
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
File: NAQf45nAdllht5_hJGlBcocgc7s.mft (raw, json)
Hash identifier: MUxsADt9pBDjONRpwlZQ32ZKnsyO8XtV88Aw+0WSwEY=
Subject key identifier: 9A:41:FB:B5:CD:B4:75:4A:FD:C9:20:85:83:06:E9:A1:85:82:B7:1C
Authority key identifier: 34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB
Certificate issuer: /CN=A913FD96/serialNumber=34041FE399C0765961B79FE124694172872073BB
Certificate serial: 0B10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
Manifest number: 0B09
Signing time: Tue 04 Nov 2025 19:25:51 +0000
Manifest this update: Tue 04 Nov 2025 19:25:50 +0000
Manifest next update: Tue 11 Nov 2025 19:25:50 +0000
Files and hashes: 1: NAQf45nAdllht5_hJGlBcocgc7s.crl (hash: ifwoym4fqH5D0EjstsTYJy5pi0lRqZ8yYXxuS0eCV1g=)
2: FC3B44CE519A11EAB1229A87C4F9AE02.roa (hash: PexI7Ux7URSg3e/gBgi7b1d+EMkFgIyBhb6944l9JRA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl
rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 19:25:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2832 (0xb10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FD96, serialNumber=34041FE399C0765961B79FE124694172872073BB
Validity
Not Before: Nov 4 19:25:50 2025 GMT
Not After : Nov 11 19:25:50 2025 GMT
Subject: CN=690a533e-4b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8f:ab:72:a2:b0:94:db:1b:14:1d:4f:41:e7:
ff:07:72:4e:56:80:7b:8d:b4:a1:d6:95:77:fd:ce:
79:85:f7:16:ca:aa:3f:0c:af:8c:6c:0a:4e:c3:8e:
90:33:8f:3c:7c:1c:d7:ef:55:7d:fb:fb:2d:12:79:
85:73:60:c8:3d:5f:a7:e3:e5:31:60:aa:49:fc:90:
c9:1a:77:8c:7c:2f:27:12:e9:82:fe:fd:81:b2:19:
6c:bb:f8:11:47:db:13:c4:14:ae:28:08:18:9b:be:
5d:3f:05:83:f9:6f:c9:ba:71:0d:06:f7:a2:e2:5a:
1e:6d:b6:b5:e7:7a:28:b5:c4:5f:45:26:c7:be:62:
4f:f8:b7:b7:d3:d3:02:2c:82:3b:f0:50:77:cd:58:
12:12:9c:1b:55:02:aa:f5:80:06:fe:96:28:52:66:
af:94:80:b3:0a:d3:a7:8d:43:54:37:13:32:bd:33:
c5:48:c4:17:92:54:97:c6:73:5b:bf:43:ba:54:99:
b1:de:79:26:88:e7:8f:b3:d8:41:61:7e:e0:ac:f4:
3e:23:65:29:e2:10:97:44:fe:79:71:21:88:8a:0f:
e8:63:99:d3:92:b9:92:2e:bf:d6:c8:53:03:3f:d8:
99:aa:67:cd:65:a6:1f:6d:fd:48:62:d5:91:49:fd:
22:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:41:FB:B5:CD:B4:75:4A:FD:C9:20:85:83:06:E9:A1:85:82:B7:1C
X509v3 Authority Key Identifier:
keyid:34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6e:24:32:cc:72:f8:35:74:ec:86:ae:28:ed:f8:0a:8b:c3:
42:ec:c0:b0:17:8a:b4:c3:51:33:90:0b:92:b6:68:c7:19:dc:
53:2b:98:ab:bb:fe:ad:00:07:a7:80:69:67:6c:a1:45:76:0c:
d0:7c:8d:dd:03:c0:bc:5f:99:26:a1:bd:34:47:81:a2:07:bc:
18:18:e9:48:eb:a7:95:59:67:6f:70:33:44:f7:64:01:c9:96:
2a:05:77:46:0e:f4:59:d5:c9:05:4c:9f:2d:b5:98:9f:9d:5c:
55:4a:6c:54:f0:49:a1:b5:49:19:76:e2:7d:86:fa:cb:a9:7a:
4f:19:e1:e2:eb:cd:9e:2b:02:92:de:b9:3c:dc:43:5a:06:07:
64:02:65:53:a6:c6:34:ea:97:f3:60:24:9b:bd:41:44:11:ea:
29:77:be:22:95:35:55:bc:b2:15:22:3c:6b:b8:e4:86:9a:35:
c8:f5:aa:c8:91:ce:da:0c:84:00:97:df:6b:47:e5:74:75:dd:
f2:d4:80:d2:12:33:47:c6:e1:b0:d2:08:d0:e6:51:ad:65:0d:
40:fd:de:6f:f8:07:2b:fa:90:e1:3f:93:91:0e:78:be:8c:eb:
a6:f2:a8:6e:bc:5e:ea:d6:f1:5d:d3:cb:d1:44:cc:2a:f5:41:
70:a0:c7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:40:28 2025 by rpki-client