
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft
File: O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft (raw, json)
Hash identifier: 7gHGJxMLn72fmEW3jIZKyspsaYGS6i022mFqEMTrV6k=
Subject key identifier: 90:2A:C3:4F:34:87:2D:50:CD:42:1E:A4:B6:77:39:D1:0B:93:DE:A4
Authority key identifier: 3B:B4:99:E1:17:B2:5F:F6:FA:36:A4:4F:3A:9A:94:72:96:29:53:EC
Certificate issuer: /CN=A916D2D2/serialNumber=3BB499E117B25FF6FA36A44F3A9A9472962953EC
Certificate serial: 0B3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft
Manifest number: 0B36
Signing time: Sun 02 Nov 2025 19:13:34 +0000
Manifest this update: Sun 02 Nov 2025 19:13:34 +0000
Manifest next update: Sun 09 Nov 2025 19:13:34 +0000
Files and hashes: 1: O7SZ4ReyX_b6NqRPOpqUcpYpU-w.crl (hash: AEyx2HhYVsdN5zwCYBBsNUYINu/pG+fnMCyw25R+4b8=)
2: E174463E4BD411EAAD10A710C4F9AE02.roa (hash: pPxz0Xj0Q495OhV6+Bhr4ANjqSPrxc3sqmemzntEGDU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.crl
rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 19:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2877 (0xb3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D2D2, serialNumber=3BB499E117B25FF6FA36A44F3A9A9472962953EC
Validity
Not Before: Nov 2 19:13:34 2025 GMT
Not After : Nov 9 19:13:34 2025 GMT
Subject: CN=6907ad5e-0a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a2:ee:eb:26:5b:8d:b8:dc:44:01:85:58:c7:
5c:4d:a9:4f:8c:0c:fb:24:8c:3b:4f:e7:bf:ce:7b:
6f:74:59:8b:aa:48:3a:bb:80:7b:26:7e:57:c0:e8:
9a:7f:35:e2:54:b5:1a:9a:4c:59:43:37:f5:5c:80:
01:dd:c2:9b:82:cc:2b:16:f4:ee:8f:9d:35:04:96:
87:15:24:e6:33:2e:fc:d4:aa:3b:c0:84:07:bd:89:
e3:c3:bd:f9:10:b7:cc:ad:0c:62:bc:a2:7d:5d:e6:
b6:45:a1:f6:29:be:bf:d5:5d:9e:62:67:4c:e9:0d:
b3:82:63:f7:e6:da:03:17:08:0e:fc:23:59:e3:95:
ed:37:57:7c:b0:02:af:72:6c:68:72:08:4b:51:25:
be:01:cd:ce:d7:d3:0c:62:d6:ec:f0:a0:75:f7:bc:
b0:11:81:c0:ae:ae:a2:63:d3:a9:57:46:8e:a0:ab:
a1:ee:81:7f:7b:bb:40:03:a8:aa:dd:0a:c0:ef:4c:
92:22:b1:41:2e:dd:aa:8b:07:da:16:d1:8b:1a:8d:
bc:64:08:b2:27:55:3b:67:72:14:06:82:28:cb:16:
d8:a1:7f:68:ff:8d:1e:ef:1d:eb:93:2b:ff:da:96:
e9:6a:78:0e:ae:77:89:02:a9:e4:de:e9:ca:31:d0:
9d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2A:C3:4F:34:87:2D:50:CD:42:1E:A4:B6:77:39:D1:0B:93:DE:A4
X509v3 Authority Key Identifier:
keyid:3B:B4:99:E1:17:B2:5F:F6:FA:36:A4:4F:3A:9A:94:72:96:29:53:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:81:16:6e:85:f3:be:b7:05:03:b5:e3:53:34:b2:87:9a:ce:
b6:e6:62:c4:ca:dc:1d:0c:77:cb:3e:e6:a4:d9:fd:ce:c3:1d:
31:68:d7:06:39:7f:10:58:99:95:a7:7d:07:b2:6b:21:6b:c1:
5c:80:c9:02:7c:5d:75:8a:01:bc:f4:38:b7:28:0e:86:59:67:
a2:16:0f:27:c2:27:01:03:79:19:33:57:1f:9c:2b:5e:0f:93:
97:32:9d:a5:a0:f9:3e:50:5b:4c:d3:a9:fc:40:60:f4:25:3f:
c4:6b:02:81:2f:89:b9:ea:38:be:9e:76:de:06:70:c0:cc:cb:
6b:35:ad:fb:60:92:96:d3:0f:34:60:6e:e3:4b:d8:f0:33:5e:
85:87:cd:12:d1:97:1c:84:a1:4d:a5:79:7d:4e:24:79:0b:02:
de:57:f7:f6:6f:46:c3:6e:40:5b:0d:5b:4d:9c:3f:bb:9e:03:
41:31:1d:72:f2:e1:cf:aa:fb:11:1b:8d:36:ff:4e:0d:c6:e9:
8e:cd:53:dd:f5:3d:a6:31:20:3e:c0:55:3d:3c:3b:c0:ad:e9:
19:bb:df:0d:7a:69:e7:b2:a3:ea:12:8c:ea:ba:dc:1d:ea:0c:
18:ab:3a:43:bc:b7:f5:b8:07:8b:c0:77:d4:ad:82:1c:0a:14:
6f:a0:2e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:19:20 2025 by rpki-client