
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft
File: MekS6f9zr1vER2k1KNclslorF_c.mft (raw, json)
Hash identifier: /GgztmFGnv4se57H7H83RVYjFWBzPrK5OWGKR5Gah+U=
Subject key identifier: 5A:63:21:38:13:18:12:B6:EE:34:7A:E8:96:94:50:62:C5:C1:D3:8C
Authority key identifier: 31:E9:12:E9:FF:73:AF:5B:C4:47:69:35:28:D7:25:B2:5A:2B:17:F7
Certificate issuer: /CN=A9127673/serialNumber=31E912E9FF73AF5BC447693528D725B25A2B17F7
Certificate serial: 152A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft
Manifest number: 151F
Signing time: Tue 04 Nov 2025 16:54:32 +0000
Manifest this update: Tue 04 Nov 2025 16:54:32 +0000
Manifest next update: Tue 11 Nov 2025 16:54:32 +0000
Files and hashes: 1: MekS6f9zr1vER2k1KNclslorF_c.crl (hash: ULmnCEJla5EbrYGr5/1uGo+9ut4HwKdS+J4VenuRnuk=)
2: 9C524DA858CE11E891382260C4F9AE02.roa (hash: pz/sh5ewtugJGaQEjLj/4LhT6VQlQpXzMK/OXn+CHaU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.crl
rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:54:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5418 (0x152a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127673, serialNumber=31E912E9FF73AF5BC447693528D725B25A2B17F7
Validity
Not Before: Nov 4 16:54:32 2025 GMT
Not After : Nov 11 16:54:32 2025 GMT
Subject: CN=690a2fc8-d7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:4b:99:d4:e2:14:55:13:83:8b:a0:3b:cf:
c9:b8:63:b9:c1:1b:b6:c5:8c:19:4c:4a:e1:25:c9:
10:41:92:5d:d3:ef:dd:7f:d6:99:63:fc:26:e9:e4:
f4:8d:e0:3f:1c:14:53:63:be:82:4f:8e:02:60:01:
0f:ed:a6:df:36:48:70:cc:c6:29:9c:4f:57:1a:b7:
43:c1:ef:28:9e:45:98:28:1e:0d:6c:88:b6:d9:15:
66:ef:7e:f9:51:cd:7f:a0:4e:c5:70:00:b8:8a:19:
f2:db:48:e4:7f:4e:5e:be:8d:6c:80:1a:87:db:80:
fc:c7:13:e7:f5:7c:da:88:8b:ed:5a:23:b7:29:3f:
8c:09:cd:28:96:d3:ed:b9:7a:8c:48:39:f1:46:f0:
79:b5:b4:d9:66:94:d5:21:e8:e2:c8:98:82:b3:6d:
b8:5c:ba:f1:25:8c:a9:33:79:a6:21:27:e7:87:32:
a6:7d:e6:80:5c:a6:01:4f:16:57:2e:1f:04:4a:07:
b0:bf:46:2e:76:6f:6a:68:c1:45:5b:f1:1a:a1:c4:
7a:49:d3:04:ca:db:fd:17:e0:5a:4d:f5:79:fd:60:
dd:63:d7:c0:ef:30:d6:48:20:c8:4e:99:af:90:d0:
46:b8:75:c7:8e:77:f4:79:9d:15:5d:ee:85:5b:00:
af:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:63:21:38:13:18:12:B6:EE:34:7A:E8:96:94:50:62:C5:C1:D3:8C
X509v3 Authority Key Identifier:
keyid:31:E9:12:E9:FF:73:AF:5B:C4:47:69:35:28:D7:25:B2:5A:2B:17:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:30:b2:82:6c:76:aa:84:4d:ed:f5:04:09:24:f8:0d:01:9c:
5f:f4:c1:ba:7b:0e:3e:53:3d:6b:e4:c7:c2:43:62:2e:39:56:
c7:8a:b5:fc:00:5e:98:c9:e0:2b:27:ea:ee:50:69:ae:06:1c:
1e:14:db:37:33:96:09:12:f7:9c:ec:4f:34:33:01:ab:f0:92:
e1:eb:95:d5:f8:92:dd:f4:8c:31:d0:f4:6a:a2:50:6c:1f:ab:
89:ca:f6:51:07:ae:d0:95:78:b6:96:73:41:5d:f8:d4:1f:03:
5a:54:ff:1e:60:81:1a:6a:3b:a1:75:36:8d:ee:0b:4b:87:35:
f9:12:9f:dd:5e:50:d0:4b:c1:2d:9f:ad:90:08:e4:9a:62:76:
30:b8:11:19:f2:20:42:e6:d0:32:7c:0c:83:59:d4:d1:ac:a9:
73:85:0e:b5:65:b7:5b:59:13:5e:85:41:73:3b:21:37:ed:22:
60:c3:33:4d:ff:44:6f:66:66:35:de:81:c6:ab:94:eb:69:ad:
d9:e8:41:df:76:aa:8a:14:0b:e5:ae:f6:10:93:e4:ee:47:48:
38:99:06:d3:39:91:a9:63:86:cf:40:bb:af:a8:3c:3f:d1:cd:
ab:8b:6a:c1:e1:e1:d4:5c:19:07:b1:74:42:26:f7:10:76:93:
e3:31:fa:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:53:52 2025 by rpki-client