
$ rpki-client -vvf rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft
File: Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft (raw, json)
Hash identifier: PmDb5QRXz8J3SG8bAMesymNM9OygcAAHf9UGqSyVkH8=
Subject key identifier: 64:5E:33:8C:B7:97:0B:8D:A6:7A:33:F1:B6:91:31:C8:F4:9A:6A:51
Authority key identifier: 66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4
Certificate issuer: /CN=A913150F/serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4
Certificate serial: 0142
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft
Manifest number: 013E
Signing time: Wed 05 Nov 2025 04:34:20 +0000
Manifest this update: Wed 05 Nov 2025 04:34:19 +0000
Manifest next update: Wed 12 Nov 2025 04:34:19 +0000
Files and hashes: 1: Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl (hash: Iw4S5Kk8fEomvqCjeNWalWVVwtGcl6fm3eCTCqIisdE=)
2: BAFF9DF8D13311EEB88A8D85C4F9AE02.roa (hash: hU10WaMZMWvcWJ+v9bo24BcgNYMioZ0sb+F6hOJfmbc=)
3: 18E1793CD13411EE9EEE2F86C4F9AE02.roa (hash: sPtVs53bSiEnKQBpC6mQNEMcK8QGbiyEvPYg/bLQ/os=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl
rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322 (0x142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913150F, serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4
Validity
Not Before: Nov 5 04:34:19 2025 GMT
Not After : Nov 12 04:34:19 2025 GMT
Subject: CN=690ad3cc-9759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f8:d6:65:33:ea:4c:c1:6f:ac:f9:f7:7c:eb:
bc:48:e6:be:69:0f:26:bc:3d:9a:40:bd:21:a6:7b:
08:92:8f:5d:c4:64:39:f9:f7:8c:6f:a1:37:09:64:
f0:05:f7:43:f8:49:5c:b3:0a:0c:a5:d1:8f:42:16:
78:b8:9b:2a:64:d8:04:9d:c6:ca:e3:e2:a2:1b:6d:
55:74:0e:ac:20:32:a7:a5:06:3c:0e:ff:38:30:ad:
1d:24:8e:8a:f3:f2:4e:a9:5e:87:0c:5a:ad:74:ee:
59:4f:be:53:9c:27:a7:26:f3:87:90:63:f7:7b:ed:
55:a0:a5:c8:88:32:39:52:98:d1:0e:37:e0:e5:e8:
42:58:ba:47:b9:05:aa:1d:dd:06:e5:9c:f6:0b:45:
ef:8a:72:df:e4:56:ab:5c:32:76:c3:66:9b:27:02:
e4:3b:92:0c:74:f1:81:94:ee:3b:68:61:85:e5:55:
48:a0:68:95:7e:cc:2f:af:c6:b2:88:fa:e4:4e:fa:
eb:1c:65:ac:12:f9:95:51:ff:c6:fb:bd:c6:1a:41:
fe:4e:c7:8a:3f:af:f0:0b:bd:d0:71:fd:e8:ef:64:
ae:28:2d:2d:12:a2:f8:d8:a6:96:68:11:25:80:9c:
bb:33:06:f2:57:31:c2:42:8a:17:0b:a0:3c:da:75:
1d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5E:33:8C:B7:97:0B:8D:A6:7A:33:F1:B6:91:31:C8:F4:9A:6A:51
X509v3 Authority Key Identifier:
keyid:66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:3b:ad:14:04:cb:b7:5e:fa:6c:0e:96:45:52:3a:5a:83:e7:
96:12:99:9e:9f:c2:a2:3f:49:c0:a9:72:1c:c6:24:89:80:a4:
53:f2:da:31:86:f7:7d:17:d1:0a:3a:f8:50:6d:66:83:5e:c7:
48:31:e1:f0:96:20:9c:e5:6d:32:21:96:0e:7e:2a:a5:36:9b:
3e:ef:8b:dd:66:9c:64:50:36:8a:af:2f:6b:64:52:30:c6:10:
06:03:e7:23:90:fc:62:5b:51:60:5b:94:8c:86:e9:28:07:1d:
72:51:d6:57:2f:63:f1:15:62:0b:d4:8d:19:84:cb:83:e3:b1:
3b:c1:08:7f:5e:75:b6:88:90:14:d8:fe:cc:f5:85:6b:67:b4:
38:ff:45:22:98:65:fe:f7:5c:2d:f2:5c:88:96:f6:7a:10:3c:
72:89:c0:ee:42:a4:79:54:f3:c9:1a:13:12:2d:3b:24:5c:25:
46:7b:38:ac:ed:b5:5e:e0:92:fa:e9:13:9d:05:3f:62:f3:32:
06:63:1d:53:ca:41:ab:6d:fb:dc:c7:a1:c0:35:c2:3d:5d:6e:
80:9b:08:8b:7a:4f:3f:1a:f0:f5:70:4e:71:08:74:1f:33:07:
f5:dc:8e:94:6c:90:b6:9e:82:c3:fb:bc:59:4d:21:9f:94:51:
a4:24:5c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:27:34 2025 by rpki-client