
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft
File: 07pE2ly9wcxRJeLBAHts233c3IU.mft (raw, json)
Hash identifier: UMoUH2g0FG2bIy7E6PQiYDhfASbZMIquVQDj42uO+nY=
Subject key identifier: 2C:DD:17:4D:89:56:70:9F:7F:6D:A1:F8:B1:7A:9B:1D:DF:EC:7C:EA
Authority key identifier: D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85
Certificate issuer: /CN=A9129757/serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85
Certificate serial: B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft
Manifest number: AE
Signing time: Wed 05 Nov 2025 06:23:30 +0000
Manifest this update: Wed 05 Nov 2025 06:23:30 +0000
Manifest next update: Wed 12 Nov 2025 06:23:30 +0000
Files and hashes: 1: 07pE2ly9wcxRJeLBAHts233c3IU.crl (hash: PQwWJYkIcvSEe3Wj/ENFmbp5+nTm/dAzDNByV+REnFw=)
2: 46A6690EB41911EFA68E0826C4F9AE02.roa (hash: PLX4kBW7Q6lIgEXicoBPIcX2q4HXvsbwpw0VmOF96dY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl
rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:23:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176 (0xb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129757, serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85
Validity
Not Before: Nov 5 06:23:30 2025 GMT
Not After : Nov 12 06:23:30 2025 GMT
Subject: CN=690aed62-0e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:21:f7:53:06:00:1e:31:98:ac:41:6f:7b:
ca:01:df:59:ae:0a:2f:58:39:93:18:95:79:66:4c:
09:96:d0:72:2f:25:6e:09:7a:82:c8:91:d4:ee:80:
fb:11:55:23:0c:89:3c:72:24:2f:65:d9:67:8c:e0:
1c:e4:eb:3d:0f:a4:32:38:75:73:56:a5:24:12:92:
5a:e5:4c:b9:17:ee:de:36:7b:ac:65:9e:09:15:33:
66:56:dd:65:98:62:64:de:22:63:33:96:ff:35:0a:
1e:1d:32:c8:f6:60:f2:ef:ee:f9:3d:bf:0e:b1:45:
ca:2d:51:d9:0f:a3:0a:7b:b5:87:fa:8e:f8:11:73:
b4:5f:e7:49:d7:b0:19:f6:d3:3b:b2:95:eb:dc:2e:
ad:28:52:72:f6:b9:09:8c:d4:c8:c6:6a:13:62:50:
a2:d7:bf:87:e1:98:dc:a7:02:2e:7c:ec:10:c5:f9:
40:ab:b1:a4:42:90:0c:b3:80:a1:c7:f1:81:59:13:
83:63:77:a4:e1:9d:e5:df:1b:39:0d:f4:ae:96:09:
22:ad:a2:a0:fe:59:90:d2:90:0a:70:e6:44:1e:6d:
c0:6e:32:1f:59:fb:8b:40:47:d1:53:6d:ea:10:bb:
26:be:02:30:0a:7f:34:ca:af:4e:0b:79:de:42:81:
fb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DD:17:4D:89:56:70:9F:7F:6D:A1:F8:B1:7A:9B:1D:DF:EC:7C:EA
X509v3 Authority Key Identifier:
keyid:D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:46:a9:e7:96:dd:77:42:95:50:b1:7c:3a:fe:86:3b:13:8b:
27:88:f0:f9:f9:bb:d4:1e:9d:31:91:92:df:67:81:6b:64:c1:
51:56:10:03:d2:2e:c4:b6:99:bc:6a:9b:9e:70:5e:29:d4:01:
a8:92:4d:4e:70:6d:58:7e:fe:1a:8c:47:c4:78:7b:b4:0c:1c:
7d:07:05:74:6b:71:f6:c5:ab:e3:d0:5e:5b:14:3f:59:c9:dc:
a8:83:bb:c4:37:76:b3:c0:8a:f5:f9:8b:bb:0a:a4:3b:00:04:
69:1d:37:65:b0:4c:8f:5c:e6:73:06:09:38:35:eb:9d:36:95:
a0:db:17:bc:34:aa:d7:3f:b3:09:58:37:3f:fe:36:8e:69:9b:
d7:df:62:9a:82:fe:c0:e6:17:63:f0:42:aa:22:6f:70:70:4d:
18:b3:0b:04:b7:00:7e:32:96:39:27:13:a6:30:3a:bb:bc:31:
70:9c:44:81:54:b4:77:6d:41:1f:9d:20:4c:67:69:d2:30:c1:
68:c1:53:eb:e5:d6:88:1b:e4:48:64:27:b5:f3:aa:5f:74:84:
fe:c4:0f:16:3b:55:3a:ac:e1:56:02:1b:2b:ab:cd:1e:df:d8:
ed:67:3d:e1:f0:a1:3b:86:79:6d:37:93:5e:aa:5d:ee:18:ca:
48:b0:72:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:52:12 2025 by rpki-client