
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
File: gSJD5rXQ3hGucMcns50fIeOurAM.mft (raw, json)
Hash identifier: z8PAoARAMbzkZI3oS2soah6poUFrV1WKf+0LB9TmIvo=
Subject key identifier: 19:DA:23:C0:B2:53:B2:B2:98:63:79:35:7F:E8:5C:27:D2:B3:F1:27
Authority key identifier: 81:22:43:E6:B5:D0:DE:11:AE:70:C7:27:B3:9D:1F:21:E3:AE:AC:03
Certificate issuer: /CN=A916E44B/serialNumber=812243E6B5D0DE11AE70C727B39D1F21E3AEAC03
Certificate serial: F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
Manifest number: F1
Signing time: Wed 05 Nov 2025 05:28:43 +0000
Manifest this update: Wed 05 Nov 2025 05:28:43 +0000
Manifest next update: Wed 12 Nov 2025 05:28:42 +0000
Files and hashes: 1: gSJD5rXQ3hGucMcns50fIeOurAM.crl (hash: M4g9VKZ/X9S/NFiBiRgSNJGc7JxcuY7zp9VAiMzGzjU=)
2: 546C4C7C4E1911EFA1FB9E57C4F9AE02.roa (hash: 1wBGCsyks8cyW7Tqe5unEjjdAeVlrN20AEhlf8No12A=)
3: B02CCB344E0C11EF9175067FC4F9AE02.roa (hash: Sv2Qw3+Rj/vqKoq2AuH3y5h0hIf7WuvrXwbnGTCVwEw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.crl
rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E44B, serialNumber=812243E6B5D0DE11AE70C727B39D1F21E3AEAC03
Validity
Not Before: Nov 5 05:28:43 2025 GMT
Not After : Nov 12 05:28:42 2025 GMT
Subject: CN=690ae08b-ef07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:23:eb:bc:0e:7c:88:c7:09:64:a4:9a:cd:
85:11:84:ac:3f:14:f9:cb:0d:a6:cf:e7:b8:77:4e:
32:ce:62:fa:99:13:e8:13:99:f1:26:82:fb:8f:7c:
26:f8:5d:34:40:ae:4a:e0:2f:58:e9:ee:e1:1d:c9:
4b:38:4f:b3:77:dd:7a:72:5a:10:d3:d3:0d:16:39:
7d:38:2f:a6:ee:2c:88:68:0d:36:ff:14:9e:da:80:
30:cc:00:59:35:5b:73:6f:51:85:43:36:f9:39:73:
5b:a9:2c:26:6c:ef:bc:85:fa:39:9a:d9:fe:a3:73:
16:81:35:b7:d9:ff:f9:b5:43:65:f8:2a:aa:a8:32:
e7:ed:54:81:0e:11:c9:ba:f3:52:1d:60:6d:3a:8b:
cc:41:e4:c2:32:d5:1c:96:81:46:c1:d5:77:2a:dc:
50:c0:60:34:eb:ac:67:df:ba:da:63:ff:17:63:c1:
71:4e:94:37:82:be:02:2a:d9:3a:55:9f:80:e8:a5:
3c:92:06:7e:a4:6c:06:c3:72:78:59:5c:68:70:60:
dd:4b:c1:97:15:78:77:61:0e:27:77:64:4f:2c:3c:
f6:d2:12:77:da:80:ee:6b:70:8b:f5:90:6c:94:41:
e8:9c:2a:1a:e4:34:1a:a5:c8:b9:45:fc:b8:f8:df:
34:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DA:23:C0:B2:53:B2:B2:98:63:79:35:7F:E8:5C:27:D2:B3:F1:27
X509v3 Authority Key Identifier:
keyid:81:22:43:E6:B5:D0:DE:11:AE:70:C7:27:B3:9D:1F:21:E3:AE:AC:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:58:51:70:86:15:08:af:1d:e8:f0:d1:90:00:97:2e:39:1c:
fd:b6:b9:38:ad:9c:7a:45:82:4e:cd:64:20:37:d3:0c:dd:04:
e1:c1:22:ee:5f:b7:69:6e:1d:2d:4b:f0:e5:04:8d:b3:27:cc:
66:15:86:a7:9d:42:c7:97:56:c9:02:09:80:78:a1:ef:75:86:
0d:d7:5a:17:c5:9e:c8:29:82:70:40:cb:40:59:54:b4:8b:4b:
2a:64:15:c7:1c:cc:8b:fe:ed:1e:ef:d8:fe:cc:77:a2:fa:a0:
46:3b:9c:9b:ab:87:2a:a4:63:be:63:bf:10:de:29:46:28:c8:
76:47:ac:66:dd:8d:61:6f:3d:f2:af:fb:08:ef:4f:16:cd:d6:
87:98:97:64:f7:ad:42:a8:b4:9f:66:e3:df:86:59:a0:6d:20:
c8:4f:51:3a:9d:5f:9a:94:75:be:20:8e:1c:ea:01:24:bb:df:
d6:49:a7:32:d9:35:7a:e6:95:31:66:09:17:ca:9e:91:fd:0c:
a3:d4:76:97:a8:24:1c:c2:a5:d1:fa:f4:3f:d1:89:7e:e2:73:
dc:18:1f:f9:5d:1d:96:82:2d:5f:8f:b4:e3:ce:84:b6:53:a0:
45:db:76:d4:3a:74:3d:e3:dd:7f:2a:92:55:8d:a0:1a:e3:f1:
73:34:e8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:24:04 2025 by rpki-client