
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
File: 64EbFIiyDxJmTmSKgmJKMFBonyU.mft (raw, json)
Hash identifier: wc1IcW9GYuK4HC9P/pZ5EkarVQkxnZtL1kpg4UgyrZg=
Subject key identifier: BA:19:54:E9:F2:E9:D4:A8:BC:D8:52:80:46:44:C3:83:4E:8F:69:66
Authority key identifier: EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25
Certificate issuer: /CN=A913D30A/serialNumber=EB811B1488B20F12664E648A82624A3050689F25
Certificate serial: 0DCA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
Manifest number: 0DA0
Signing time: Tue 04 Nov 2025 18:01:16 +0000
Manifest this update: Tue 04 Nov 2025 18:01:15 +0000
Manifest next update: Tue 11 Nov 2025 18:01:15 +0000
Files and hashes: 1: 64EbFIiyDxJmTmSKgmJKMFBonyU.crl (hash: gMVQT6EvtRNqm44CDu440I856EiC+DOgpxmGzZ7FxUA=)
2: F67B28D0B86811EFB4FB3552C4F9AE02.roa (hash: yCxqzmWa893doOfv6hENPdTITWlM9j+UWoyn6s0IOuA=)
3: 9A1481AAB2F411EF9B46DC64C4F9AE02.roa (hash: Add7F0lhUmSvXDEdaWnBa/fqtGzEQ9y//LGpbHGkCZc=)
4: B48F5974897C11EB9D7AE318C4F9AE02.roa (hash: UjEhrY6BSDNfZnVVPw3EjbmEipeGvEYmxIV0JR9ypjw=)
5: C14E20B6B22511EFA8BCE16EC4F9AE02.roa (hash: qD/bOdMC/KVR6ezx0RF1Ije0zw5T1HsdyQmo2ReK3BE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl
rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 18:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3530 (0xdca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D30A, serialNumber=EB811B1488B20F12664E648A82624A3050689F25
Validity
Not Before: Nov 4 18:01:15 2025 GMT
Not After : Nov 11 18:01:15 2025 GMT
Subject: CN=690a3f6c-1daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0f:c6:a1:9e:83:e0:f0:3a:1b:ea:bc:16:42:
ed:9d:6e:bd:88:8c:77:26:e3:6f:7b:ab:2c:27:9c:
40:d8:e0:32:f0:2c:8a:05:31:15:fe:ac:0f:28:8b:
d0:33:9c:40:57:0d:31:d8:bb:8f:8d:fc:7a:9a:e0:
1b:bb:f8:d8:81:b3:6c:ed:d3:7a:65:ee:22:0f:bc:
5a:33:1d:4d:d2:e2:2b:d4:bd:28:bc:1a:ce:f7:1d:
40:d3:92:c2:17:d0:9d:3c:f1:22:67:d0:60:57:6c:
48:4d:42:59:d3:c3:f5:12:dd:e4:6f:36:c1:82:66:
ed:e5:12:24:a4:8a:ca:3c:84:2e:61:57:bc:04:7a:
1c:bc:95:30:15:51:c6:7f:08:ce:08:ea:80:81:25:
38:46:03:93:82:a3:fb:f7:d9:d4:b0:69:bc:1e:0d:
ed:30:5d:aa:06:8f:98:28:f1:7e:74:82:04:d2:65:
3d:8c:09:37:ed:30:6a:52:23:5f:03:5b:34:2c:16:
18:0d:6d:1e:32:f7:ce:5f:32:8c:ed:a5:f7:0d:f6:
72:1b:0d:64:1d:b4:fa:e3:8e:2e:ab:0e:36:6e:d7:
f8:0a:bc:f1:8c:0a:4a:0a:c4:12:9c:b8:42:aa:5d:
1d:19:30:55:fd:cc:d5:95:b4:07:ad:36:36:8e:51:
79:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:19:54:E9:F2:E9:D4:A8:BC:D8:52:80:46:44:C3:83:4E:8F:69:66
X509v3 Authority Key Identifier:
keyid:EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7c:4d:05:47:8a:f5:a2:e9:5a:d5:ca:fc:98:e8:0a:48:65:
a2:34:6d:de:a2:31:fb:e2:ef:bd:e8:b1:e7:49:7c:64:e2:29:
8a:c1:5b:4c:0e:2b:5b:d7:6f:d4:ef:d2:46:94:3f:50:94:42:
2b:32:91:53:c7:69:80:c9:12:c2:d9:0c:c5:5c:14:f1:cc:1d:
2c:4f:9a:01:a6:c0:8e:e4:8e:7e:29:e9:9f:5f:e6:8c:04:b4:
29:d1:db:e8:f4:9d:7d:ec:f2:db:8d:04:a2:d3:bb:79:f8:8e:
cc:31:e4:6f:3b:31:9a:c3:5a:22:7e:07:e3:4a:4f:e8:5d:1b:
1b:6e:4a:d3:0b:74:ea:2f:69:dc:1f:79:cf:b5:1c:c6:69:b5:
7f:fe:84:44:13:74:52:5e:87:c1:0d:c7:48:cc:c6:02:5a:97:
b8:d8:a3:ec:12:c6:c5:38:b9:e5:45:5a:f9:a1:ad:28:a6:6f:
aa:8b:35:d9:53:33:cf:55:42:ce:df:fe:68:15:9b:c9:b0:46:
47:de:fa:27:8e:c6:73:92:5a:ec:a9:ca:33:fd:60:a3:c7:45:
b7:cb:3a:b1:d1:43:40:a0:06:24:91:a0:4f:4e:29:d0:80:68:
a2:d6:34:35:ce:fb:1c:ef:db:e4:ba:e2:99:c7:7e:3d:ec:5f:
24:20:77:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:23:30 2025 by rpki-client