:44:6a:e9:37:06:
0a:9a:69:47:89:d7:2a:8a:4f:2c:d0:c8:48:48:bc:af:d2:de:
2d:71:a3:5f:1f:86:9d:c8:f4:5d:47:fd:ac:59:a8:39:89:42:
32:0c:1c:c5:4c:b1:63:73:d1:6c:6f:36:8a:f3:3b:64:9f:4a:
7c:4b:b9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:56:37 2025 by rpki-client