
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
File: r48M-0f7_MfEkzxHPNs2RCtQUc4.mft (raw, json)
Hash identifier: 25WP1uGJN39avOLEJwOlk8RlrsC63v9GM5lhU1SgDcM=
Subject key identifier: D1:92:21:38:E6:FE:17:A8:91:B1:E8:8A:C1:42:DB:9E:A4:64:7D:92
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Certificate issuer: /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial: 386F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
Manifest number: 369C
Signing time: Tue 04 Nov 2025 14:22:57 +0000
Manifest this update: Tue 04 Nov 2025 14:22:57 +0000
Manifest next update: Tue 11 Nov 2025 14:22:57 +0000
Files and hashes: 1: r48M-0f7_MfEkzxHPNs2RCtQUc4.crl (hash: C48a2Ip4M3DKeC8HmxWU7IT03Yo04PmufVzK4x+JASg=)
2: 94AE247A879B11EF9B78224EC4F9AE02.roa (hash: beGHA0T1rToh9I4yqxtOrGtpbpK8Gm/NJNtPJMVcv0k=)
3: 1514A670A47B11E9867CBF58C4F9AE02.roa (hash: sYUwQlOLcFH2Qzgi6OqjZe1I3jOQTOg2npEZQTWLY/A=)
4: 7C5F5278589611F084D9AA7BC4F9AE02.roa (hash: FOolRrR20/q0F6XvV7yCzqolfjRuktnsRoMJ0vyCQC8=)
5: BD30E870F62711E9AC18E63BC4F9AE02.roa (hash: YX0PeVbwnE20xWaiX2nr0sozgOjfm9aCwEd0B6uYVnQ=)
6: A62428E820B211F09941D114C4F9AE02.roa (hash: fcDJ/ZruqRqMthD4UyDytuO1DIXDnB08fy1+uiAiXPg=)
7: BC187B74F62711E9AC18E63BC4F9AE02.roa (hash: sE7POF4sPAWNrqvKGR3XPjh3vRpnxWQR3GBk17yROvM=)
8: BC94C436F62711E9AC18E63BC4F9AE02.roa (hash: QUNQFD6Fs6vQ/Xacn/YTyPddDyT2Zj7smjz5kkHqzck=)
9: 24AC829C476311F0970DF567C4F9AE02.roa (hash: q7CS41rn7/JdKF4Im2iOHVnhzgphtbHSDDYb+9p08i8=)
10: 6B1F445C781F11F0B7BE0756C4F9AE02.roa (hash: 2VNweA5bL/qHuR9no6uM1dicICzNt/Lgvt99j53zBzQ=)
11: CF09016006A611EAA8819441C4F9AE02.roa (hash: Nbg8apOhpz/ZbutsuWKwBDZ0wlxzKN9/aIfKH1t9opI=)
12: DF6FAF5EAF0111EB96FC344BC4F9AE02.roa (hash: 5kXCjaK7+LQcCcI/C1WuTADPPcJscpEH0U09SHcv4eM=)
13: 8513C77AF62A11E9A6941C46C4F9AE02.roa (hash: rRCgJL8oGciUh8AlUq1plMpffnbAPeYlKijUPW7pzas=)
14: 387ABD22614211F0AED25E68C4F9AE02.roa (hash: OTFLC+xsLqw75trai6CwqErooVjsc/BgFHuDOUQCFzo=)
15: C2C631C8A47911E99DBEDD52C4F9AE02.roa (hash: Xmn9rKXqawcB/ajmntmSYWXo/n1a94MI1ePlNWCx+l8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:22:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14447 (0x386f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Validity
Not Before: Nov 4 14:22:57 2025 GMT
Not After : Nov 11 14:22:57 2025 GMT
Subject: CN=690a0c41-015f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9f:69:b2:9d:17:86:31:f2:74:d3:5f:5a:47:
56:47:2d:8a:fa:0c:5d:7e:35:2c:72:bb:a2:13:95:
5f:91:46:87:9c:69:dc:1e:9c:65:16:25:c4:29:91:
d8:60:6b:0b:3a:88:77:bb:32:78:0a:68:e4:c8:d6:
d4:f6:d0:e2:3f:a4:4b:da:57:54:a2:fe:11:d4:67:
5d:66:ad:4c:c5:bc:ef:b3:34:93:59:2e:b7:bc:57:
69:ee:81:1a:5e:4f:5a:e7:38:b2:48:b0:62:f7:d8:
c8:d7:62:02:4d:34:b6:04:2d:17:a1:5b:e8:5c:ee:
ee:12:b3:7d:4d:2c:1a:e8:f3:a3:bb:f0:d8:92:48:
79:57:32:13:ed:a9:05:a7:86:9e:b2:9a:84:a3:d9:
32:d0:0a:54:b2:0e:13:ff:c1:d5:fe:04:a5:6a:7b:
69:56:5a:3a:77:05:26:4d:ad:1f:f3:36:cd:aa:ca:
16:22:9c:e2:27:20:e5:ae:58:c8:f0:b2:ef:5b:6c:
55:6b:4c:05:09:99:ba:b2:39:80:ad:a2:df:74:c4:
35:e0:28:7a:6a:06:e0:b1:6a:14:e1:f3:5b:3e:65:
95:81:57:52:24:64:9f:1e:b6:7b:ba:e1:fe:44:d6:
8f:72:15:f1:0f:a2:a0:73:01:94:e9:6d:9f:d0:53:
5b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:92:21:38:E6:FE:17:A8:91:B1:E8:8A:C1:42:DB:9E:A4:64:7D:92
X509v3 Authority Key Identifier:
keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:24:4b:e8:9d:b9:4b:c0:38:96:b7:f6:9b:58:f6:43:b2:38:
07:b2:ca:8d:a5:58:1f:db:2d:75:52:53:06:11:ca:e3:62:54:
02:34:c5:ed:ef:8d:47:19:51:19:8c:c8:2f:fc:48:6a:5a:5f:
af:43:2f:68:98:8a:72:c6:dc:40:dc:3e:cc:31:c9:6b:37:36:
da:ae:67:15:d8:15:c5:12:d6:d3:17:27:f2:86:a4:9b:e3:4b:
25:ff:e0:23:33:db:1f:ab:7f:8b:e2:57:a9:e0:b5:27:27:3c:
32:cb:a0:24:e6:72:b4:fb:fa:19:de:bd:f7:bc:b4:28:2e:66:
5f:44:5e:49:22:60:b0:82:a5:2b:df:e7:8f:f0:98:46:a2:f2:
d3:d7:ee:d6:b9:08:48:34:23:37:43:57:8a:57:06:1d:c6:44:
71:02:1f:cf:4b:6c:64:12:f1:86:bf:c3:d4:74:d6:36:75:40:
20:87:f8:0c:c3:5c:bb:19:76:1f:f5:77:16:0d:d1:3b:21:7d:
0f:56:f0:1e:e9:fb:0b:e9:07:f8:95:4f:db:95:9c:a7:cf:4c:
dd:c0:b0:9a:84:82:33:3b:a2:34:89:f9:9e:33:f5:cb:74:67:
ed:e2:3c:51:3c:dd:d1:06:e7:f7:75:50:b9:4c:6f:aa:f2:ca:
fe:33:30:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:21:43 2025 by rpki-client