
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
File: 7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft (raw, json)
Hash identifier: miGrJl3TBdR3rjlJvIuO/4dsa0tiZpB2af4gtfJ+PGM=
Subject key identifier: 61:FA:C1:3D:48:91:6C:EB:1F:EC:81:F9:4C:56:12:81:D6:20:01:CB
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial: 077C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
Manifest number: 0663
Signing time: Tue 04 Nov 2025 23:18:10 +0000
Manifest this update: Tue 04 Nov 2025 23:18:10 +0000
Manifest next update: Tue 11 Nov 2025 23:18:10 +0000
Files and hashes: 1: 7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl (hash: csDW8rPtIsh/ZhoX9r8M9a3/I86UJTWsYAxSRkVtnOM=)
2: 5E8F2C98FA5311EE9E6A8150C4F9AE02.roa (hash: iE6iwKcnxwEjtE9WXcQu4gGo9yNtUwjira1PGhRAUcI=)
3: 8FA95EF2E52811ED863E8C34C4F9AE02.roa (hash: RH854KQ/5YN87OjqRkRCiFr2IhqYgncWKfVpFPV13y0=)
4: 06FAE294924F11EF80B1115DC4F9AE02.roa (hash: mH+1wX3U3E+PwU1lGyk1jq9ZSIZ/eqIJUcTr6f/b6Xg=)
5: 3F3E4D0426F711EE81AD9A45C4F9AE02.roa (hash: SLlCncO2DyPvvTYxJFC2PAuP59bF79k10dAC8HNVIQs=)
6: B12A25C49A0311F09156AE56C4F9AE02.roa (hash: qyAII90csy0Rn8L/6v873TKIy8BdpI8H9BwdfO34meM=)
7: 18DDC828563A11F092DD586EC4F9AE02.roa (hash: RG7TCR+hu/+Ok550Z5N0qOkdev6k9kUyJ/FaV+2X5Ic=)
8: 17F4DF6E563A11F092DD586EC4F9AE02.roa (hash: nLnWAwdemI13C2q8S/qa+9BJ2323t0M3P0SOVSaJVNw=)
9: CED6A59A032B11EFAC30281BC4F9AE02.roa (hash: 62gMKAte/bNphw0tPYUF/ZvmE1/0Yr02LZLp3QQyGq4=)
10: F3E5A660E69E11ED841AC682C4F9AE02.roa (hash: pFm7n9VGiFUAcF3W7YGai7F1W8FI2/WlsVm3RdvaL8A=)
11: F2B3F2BA7DFF11F09B687570C4F9AE02.roa (hash: pQhLpM5Rl+aW3gSv3+uxd5+iWqRbm+2iGTggucxA9FM=)
12: 8E6DB97451C111EE9E564B29C4F9AE02.roa (hash: x5ZXcyZot9NxnkynC1UvcdUEHIRqiQ9BeutOwqKe7/Q=)
13: 2FCAEB4AE15311EEBE7C925BC4F9AE02.roa (hash: Rgp4CAddp4zh4GvoUSZvZkXy9j88DgqM6tLo5LqrskY=)
14: 1EA2E8FA819811EFBCB7403CC4F9AE02.roa (hash: 1DbRY7Dt+Gln8rSAGnsKUeRj0Sm0DLBT94bWpJpOtoQ=)
15: 919E2B20E52811ED863E8C34C4F9AE02.roa (hash: Kqq5i0mycJsM2p96QyceGbqT0cTIxmv0LLK0yaPey48=)
16: 9EE451A08ABE11EFA0AEF447C4F9AE02.roa (hash: KIrSmQo5iCGuGlJlwWjl9JWnA4uFzugb+1cf51uUuU4=)
17: 718A62C23EFE11F08F98A223C4F9AE02.roa (hash: g3DvDfWhQW+pgOd3WbISADZLSahseyB4cwXN77ZdFPk=)
18: 1EB3FE5C924F11EFB20C515DC4F9AE02.roa (hash: MGKfZkUlP4hm8yifkXlXdpMG3M4ujfcWqT10DluRHA4=)
19: 6904305CA65111EEAAF77C79C4F9AE02.roa (hash: lb9o/vIcDBEjvp+RqGQSW3gOmj7ndA5EvwIHbcU4984=)
20: 9FA2A3588ABE11EFA0AEF447C4F9AE02.roa (hash: 531oQX+rVA8FSL6e8iLTYKTaSv/hBNMulZCg1OlX9WE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 23:18:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1916 (0x77c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Validity
Not Before: Nov 4 23:18:10 2025 GMT
Not After : Nov 11 23:18:10 2025 GMT
Subject: CN=690a89b2-f56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:da:8a:6a:6e:ab:63:a6:68:49:26:9f:d3:49:
55:01:8d:b5:be:82:54:65:f1:63:c6:98:fc:04:6d:
3c:95:c3:81:8b:44:b8:b6:b0:d3:16:f6:12:b8:15:
4f:70:22:76:56:be:a5:e3:45:0d:cd:d6:48:a4:72:
f3:4a:73:42:4f:04:3c:24:b8:11:92:35:69:b4:6c:
14:b5:a1:61:8c:c5:a8:ab:e4:00:8c:81:71:cd:fe:
cc:50:f1:59:29:5f:dd:ed:f7:f0:74:08:53:18:94:
f2:98:0c:34:18:ee:e8:d7:61:e8:29:a8:42:38:55:
1d:d9:18:5c:63:ff:9d:61:1d:ef:03:84:d3:ce:09:
28:cb:28:ee:e3:79:66:3c:39:23:d0:8e:ba:7f:a5:
a9:e8:f9:15:3c:c0:ab:fc:06:bb:51:90:ea:15:c9:
3c:be:a9:85:27:de:9c:a3:53:63:1a:65:b4:fa:eb:
81:ac:2b:81:6b:70:c8:f0:ca:00:68:97:d9:d8:d7:
b5:68:64:b5:11:78:43:b8:a9:11:12:51:1b:40:58:
32:ef:32:bf:96:4b:5b:1d:27:a8:72:b6:84:b3:7c:
51:64:1d:99:f9:b4:df:32:e5:58:50:63:d5:8b:f3:
b1:f4:7b:6a:80:72:e2:eb:80:8a:54:dd:2b:33:a8:
3c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FA:C1:3D:48:91:6C:EB:1F:EC:81:F9:4C:56:12:81:D6:20:01:CB
X509v3 Authority Key Identifier:
keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:77:5b:c3:56:30:2d:6b:63:a3:d2:f8:8d:a0:32:24:e7:32:
1a:fd:b4:f1:e1:38:70:dd:f8:dd:c4:2d:6e:73:39:8b:f2:01:
5f:a5:2b:33:9e:19:05:5d:ab:da:8b:5e:73:ed:64:16:83:53:
72:82:21:6a:21:30:05:01:ab:67:28:cd:9f:16:62:6e:9a:e4:
ee:f6:79:10:26:bc:c6:95:bf:66:d7:d8:2a:d6:ad:61:fa:fa:
a5:9f:eb:e3:3a:e7:cb:3e:91:35:b3:5d:e8:c4:b8:ba:a2:1f:
19:e4:55:a6:09:3d:ab:bb:a5:ec:58:42:f6:d6:5d:59:a9:3f:
58:ba:f5:e4:5d:bf:2d:8d:b2:25:a9:3c:1e:50:70:9f:1f:89:
ab:27:27:39:c9:e8:4b:c5:8b:fe:0f:05:1f:15:05:b8:a1:6f:
00:30:f1:02:bb:19:e8:e1:1e:49:89:9f:a1:4e:f6:5a:28:67:
84:eb:c7:85:d0:ab:dd:95:61:04:97:04:55:1e:b0:7c:47:3f:
1d:7b:61:73:9d:d5:47:30:3f:68:a6:ee:1f:c3:cc:4d:6b:3b:
ff:f1:56:45:fa:6d:7e:24:64:5b:cc:3c:53:6a:4d:ff:2b:93:
c5:20:87:85:ea:63:69:cb:bf:c1:b6:13:d1:e7:5f:ad:c9:d7:
bd:4b:3e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:23:58 2025 by rpki-client