
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft
File: 8R8km4Id_MKxuXr05wUm3ZM6En0.mft (raw, json)
Hash identifier: AJsHfKsKEjsQm73G5q7d/CdST3K1uSSx2fCV8Se6+TM=
Subject key identifier: 44:8B:FB:B8:12:82:41:1C:6B:93:25:0E:21:43:40:E7:E0:05:AB:32
Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D
Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D
Certificate serial: 019F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft
Manifest number: 0196
Signing time: Wed 05 Nov 2025 03:36:04 +0000
Manifest this update: Wed 05 Nov 2025 03:36:03 +0000
Manifest next update: Wed 12 Nov 2025 03:36:03 +0000
Files and hashes: 1: 8R8km4Id_MKxuXr05wUm3ZM6En0.crl (hash: fE7UTqDqZXc3kzxVVsYM3FRj9Fm2jGG4HYQVxEGTTJQ=)
2: CE74C490AA4911EF80B4D381C4F9AE02.roa (hash: ZbN7HX75z4kqrPzQKLv8pw3PHkYxa9adZyy5gxVNx/4=)
3: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (hash: HRtaeBIfXS4j0TAnrmFrjM5dZZkH7hynrpn4rWDNaLw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl
rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415 (0x19f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D
Validity
Not Before: Nov 5 03:36:03 2025 GMT
Not After : Nov 12 03:36:03 2025 GMT
Subject: CN=690ac623-7346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9a:42:a7:65:d1:27:ba:43:39:2f:4d:53:89:
d8:01:4b:61:ba:d3:ed:4b:19:59:e1:e2:89:c7:96:
13:9c:97:34:26:98:92:82:9e:fb:69:e5:16:9d:e8:
7d:b7:08:ac:23:48:81:a0:25:49:01:39:7a:b2:db:
d7:e8:20:d4:4e:4f:da:a0:df:1b:b7:97:59:1e:74:
ba:37:3d:44:f7:e8:1e:33:b9:40:57:5d:f6:be:dc:
7b:8b:04:a6:d8:a8:a8:53:d2:eb:e1:cb:51:1b:0d:
5b:fa:53:3b:ac:7f:0a:79:81:87:d0:f5:e9:10:c3:
a6:80:b4:50:88:f7:81:f9:30:34:ed:6b:48:83:85:
b3:14:2e:ed:e1:cd:4f:44:97:b0:6c:7b:ff:bb:06:
7d:46:4f:02:c8:f6:32:5b:1f:ba:a6:78:57:f2:82:
1e:f0:55:e6:f8:c5:7d:be:a2:67:c6:08:8b:7e:02:
94:bb:00:f5:7e:1b:cb:ea:6f:31:5a:46:27:50:b5:
a1:b8:0f:c5:43:08:bf:26:99:12:c3:49:a4:b7:53:
f5:eb:3d:f9:b7:28:3e:68:e2:78:9c:d4:14:c2:d8:
76:18:f5:2a:5d:db:02:f7:79:9e:62:93:0d:d2:9b:
8d:44:8a:96:05:df:b5:20:7c:01:ef:44:9c:68:c8:
b9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8B:FB:B8:12:82:41:1C:6B:93:25:0E:21:43:40:E7:E0:05:AB:32
X509v3 Authority Key Identifier:
keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:10:4d:b5:6c:7b:0f:a6:fd:5a:ed:53:95:00:3c:30:2b:ca:
3d:40:7a:1d:3d:34:0a:50:24:12:9e:4c:23:62:b6:43:b1:e2:
f7:0f:da:68:a1:18:8f:02:03:41:37:5d:a3:bf:af:a9:4e:e0:
18:da:6e:88:28:89:64:ec:33:e2:35:cc:7c:61:80:cb:d3:62:
ff:9c:1c:5d:ce:9e:78:42:62:20:e8:bc:d6:7f:8e:73:1d:2b:
db:d2:96:0f:61:36:0a:7b:dd:05:4e:e3:ad:70:e0:6f:d8:2d:
97:96:92:d4:41:ec:ee:3a:c3:8c:2f:97:27:e5:4e:5c:4b:7a:
07:05:d2:6c:27:6a:60:51:b8:97:0f:51:16:d4:2a:ed:ba:7c:
19:1b:01:66:ed:11:ca:37:27:54:8a:6f:04:31:09:f6:05:7b:
e3:7a:fa:30:51:8e:73:58:9c:7a:9e:20:15:4a:38:2a:86:eb:
5d:9c:42:4e:ee:e2:05:fd:fa:2b:b7:82:b6:2e:ec:3b:fb:14:
a5:aa:cb:f4:9f:df:bb:15:a0:04:86:9c:a7:b4:c8:cf:72:8e:
3d:ff:0d:95:64:70:ab:4d:b1:6e:5b:77:24:b7:31:58:fd:93:
9e:db:0b:2b:86:16:00:79:83:05:81:15:d1:d7:1e:2c:ce:b4:
b7:d8:7a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:03:52 2025 by rpki-client