
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F54/E1163E0CB3D111F08886A75BC4F9AE02/adZjNUxrsvo0MdQq-FaCEER_2-E.mft
File: adZjNUxrsvo0MdQq-FaCEER_2-E.mft (raw, json)
Hash identifier: NnLPcVF/9DZ3XsdZ4Ru9fl+rD44435392+8HVAiCFh8=
Subject key identifier: 49:47:50:EB:AF:E4:39:08:54:8A:27:A7:39:63:42:8D:18:61:90:AE
Authority key identifier: 69:D6:63:35:4C:6B:B2:FA:34:31:D4:2A:F8:56:82:10:44:7F:DB:E1
Certificate issuer: /CN=A9150F54/serialNumber=69D663354C6BB2FA3431D42AF8568210447FDBE1
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/adZjNUxrsvo0MdQq-FaCEER_2-E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150F54/E1163E0CB3D111F08886A75BC4F9AE02/adZjNUxrsvo0MdQq-FaCEER_2-E.mft
Manifest number: 06
Signing time: Mon 03 Nov 2025 08:04:05 +0000
Manifest this update: Mon 03 Nov 2025 08:04:04 +0000
Manifest next update: Mon 10 Nov 2025 08:04:04 +0000
Files and hashes: 1: adZjNUxrsvo0MdQq-FaCEER_2-E.crl (hash: g3LgQ6YxGo2GgQsDwkM3AyxzFkcQ3DyAvKfICEFIRNY=)
2: 7A8E45ACB3D211F0B405AB5CC4F9AE02.roa (hash: HfDxaBHZ6X0XQZ+M+nxQJ2IQep+T6wXa2xyzjQc0a6w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150F54/E1163E0CB3D111F08886A75BC4F9AE02/adZjNUxrsvo0MdQq-FaCEER_2-E.crl
rsync://rpki.apnic.net/member_repository/A9150F54/E1163E0CB3D111F08886A75BC4F9AE02/adZjNUxrsvo0MdQq-FaCEER_2-E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/adZjNUxrsvo0MdQq-FaCEER_2-E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 08:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150F54, serialNumber=69D663354C6BB2FA3431D42AF8568210447FDBE1
Validity
Not Before: Nov 3 08:04:04 2025 GMT
Not After : Nov 10 08:04:04 2025 GMT
Subject: CN=690861f5-b3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d1:16:87:af:31:c9:d0:b5:8d:72:13:ce:ac:
ad:85:12:95:9b:1a:d5:31:b9:51:9b:d2:be:d9:39:
4e:05:b6:9c:93:fc:da:20:e5:51:f4:ac:45:41:04:
16:42:db:bc:a2:43:52:55:cb:e7:a6:ca:d1:44:c8:
67:b8:4d:00:d6:45:03:d6:58:36:68:ed:f9:13:43:
03:fe:8a:af:24:b0:a2:9a:c6:86:5f:76:99:25:0d:
75:87:9f:41:93:7e:f9:33:fa:ce:d9:05:f8:94:42:
9a:6e:5c:af:75:2b:69:6d:1b:58:56:c0:a9:35:a3:
aa:b4:2b:37:7a:de:58:29:18:8f:8c:9f:d7:5f:a7:
6a:d7:a5:29:fb:92:1e:6e:f8:b7:23:0f:11:b8:a1:
a8:5c:80:fb:d2:56:e8:37:57:bd:c2:d4:e4:cd:2b:
0b:ed:73:21:b8:3e:c7:bb:15:a8:ea:f4:bb:43:53:
d4:56:6d:6f:c6:d0:00:c5:8b:f4:7f:78:a3:40:df:
9f:07:38:e0:44:42:e0:f0:ce:88:89:06:07:90:37:
61:98:d6:63:61:bb:3e:ae:90:97:0c:4a:17:59:4e:
e9:76:6d:92:a0:e2:ea:d3:20:a4:8f:98:a4:dd:2a:
2b:43:e8:c6:97:48:7c:0a:4f:0e:a3:7a:8e:fd:9d:
13:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:47:50:EB:AF:E4:39:08:54:8A:27:A7:39:63:42:8D:18:61:90:AE
X509v3 Authority Key Identifier:
keyid:69:D6:63:35:4C:6B:B2:FA:34:31:D4:2A:F8:56:82:10:44:7F:DB:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150F54/E1163E0CB3D111F08886A75BC4F9AE02/adZjNUxrsvo0MdQq-FaCEER_2-E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/adZjNUxrsvo0MdQq-FaCEER_2-E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F54/E1163E0CB3D111F08886A75BC4F9AE02/adZjNUxrsvo0MdQq-FaCEER_2-E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:74:22:7d:c5:9c:15:4e:c9:a5:f8:31:95:20:aa:cc:52:e9:
59:39:46:4d:de:e6:87:8a:8e:66:93:e2:59:d5:85:ad:39:d4:
75:45:a0:94:59:33:50:e6:d7:91:81:41:5d:27:0a:2a:23:48:
06:11:04:39:62:6d:f9:d2:15:79:35:74:b6:90:c6:36:04:1a:
c5:8f:af:3e:24:a0:fc:51:fa:1e:98:d2:c8:ad:10:6b:e0:bf:
d5:d8:ff:47:1f:bc:e1:7e:79:fa:2e:35:87:96:27:5f:c3:73:
b7:03:81:1b:08:cc:9b:5f:12:03:43:e4:29:3a:88:44:34:8f:
f6:3d:25:68:cf:51:9f:1a:f8:8d:e6:fd:4a:f6:84:4b:4e:4a:
ec:c4:c0:81:8c:76:4b:1b:b2:2d:32:13:cf:43:a6:f5:38:ec:
68:1a:87:b8:c0:17:8f:45:45:88:63:30:ae:a3:fb:6a:fb:b1:
cd:8d:f7:dc:4f:69:53:4f:0a:54:b3:74:00:0b:ba:e1:bf:9e:
c9:33:2b:9f:11:67:a2:c2:ee:3d:e6:b7:0e:0d:b2:22:16:f9:
f7:9c:d6:bf:29:73:99:fc:dc:36:93:21:07:34:59:69:6f:06:
30:41:d7:9f:9e:a6:65:45:27:c9:bc:99:33:86:fe:10:90:ad:
3e:e7:ea:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:10:35 2025 by rpki-client