
$ rpki-client -vvf rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
File: c0H2TqslF-qZON3k-wqBTly7fnc.mft (raw, json)
Hash identifier: dl1HMA5STQDbPgVbOIgfxknu0fm5xw307xP5mqGvAdQ=
Subject key identifier: C9:DD:D4:BC:21:7A:83:06:4F:FC:B5:1B:9C:9E:61:D9:69:03:E1:3A
Authority key identifier: 73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
Certificate issuer: /CN=A912184B/serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Certificate serial: 1E6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
Manifest number: 1E50
Signing time: Tue 04 Nov 2025 16:10:38 +0000
Manifest this update: Tue 04 Nov 2025 16:10:37 +0000
Manifest next update: Tue 11 Nov 2025 16:10:37 +0000
Files and hashes: 1: c0H2TqslF-qZON3k-wqBTly7fnc.crl (hash: oQ93KxjBYVtYrsTOoVaj3CeOFpNJeQx/gourDbTlvrQ=)
2: 22DC230C299311F0B32D9F82C4F9AE02.roa (hash: KiZSjsjHSWTeGrVHyQ1fRZOy4p6+ElPmGCwKFduLkFA=)
3: 8144C55412E611E98A4A6A35C4F9AE02.roa (hash: HcaovZ/E4LVI99vShwEF3DVWudHVhbjCDuMnNSp75nw=)
4: 51D65180A2DC11E9B63C6C2BC4F9AE02.roa (hash: lziphfAQalP1g1qd41FgsGMuQq4aElhXOf7iBsezcaw=)
5: 234A6628299311F0B32D9F82C4F9AE02.roa (hash: D4LXE7yxCKGNNUhuHC7/Q5q8EQPtCwzUchpxHBJ/u58=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7786 (0x1e6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912184B, serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Validity
Not Before: Nov 4 16:10:37 2025 GMT
Not After : Nov 11 16:10:37 2025 GMT
Subject: CN=690a257e-532e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:d3:f4:99:27:95:ec:2c:d7:b1:b5:24:50:
eb:8c:45:bf:3f:f9:fc:93:c5:b5:4f:4d:6f:04:3e:
33:88:5a:ad:5c:e4:d5:f4:21:8e:70:fd:4c:bc:0c:
7c:12:4c:68:f9:bd:36:9b:54:30:d2:54:78:42:19:
08:bb:a0:63:b1:5a:fe:ac:4e:dc:61:8f:62:78:e0:
a3:fd:37:4c:62:3f:67:77:29:94:00:3d:b8:3e:3f:
b3:5e:72:4b:f9:6d:9f:6e:7e:81:9d:f3:9c:ee:22:
c3:f9:24:6f:f0:cf:ce:0e:0e:3c:e0:d0:4d:62:e0:
68:dc:f8:a2:94:28:cb:1c:e8:76:5d:9b:22:2c:90:
b1:7a:be:b2:3e:df:84:5e:48:d3:e5:28:f9:7a:71:
44:7f:39:ca:78:fe:57:22:42:fb:d8:f0:8d:14:65:
e7:f4:cd:d4:33:cc:6f:93:8f:fd:6a:3d:ff:b3:d2:
b6:60:e8:f9:d4:ec:2b:38:a6:f8:ea:65:f1:78:0f:
83:a8:f7:8f:2c:2b:2d:d8:aa:39:26:62:47:66:5a:
2b:e4:79:f2:f9:54:f0:b7:e4:51:96:d5:d7:12:14:
4d:a5:7c:8c:73:0e:06:24:8c:b2:3d:ea:cc:70:e3:
bb:a1:75:34:6a:7a:17:32:b2:1f:db:9d:87:3a:57:
82:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DD:D4:BC:21:7A:83:06:4F:FC:B5:1B:9C:9E:61:D9:69:03:E1:3A
X509v3 Authority Key Identifier:
keyid:73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a9:9c:9a:73:3f:9b:2e:96:5f:df:63:75:ce:8d:de:68:95:
7b:ad:f5:5d:09:8f:4d:d1:e6:9a:0d:da:07:e5:99:68:4e:72:
e5:af:a3:09:ca:06:87:3c:0a:c6:03:9c:da:a1:b8:03:ff:95:
a7:f0:c9:6f:6a:34:db:7d:bc:8b:bf:99:50:28:1c:b1:ef:52:
bf:35:fc:0b:cd:09:44:4e:27:af:69:b1:74:8c:7d:74:ac:15:
d9:7f:3d:60:80:69:f3:86:b3:e4:08:04:18:8d:96:4a:28:e8:
37:af:0c:6b:4f:7a:41:b8:ac:38:2e:0e:8a:77:1f:60:d1:4b:
8f:ff:c6:fd:5a:0b:5c:82:b9:d9:d3:e5:b4:c0:5d:ee:98:3d:
5b:c6:86:dc:a0:0b:34:16:e8:b4:51:43:4f:60:a2:0a:28:c9:
cf:db:8b:78:38:2d:cd:00:52:5d:4a:0e:97:4a:37:c0:4d:47:
53:fb:2c:af:9a:f8:31:74:f6:d7:04:c9:d1:15:65:95:61:d2:
4e:49:82:2c:1d:38:2f:7d:6b:b9:b1:f5:f3:c9:8f:74:40:e3:
ae:76:2d:59:6e:1a:1c:96:c3:fb:b5:c0:20:7c:14:89:36:5d:
88:97:4c:df:79:d8:89:20:0e:b1:99:f4:33:6e:01:8b:45:62:
de:b7:48:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:58:56 2025 by rpki-client