
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
File: 9TkpGRnN4USwNO8oiwpjR4PoLH8.mft (raw, json)
Hash identifier: TIuB75FQ/OqrytRdmZ1ghcbJb9TubaSbjfpOw+Z9QNk=
Subject key identifier: EE:B3:76:7F:B9:77:31:A6:2F:A0:B6:50:E1:15:9A:A1:C8:62:4C:62
Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
Certificate issuer: /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Certificate serial: 04BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
Manifest number: 047E
Signing time: Wed 05 Nov 2025 00:24:12 +0000
Manifest this update: Wed 05 Nov 2025 00:24:12 +0000
Manifest next update: Wed 12 Nov 2025 00:24:12 +0000
Files and hashes: 1: 9TkpGRnN4USwNO8oiwpjR4PoLH8.crl (hash: yPfEMf625E86yzQweEACDyQ+u/9+0YUALiRbNlWOICM=)
2: 06B47656E38A11EFA4DDBC1EC4F9AE02.roa (hash: jw0OS28NBUixcPBkwOHR1vk2bGtDUl1DjQdu4UsyyXU=)
3: 976C4E84F72711EFB800B84BC4F9AE02.roa (hash: yyqYiyN6Yt2drA5esyg23pSPV3UCCGrSIBo6P8TjMZ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:24:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1212 (0x4bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C61B, serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Validity
Not Before: Nov 5 00:24:12 2025 GMT
Not After : Nov 12 00:24:12 2025 GMT
Subject: CN=690a992c-97f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:50:b7:51:84:34:4d:e5:97:7d:bf:fe:d4:ca:
35:21:9f:d6:ab:51:7d:af:c8:e2:78:9c:bf:2c:85:
ad:93:78:e1:6e:24:a4:df:fb:2a:e3:a8:8d:e1:59:
b7:3e:4f:c2:af:09:95:c3:f9:ac:0c:ee:7f:2d:ac:
5e:a1:7a:c1:62:23:bc:a7:4f:69:ed:3c:f0:92:ae:
69:99:fd:1d:26:69:08:23:b3:c3:24:bf:e0:5d:24:
b2:bb:7a:f0:ba:a7:4a:04:c9:88:61:a5:f9:e5:87:
bb:e8:c4:33:90:7e:68:b3:34:e6:ea:12:ac:8d:e3:
08:d7:e5:d7:c5:24:f7:ab:3f:ea:eb:68:9e:04:be:
44:0d:cb:ce:0f:7c:9b:de:09:12:df:7b:7c:68:53:
77:c5:ec:0e:d3:31:e1:c9:ea:90:70:a5:78:d9:2c:
e8:ac:fe:06:e3:6a:57:b3:66:11:11:14:cf:f2:1f:
56:7d:16:17:89:d9:32:10:ee:6d:8b:f3:80:6f:8f:
db:38:ef:4b:a0:b6:25:6b:80:89:fc:85:ed:e4:92:
21:0e:c0:76:2d:44:fc:94:85:d0:bb:1c:d0:86:aa:
68:9f:57:39:cd:ec:0e:1d:7e:0f:57:6d:fd:2d:8b:
f2:70:d4:b2:d7:04:d3:74:43:59:32:74:37:85:4c:
93:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B3:76:7F:B9:77:31:A6:2F:A0:B6:50:E1:15:9A:A1:C8:62:4C:62
X509v3 Authority Key Identifier:
keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:91:f4:1f:b5:b4:26:e1:29:63:3d:ec:d2:68:66:2a:77:78:
67:0a:5d:7d:70:b5:e6:ca:4e:ce:1a:e7:1a:e8:53:ba:b8:d2:
77:00:eb:9a:e5:2b:32:1a:2f:19:48:1e:f5:8d:21:d5:4c:d6:
82:50:15:4e:9a:8d:42:4e:eb:3e:b2:8a:83:6b:8c:51:25:6f:
1c:0c:dc:44:bb:6a:4c:95:51:f5:b9:dd:56:72:0b:c0:65:38:
49:ac:f4:5f:83:fd:19:dd:78:20:de:d8:ce:04:a4:c0:e1:93:
2d:2a:54:c6:ae:d7:a3:de:76:80:42:40:fd:89:d8:7d:72:66:
5a:3a:f9:09:67:3b:6a:16:fb:62:f3:98:d0:55:42:09:49:05:
3d:c9:69:a0:b4:d2:6f:33:ce:89:3d:50:3d:fa:46:99:85:b8:
54:ac:39:d6:c9:8b:f8:5c:a6:8a:a4:5c:f9:1a:2a:91:53:8a:
21:e1:1f:f4:94:aa:c4:a5:97:a7:4d:6b:79:cf:35:aa:8b:49:
c8:ee:91:dd:6a:87:f7:2c:89:1b:c6:d6:09:e9:0e:0f:17:a0:
a1:d9:ee:26:c6:cc:41:b9:3e:1f:e8:f6:1b:20:81:95:b8:7b:
78:4f:06:09:9f:a9:4c:6a:90:0d:9a:66:b9:ed:ee:6a:fd:c3:
8b:b4:43:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:08:05 2025 by rpki-client