
$ rpki-client -vvf rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
File: poz6MR67HxAyDqIHdTAw5_Oij3I.mft (raw, json)
Hash identifier: KZHBuIcc0uszBrPzIjdWNJxKynF/K1I5wrtrn8QawrU=
Subject key identifier: 31:0F:1B:E0:C9:37:5D:5A:8B:00:40:7B:E2:B0:77:5B:42:0E:E2:21
Authority key identifier: A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72
Certificate issuer: /CN=A913258C/serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
Certificate serial: 0B1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
Manifest number: 0B02
Signing time: Sun 02 Nov 2025 19:20:56 +0000
Manifest this update: Sun 02 Nov 2025 19:20:56 +0000
Manifest next update: Sun 09 Nov 2025 19:20:55 +0000
Files and hashes: 1: poz6MR67HxAyDqIHdTAw5_Oij3I.crl (hash: KXrWeNUA2NG5/Hae4BeItkb2n89ZDXP3hVhYZrZz1bs=)
2: E3D288CA6BC311EDB9791958C4F9AE02.roa (hash: xfCVW/hkWWtb6veFD5avvPcY4Mz5aIouTpiWuzaIDT0=)
3: F4E06C32804911EDABB05C09C4F9AE02.roa (hash: ESJChcbSeTzsfPRjHjsX6geMHbvNO7hjmHXws1871ls=)
4: D353090841F711ECB1465157C4F9AE02.roa (hash: hyTgYf3yNb3P1osKlb2mkzCC43nsvagjPiYm8g/bHPk=)
5: 110731BE329D11EFB45DDA57C4F9AE02.roa (hash: wHUnMKyUsP+z0ZGxOO5ssZzuISHdGqM1+8ZYBh44vj4=)
6: 1E95063A21E611EEB4824339C4F9AE02.roa (hash: zTEEFeYyenG7e2iJRNTQNMi/VEI/2vKOaAjTvCstuBc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl
rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 19:20:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2844 (0xb1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913258C, serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
Validity
Not Before: Nov 2 19:20:56 2025 GMT
Not After : Nov 9 19:20:55 2025 GMT
Subject: CN=6907af18-fcaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:84:8a:86:4f:4b:b5:c1:a7:c0:d7:fd:c8:b6:
c2:db:83:c6:b5:88:5d:78:71:6e:d3:5d:a0:c3:a9:
e9:99:8f:0a:64:77:e2:6f:0c:03:67:e9:0b:75:f9:
3f:8e:ef:1e:7e:ce:d1:aa:8f:bc:51:b2:ce:03:37:
3b:7b:08:66:ea:83:25:06:96:02:2d:1f:78:91:d9:
60:4f:85:88:37:80:c3:9a:eb:f8:cd:22:db:b0:f2:
af:c2:40:78:a5:a8:4b:bb:a7:87:6a:f6:d0:17:0c:
58:f2:df:df:9d:a5:33:b9:43:37:65:07:c2:d5:56:
2b:a7:3c:ff:17:53:73:00:65:5a:cd:1f:f2:96:bd:
56:b4:9c:47:36:a7:16:d1:b9:ec:2a:15:20:8e:19:
6d:e5:8f:7d:fa:92:db:fe:87:dc:b8:58:51:d4:e8:
f8:74:20:89:f3:9a:b5:fd:79:26:5f:89:82:31:83:
d9:37:a7:56:4f:40:81:f9:7b:67:77:f4:19:cc:c2:
01:5b:5b:f5:e7:bc:94:ba:da:59:5d:e8:b0:63:b3:
78:f7:71:0a:18:22:3d:f7:45:1e:ea:4c:ee:a6:5f:
91:e2:29:72:9a:63:04:b4:65:fa:2e:4e:58:63:76:
a5:f7:25:60:aa:60:0d:ed:b9:a7:2c:51:4d:24:84:
3e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0F:1B:E0:C9:37:5D:5A:8B:00:40:7B:E2:B0:77:5B:42:0E:E2:21
X509v3 Authority Key Identifier:
keyid:A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:67:3b:62:2d:cf:a5:ae:21:b1:4f:01:e8:63:6b:c8:12:85:
53:5b:4f:bf:8c:ba:d3:04:9d:be:96:ee:da:c7:d2:60:56:b4:
9f:40:a3:1b:73:f5:66:47:a6:2f:8c:19:0a:33:2f:92:82:48:
6a:82:2e:0b:44:87:01:da:8f:5c:01:0f:66:57:10:a2:21:a3:
97:07:c6:c8:aa:15:09:50:64:89:4e:82:02:4f:1e:f1:c9:d1:
ad:e8:76:3f:33:85:d5:cf:bc:76:69:b7:84:7a:7d:43:c0:9f:
c5:0c:5d:88:3d:98:c3:82:a8:6e:dc:39:95:a2:11:54:d9:09:
9f:4e:92:c2:c2:8f:16:63:e3:a3:d4:e3:ab:21:25:e0:27:e9:
ad:66:fa:6b:d2:9a:0d:3e:57:2d:91:43:5a:3f:00:97:f5:f0:
19:2e:9a:a2:50:80:2f:fe:f1:21:fb:51:83:fe:74:32:43:6c:
5f:5a:8b:f6:74:60:61:69:53:56:80:31:f4:ef:31:38:08:46:
9a:56:e7:61:8e:6f:80:c6:69:dc:5f:36:ad:c7:a2:c5:a4:be:
2f:dc:6a:2b:a5:5f:87:28:18:0e:71:08:c1:2d:bc:7a:4f:25:
d4:9f:04:9e:aa:b3:c7:9c:8e:f3:95:ed:23:67:76:ae:24:71:
58:25:0a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:57:42 2025 by rpki-client