
$ rpki-client -vvf rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
File: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft (raw, json)
Hash identifier: W7Vv6bqKwyZVYbVTvpgikwsuJ9UaCdFn3UI+984hgHA=
Subject key identifier: 5D:22:67:A5:8F:AA:A0:2D:0D:82:F2:F3:27:49:15:A6:49:F4:8C:13
Authority key identifier: 36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF
Certificate issuer: /CN=A913647F/serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF
Certificate serial: CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
Manifest number: CB
Signing time: Wed 05 Nov 2025 05:56:31 +0000
Manifest this update: Wed 05 Nov 2025 05:56:31 +0000
Manifest next update: Wed 12 Nov 2025 05:56:31 +0000
Files and hashes: 1: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl (hash: MRv95UQQ2O3AsDcWYKDRIY5Im5DWair1v3rISdQuFao=)
2: FD3934BC86E211EF8CF27626C4F9AE02.roa (hash: 6re4BPBhdZPlBhJ6P0bUdH0mQEDnXmK+Ed0vP4MQWeU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl
rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913647F, serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF
Validity
Not Before: Nov 5 05:56:31 2025 GMT
Not After : Nov 12 05:56:31 2025 GMT
Subject: CN=690ae70f-bc8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:e5:8d:fa:ea:fb:54:3b:fb:3c:46:1d:bc:
10:d9:5d:cf:02:66:46:4e:ad:88:ff:eb:8b:b8:e1:
1b:e1:f8:33:cd:da:38:0c:1a:ec:7a:a6:33:2d:37:
61:db:db:33:98:79:8e:ec:aa:ca:eb:99:0f:c3:02:
dc:88:12:f8:86:67:a3:07:b9:3f:24:16:62:a5:b8:
d6:ed:3a:8d:ae:a1:4d:2c:2a:f6:17:f2:5d:35:f6:
2b:d8:50:c6:d2:3f:fd:42:66:13:bb:36:03:e4:7e:
94:69:e9:cc:54:8f:92:f2:23:f0:0f:8e:86:0b:af:
08:86:fe:79:5e:2f:65:3f:09:31:13:6b:2d:94:f5:
14:e9:26:58:4c:f1:5c:04:42:e2:b1:6e:8c:93:05:
47:ef:c0:66:dc:2e:f5:13:fe:7e:28:9b:e0:3d:17:
71:21:bf:f4:d3:49:93:12:26:9e:43:10:22:2a:ea:
c9:38:e4:d1:2f:32:11:c4:09:ae:50:53:6f:9c:ae:
34:8f:3c:a5:6a:62:70:f9:95:10:42:54:91:1d:ca:
93:c7:a5:ff:49:70:9a:1a:8d:69:61:00:ee:e4:4e:
06:c1:13:1e:c7:98:d9:fd:7d:23:93:e8:b3:2d:69:
92:06:20:c8:dd:58:27:84:85:0b:a1:1f:66:8d:85:
64:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:22:67:A5:8F:AA:A0:2D:0D:82:F2:F3:27:49:15:A6:49:F4:8C:13
X509v3 Authority Key Identifier:
keyid:36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:22:a7:41:70:29:2c:ff:12:91:8a:78:6d:0f:14:be:55:4f:
96:9e:3b:46:04:33:49:c8:c7:64:6b:55:ef:82:f9:6b:c8:32:
f0:4d:39:cf:c5:97:18:2b:a8:99:6d:6e:eb:af:ca:9c:9a:eb:
60:66:b1:d4:29:bd:56:2a:f6:68:74:23:68:60:7b:5a:a2:da:
53:0c:3d:2f:1f:b0:da:01:93:b2:a6:cb:23:a6:b7:df:de:73:
e9:fc:82:94:d9:82:b4:15:3e:c9:8e:76:b9:83:2d:c9:d3:8d:
f4:d7:43:69:d2:a5:8c:e3:6e:a5:c2:9d:b2:a1:7e:37:19:ee:
3f:33:43:b9:81:72:e2:7e:7b:15:66:0f:8b:9a:5d:d8:38:2b:
4e:b8:68:24:be:ca:dc:76:ea:8a:8d:58:fc:54:9a:f3:47:8c:
b1:06:55:65:3e:0d:96:a8:f1:48:ae:40:d2:bd:7a:28:1e:1e:
56:e8:b5:e3:9b:c7:be:2d:0a:71:d6:a7:16:be:16:39:d4:eb:
71:0f:6f:be:1c:0b:1f:9d:93:a7:64:c6:6e:76:28:23:0d:74:
ef:12:ab:98:5a:e9:a5:66:bd:d7:a9:8d:3e:c8:0e:15:fa:86:
f7:4c:27:9d:a5:8d:62:3e:b2:79:36:0d:93:ca:f5:81:b1:09:
1f:cd:68:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:37:14 2025 by rpki-client