
$ rpki-client -vvf rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
File: UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft (raw, json)
Hash identifier: 6juCEUUAyBe624X73tKcpmJv+OwO3qD2Bxk/HoGUZsA=
Subject key identifier: C8:8B:76:43:08:C6:05:68:97:47:DD:9B:7B:6D:D6:25:4B:55:9C:D7
Authority key identifier: 50:0F:92:00:EB:86:DC:5F:D0:6D:B7:86:C0:CE:A4:52:D0:CE:72:30
Certificate issuer: /CN=A913318E/serialNumber=500F9200EB86DC5FD06DB786C0CEA452D0CE7230
Certificate serial: 0132
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
Manifest number: 012E
Signing time: Mon 03 Nov 2025 04:36:39 +0000
Manifest this update: Mon 03 Nov 2025 04:36:38 +0000
Manifest next update: Mon 10 Nov 2025 04:36:38 +0000
Files and hashes: 1: UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl (hash: zxWBSHCvv8LoagqyA7FVz9aXXno2x2D98D2XxOavk80=)
2: 6EAE50E8EBFA11EEA937307AC4F9AE02.roa (hash: n4jE/JU888DErTDFi7j6yPAf5IRm3HLfX3pJFCp7TIY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl
rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 04:36:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306 (0x132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913318E, serialNumber=500F9200EB86DC5FD06DB786C0CEA452D0CE7230
Validity
Not Before: Nov 3 04:36:38 2025 GMT
Not After : Nov 10 04:36:38 2025 GMT
Subject: CN=69083156-d871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:76:88:89:ed:60:41:eb:b7:4d:0b:02:3a:47:
a9:a7:6f:91:f3:75:8c:9a:69:89:65:12:74:87:14:
0e:f2:08:3c:bd:3f:8b:56:1c:56:64:0d:44:fd:70:
1b:6a:86:dc:67:d2:9f:b1:2d:8e:5a:61:5b:4c:42:
bf:79:59:cb:af:fe:61:70:53:94:bc:0f:35:20:31:
99:a6:ec:d7:c8:a7:2b:a2:21:d9:32:97:8c:97:12:
db:ea:62:b1:34:ee:f0:2e:e1:f4:af:1b:0e:17:eb:
78:d6:6b:51:11:cb:08:19:dc:d7:ef:2b:5e:f6:39:
27:c9:7d:6d:05:9f:34:25:7d:f7:07:e4:68:2a:d2:
0f:0d:25:01:7e:69:1c:84:94:bf:31:fa:b4:ff:6e:
78:b7:9d:e6:6b:cd:80:c5:bd:35:ab:0c:85:06:8e:
cd:7e:c4:4a:55:7c:b0:90:54:eb:73:fe:9a:49:21:
e6:53:92:ec:8f:59:be:6a:6f:9c:f4:e3:6a:56:94:
a3:02:c3:35:7d:89:1b:bc:32:48:cd:93:ae:f6:a9:
49:e7:93:fb:6d:0f:b0:f1:1b:b3:b5:c1:b9:64:34:
b2:6e:93:cd:34:b8:63:25:3d:f2:32:6b:44:42:0c:
f9:7d:6f:34:07:fd:6e:47:c7:57:ba:6f:1c:b5:2c:
29:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8B:76:43:08:C6:05:68:97:47:DD:9B:7B:6D:D6:25:4B:55:9C:D7
X509v3 Authority Key Identifier:
keyid:50:0F:92:00:EB:86:DC:5F:D0:6D:B7:86:C0:CE:A4:52:D0:CE:72:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:47:fa:50:d3:ce:cd:af:3f:0c:62:4e:7c:32:71:b6:1f:8c:
42:d5:1f:4c:cb:42:46:64:da:e3:23:d2:41:3e:50:28:84:f2:
75:cb:65:c4:29:2d:73:a2:ff:c1:47:9a:0a:b9:a5:46:08:46:
f9:77:b0:46:ac:d7:f2:e5:87:4a:ab:e2:bf:d5:50:19:99:99:
ec:65:f4:f6:61:53:6c:71:55:ea:f5:ed:08:b7:51:8f:1c:de:
31:30:83:25:e1:d4:fa:db:9b:eb:b3:40:88:2f:fe:17:bf:a1:
a2:6b:47:16:6d:a4:34:a7:25:bc:0f:88:26:f8:af:41:db:82:
5b:44:bc:80:10:a9:59:28:12:c3:71:6a:aa:27:a1:aa:42:30:
c8:79:73:38:11:e5:00:0e:b1:fe:19:41:69:61:f7:d0:9f:f0:
dd:e1:d9:40:85:a2:f2:43:52:2e:46:50:9a:b0:8b:08:d5:91:
09:ec:0f:16:72:b2:e2:b8:63:d7:d4:20:7b:fb:1f:3b:4c:a3:
f6:ea:e8:bb:c7:38:d7:d9:c7:e5:99:fe:5b:52:b7:c2:c1:a1:
de:28:6a:c6:a7:1b:91:c9:7b:0b:b4:53:2c:70:dd:61:7d:e0:
6e:69:9e:71:84:e5:58:0d:5d:3b:1e:5a:ec:e5:03:36:08:44:
08:bd:5c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:05:01 2025 by rpki-client