
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft
File: RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft (raw, json)
Hash identifier: yd1+K4HrKijPN3KVDQAao+55wYhQH0VsbILHRTAQVgQ=
Subject key identifier: E2:03:6D:2B:D6:04:1A:1D:2E:CC:C1:9F:12:20:41:B9:1F:7C:62:F2
Authority key identifier: 46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73
Certificate issuer: /CN=A915B2EC/serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573
Certificate serial: 0560
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft
Manifest number: 0533
Signing time: Tue 04 Nov 2025 23:40:59 +0000
Manifest this update: Tue 04 Nov 2025 23:40:58 +0000
Manifest next update: Tue 11 Nov 2025 23:40:58 +0000
Files and hashes: 1: RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl (hash: 3CrLIynJTFhf+P7lhqul4q23mGagsF1wiP99QB5JAac=)
2: 7AD7390CD15111EE98EBEC1EC4F9AE02.roa (hash: EYW2sKPf+G2Sx9ydD4pDWi9he+aSK802wxvxfjM5I2Y=)
3: 20C2C8980D4111EEB385BA83C4F9AE02.roa (hash: 9YEdcRP/xwcEXvASqrHWB8HPt3we6VKlBGcd9dDANWk=)
4: 5A306016D15111EE98E6801EC4F9AE02.roa (hash: +6P6AQHkzNOzm6kHVQO5a81bv5yPJUOJbWXMWV3KVfA=)
5: D26FE5F62BC511EEA4569A67C4F9AE02.roa (hash: HwIXxMyVB5TDC6OnRXgKUZIRg3PpPlLxsrzUfJFlIrY=)
6: C6E67CEACB0911ECA16E4A19C4F9AE02.roa (hash: eSOO4OZJq9oAUGzG+Jm/RF9DAg/VCtKcVYa1dGAc4zo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl
rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 23:38:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1376 (0x560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B2EC, serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573
Validity
Not Before: Nov 4 23:40:58 2025 GMT
Not After : Nov 11 23:40:58 2025 GMT
Subject: CN=690a8f0b-4a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:33:1d:ba:e9:dc:9f:ea:d7:0b:d8:9a:1c:c2:
fb:df:d5:a2:19:ac:82:1c:5d:72:73:3c:87:77:29:
16:47:c7:26:25:5b:ae:6d:e5:a0:76:35:99:28:8a:
47:d1:16:31:c7:2d:3a:3e:95:ab:8b:68:9e:15:f8:
ef:e9:0b:cd:ae:4f:c1:84:ab:fd:dc:a1:a3:b8:1e:
b6:a7:fd:72:01:32:12:40:33:0f:4d:55:91:da:58:
ac:61:2f:aa:ec:79:e6:91:e5:d9:74:66:1e:15:bd:
de:37:c0:86:53:be:90:46:36:7a:ba:2d:00:0e:e5:
46:f7:23:dc:30:75:df:7f:cf:9e:4e:a2:d1:8f:d3:
30:89:d4:cc:c3:c6:35:db:dd:f0:62:c7:54:6c:88:
28:bc:fd:19:42:6c:1b:ab:7e:7b:36:d0:bc:0a:2b:
bf:08:9a:c0:13:3f:8e:51:83:18:d5:6a:0d:15:1c:
e0:1b:16:34:fb:83:b6:3f:2d:a5:34:bc:78:d6:a3:
cf:ad:93:09:bf:f4:c0:3c:08:20:3a:45:1a:9d:e3:
ba:4d:18:cf:3b:92:8b:61:75:4e:01:12:00:fd:d0:
34:30:f4:11:27:44:f4:1b:00:83:06:88:b8:ad:cd:
3d:6b:10:dc:a7:fe:42:0a:c5:91:9f:ec:2a:25:5e:
1c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:03:6D:2B:D6:04:1A:1D:2E:CC:C1:9F:12:20:41:B9:1F:7C:62:F2
X509v3 Authority Key Identifier:
keyid:46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:f6:14:81:68:a3:1a:50:fe:f1:c0:2b:bf:fe:8b:17:a8:19:
22:17:2a:9f:21:d8:f0:78:0f:f0:ff:b9:e2:a3:e3:5c:7b:ed:
b8:3f:00:14:84:90:98:d4:06:c1:56:55:c0:8d:fd:f8:a1:da:
9f:76:9b:da:ec:0b:0e:47:0c:c7:f5:fd:ef:c3:94:5c:f1:13:
5c:f2:46:2b:09:ff:a2:36:a4:89:7e:27:bb:d7:cf:fb:19:32:
a9:28:37:66:bb:5c:67:cb:04:c6:18:97:ae:6f:16:55:e3:55:
3d:89:c2:53:ee:f8:dc:80:ee:81:87:ea:9c:30:d1:ea:97:9c:
ea:8d:c2:b1:49:c1:c1:d1:11:3a:33:62:75:9d:c7:67:86:23:
8b:20:fc:5b:d4:c7:01:69:7e:a3:23:f2:58:58:15:0b:47:21:
5c:d6:77:40:e0:ed:61:6d:a6:50:06:d6:6e:1b:94:34:75:bc:
97:db:cd:b9:63:9c:98:73:3f:17:59:2c:12:a0:4e:37:78:b7:
1d:12:f2:44:55:02:f3:73:ee:2e:5b:e6:f7:48:5d:aa:82:ca:
92:9f:9a:a1:6a:8c:be:ff:f4:81:9a:0d:fc:cb:a5:6b:17:8c:
d2:9c:06:26:d6:10:8a:79:48:8d:44:2b:72:8d:92:b6:63:35:
51:30:3c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:03:30 2025 by rpki-client