
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
File: u1uBVrA35dIiY-rH9qEcBS_fYz8.mft (raw, json)
Hash identifier: faSNEQvEarMQ9GW819KMhJBJXpQCsiBpqThEcv78n6c=
Subject key identifier: 2D:E3:06:3B:4A:89:E9:82:B2:D1:50:0B:D5:2D:B1:2F:D7:54:76:26
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 355D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
Manifest number: 3485
Signing time: Tue 04 Nov 2025 15:23:39 +0000
Manifest this update: Tue 04 Nov 2025 15:23:39 +0000
Manifest next update: Tue 11 Nov 2025 15:23:39 +0000
Files and hashes: 1: u1uBVrA35dIiY-rH9qEcBS_fYz8.crl (hash: Li8APW6YqNGpzEqvCrIcGbOvFNi1OXJdOEXd53pf74Y=)
2: 47E1F234B45111EEA556091EC4F9AE02.roa (hash: MUgpGvnpkewn251zM5+9m0/+F8vMSfuS6+jNZpfHvgc=)
3: 6159E3148BEB11ED9A3CD825C4F9AE02.roa (hash: qzbXivpb0JIa597930ox0hSBuWQ7KjKDNIli1RBqDkg=)
4: A2239B14782011F0A1950D84C4F9AE02.roa (hash: uRH2cuGSTKJvgNoy+Zb1UaKolBxs7SYQUUNOq8LSf4M=)
5: 22C2A76E854811EFA776AC73C4F9AE02.roa (hash: sSX7DNQqfge4ejL0oQv0Vd+5TBaBgIDn0NKDxugYUZY=)
6: 9826D5EEB45011EE829AF51CC4F9AE02.roa (hash: xKsyGzAN2c32GCPMOdzL9UsUOFCUvwfUwAzlRCnyX9k=)
7: DD1805369A8311F0A54CE65CC4F9AE02.roa (hash: g1Jd3IDpPYg+NNjbiAV63UaTfld83t8qWBUIDkeII+w=)
8: B91BEB86943711F08A09E30CC4F9AE02.roa (hash: rqhFHdH1mwKgqSSyyXkH5ldhQsleRwxsMAJOjz75ruU=)
9: F180E2B24FD011EFBC17A55DC4F9AE02.roa (hash: GKPeCAs7yCzcTtRwWFCku8oUh6Rtkvw9ICbK+vHtQ5Y=)
10: A0E12EEC782011F0A1950D84C4F9AE02.roa (hash: P//Kkv1Cdx4PiGkjmnz6vPX7R+COjaveRQQO4LjPR0k=)
11: 9B6837A8AD6911EFA86BAA58C4F9AE02.roa (hash: pWg9J7cYk+HXhg4hXPdqT10Vpf+1vT1PV33YnS6AG6c=)
12: E9E37A28AD6911EFB6E53159C4F9AE02.roa (hash: z+Wb4gqIzNLeSAdA2Pq8enJbmWtWlhXLEadFxTzm+BI=)
13: AA5075824F1811EFB6ECD54CC4F9AE02.roa (hash: zl75vWdRPXnP/XOghAc53jzYLr8BLgxiVkpvltTQaAc=)
14: 0A5276E04BB611EE8F105367C4F9AE02.roa (hash: /CXIwsodeDV6hc0P1vlVjGHFyr0hi79zRbh9IHZPKLQ=)
15: 6B016F4EB6C911EF9370FA5AC4F9AE02.roa (hash: 70B3F87XSLKvXUF998Hdc/HoObUhGZVos2Z7tXO0ymU=)
16: 60DB91E48BEB11ED9A3CD825C4F9AE02.roa (hash: cHqxUZqTQHQkS9uClycnmDqyKizAF8Nm5ODi8+cgf8M=)
17: B06C3C12AD6911EF9690E658C4F9AE02.roa (hash: R80o79Cf/gewMorDyo1D6ic4qzsusUsJXg7M2vOiDxY=)
18: FFAD463CB6C811EFAE27D256C4F9AE02.roa (hash: HocrnYD4sH7ksGOE0tlJzfX5xEpSjRMS91r9PGL/s1E=)
19: 26E8E0566DF011F0B88F3F58C4F9AE02.roa (hash: 3byGRjTOjwf1xthbWEUAa+eHuN1uN4XXcTWnaRVW6NM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 15:23:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13661 (0x355d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: Nov 4 15:23:39 2025 GMT
Not After : Nov 11 15:23:39 2025 GMT
Subject: CN=690a1a7b-e5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c5:43:2a:e0:e7:93:70:7b:9c:8a:55:86:d9:
a0:a3:27:29:c9:1b:54:bc:2b:60:82:0e:ed:4d:4a:
49:34:3a:d9:b6:96:46:a5:80:03:97:84:29:f4:88:
02:1a:4f:c2:b5:34:8d:a0:c4:c1:c0:cc:2a:2f:e6:
59:cb:8f:de:79:e4:07:24:0a:80:72:b9:7f:fa:53:
24:87:87:80:10:1b:90:6b:05:70:7c:4b:be:c1:5c:
78:7c:a4:af:9c:d4:62:21:12:bc:f6:37:bc:ce:f0:
26:e7:62:78:0d:83:20:49:50:41:10:6c:cb:ce:22:
8a:e8:e0:5a:b3:5b:fd:4d:eb:9b:4b:40:44:1a:89:
67:99:a8:0a:f7:9a:86:9c:cb:80:b1:5b:bb:76:92:
49:c6:50:a6:4d:c7:8a:68:b3:3a:39:b0:65:ff:21:
e1:92:89:67:6b:1d:3c:76:05:ce:ec:f3:cf:7f:fc:
07:65:a8:ae:c1:ca:ca:74:00:c8:91:4d:74:58:99:
81:af:89:81:5a:0a:3c:e9:5c:78:cb:3e:06:0c:bf:
5e:ae:2e:55:41:66:6c:26:5e:83:f5:ea:c5:33:f6:
93:54:63:56:6c:1d:1e:57:a4:09:42:1a:3d:d4:3c:
83:8c:64:02:e7:e6:21:09:17:66:07:c9:2f:66:3c:
e7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E3:06:3B:4A:89:E9:82:B2:D1:50:0B:D5:2D:B1:2F:D7:54:76:26
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:75:d4:c0:33:cd:37:ec:fa:6d:5c:6c:10:01:62:64:e6:34:
53:f1:08:df:29:cf:b5:a4:15:f3:05:12:fa:03:4d:2f:06:56:
62:87:12:70:6c:86:75:4b:71:b4:f9:be:a1:10:74:7a:3e:d8:
cf:f1:7d:94:1d:e9:a9:cb:8c:23:45:0a:5f:fe:28:b4:f0:05:
35:ec:d3:4f:0d:aa:a6:41:33:09:a1:c9:eb:d5:0a:9d:75:2f:
65:9f:ca:03:36:ed:95:3d:d4:25:33:6a:43:ca:7b:18:78:c7:
df:08:94:2d:15:82:2d:17:5b:d4:c1:13:d9:64:73:75:e0:62:
55:d6:93:b6:a7:fe:1a:98:26:b1:67:01:ec:da:11:95:21:1a:
b6:04:e8:2b:7d:0e:0f:8b:25:05:14:2e:cc:b5:6a:00:65:20:
6c:76:c1:bf:d4:53:00:b5:40:a6:87:c7:97:bd:89:57:a2:1a:
ae:87:67:96:41:07:79:6c:78:ee:eb:9e:55:5f:6d:0b:25:23:
ab:7e:de:d4:aa:e6:1c:cb:20:c7:e4:5a:1c:12:07:b5:d9:49:
bf:3e:e9:93:e8:1b:5c:a4:09:d9:57:6b:69:c3:e4:49:17:9a:
f3:09:aa:01:aa:f0:03:40:a3:27:a4:59:cb:01:e1:28:b8:14:
99:9c:61:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:34:24 2025 by rpki-client