
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
File: P0e7neKxDwsgzWjFEgcuaZNlf7w.mft (raw, json)
Hash identifier: suzyoxuNt2BMXugYBehpXmGUy0UQRP8jKNCffxPfaUs=
Subject key identifier: E2:CB:A9:4E:8F:EB:68:1A:A4:6E:97:12:A8:3E:0D:23:DF:B2:E3:C8
Authority key identifier: 3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC
Certificate issuer: /CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
Certificate serial: 0CF7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
Manifest number: 0CE2
Signing time: Sun 02 Nov 2025 18:08:44 +0000
Manifest this update: Sun 02 Nov 2025 18:08:44 +0000
Manifest next update: Sun 09 Nov 2025 18:08:44 +0000
Files and hashes: 1: P0e7neKxDwsgzWjFEgcuaZNlf7w.crl (hash: Q1fq6Io1XHdR6P8Rw6xensnha7G8GKMRRlF7+xhvvOU=)
2: 03D4EC14D82F11EBA454B918C4F9AE02.roa (hash: Ff3/FqCNA4mkoqAaYSIejnjODMfSiqhpG3rVl/PX+Bw=)
3: F1862B06642911EAA019224CC4F9AE02.roa (hash: NE07gybEMHoZccQKI9zxg9qWBAyxcpdRr8nAQDm4wfQ=)
4: F058F664642911EAA019224CC4F9AE02.roa (hash: QGCSSYG7s0JgJiTbtP2n7qUQajs/nLPSMS9t/fCsv+g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl
rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 18:08:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3319 (0xcf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BA2B, serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
Validity
Not Before: Nov 2 18:08:44 2025 GMT
Not After : Nov 9 18:08:44 2025 GMT
Subject: CN=69079e2c-2890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ce:05:f0:43:0b:e4:57:b2:13:93:f8:4e:f0:
67:a5:d1:16:c3:92:9f:2d:9c:ac:a9:c6:ca:56:9d:
af:f0:e2:82:99:48:2a:ff:eb:ed:9a:d3:8c:16:fc:
bb:06:4f:96:e5:b5:27:69:ff:d9:37:a9:8e:45:18:
04:fb:0c:e2:cd:96:cc:44:ae:a2:b5:14:22:7d:f3:
2b:91:49:7b:c6:c4:f8:00:7b:53:cb:e9:d8:ab:9d:
09:ee:4b:59:a8:06:a9:64:09:7d:90:76:f8:bf:88:
74:99:69:3f:3e:5b:29:a6:ff:da:d9:7e:c5:7b:d9:
e7:42:55:a5:9d:81:83:48:26:7b:a0:cb:ac:4a:98:
78:bf:1e:0e:15:36:24:4d:76:73:2e:e6:14:5e:9c:
f2:28:33:52:bd:39:aa:73:35:e0:40:16:18:b2:6b:
88:49:4e:82:e4:ec:be:15:d8:86:17:33:1d:b7:c3:
74:55:3e:81:fd:01:c9:1f:71:d2:a3:f4:03:37:0e:
5c:07:1f:66:13:89:3b:30:a6:db:60:26:0e:44:18:
89:ef:9c:56:74:af:12:38:f8:ff:a6:df:b2:f3:2b:
18:39:26:d6:2e:26:30:5e:a6:81:13:a8:ed:6c:d5:
34:42:7f:98:8b:50:f7:43:e3:9d:2f:47:0f:01:c0:
d2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CB:A9:4E:8F:EB:68:1A:A4:6E:97:12:A8:3E:0D:23:DF:B2:E3:C8
X509v3 Authority Key Identifier:
keyid:3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:f0:3f:a2:a5:4b:a5:25:16:17:99:e8:c3:60:09:15:3a:94:
ac:8f:8f:8c:75:42:e5:ac:c7:2c:e9:fc:5f:b1:28:17:8a:be:
84:14:f7:59:2d:eb:ff:52:72:b7:b6:84:18:6c:35:ff:58:44:
9d:3a:e2:e7:1d:09:2b:ac:f4:ad:2e:53:4a:56:cf:0a:eb:1c:
16:8c:e7:cc:76:90:2a:d0:80:b7:d1:41:e8:4e:ac:8f:f0:eb:
e9:1b:91:a6:b8:4c:be:0c:50:72:47:14:7b:2d:b3:37:58:aa:
d2:1e:d2:8f:35:5e:ac:7a:17:47:f6:a9:6b:73:5d:f4:23:f4:
9c:d5:84:c9:7a:00:10:d1:04:be:bc:fd:30:d6:91:24:f0:82:
a4:db:f4:1d:af:83:f3:73:66:79:a0:02:e6:fe:1a:17:87:75:
0e:34:62:06:01:51:b2:cf:a4:dc:b5:b8:37:ac:1e:c2:e5:11:
03:d7:4c:62:40:8f:cb:c7:8b:8f:67:36:98:3d:fe:b7:4b:34:
ae:33:2c:a3:d2:c8:30:32:fe:c7:3e:2d:2c:43:d5:f4:e1:45:
c0:2e:85:2c:24:ba:73:82:b2:41:2a:4a:e0:ed:6c:f9:ca:50:
01:50:69:cc:85:37:0c:69:f2:d5:38:7d:d3:af:3a:17:f9:00:
bf:c5:98:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:16:42 2025 by rpki-client