
$ rpki-client -vvf rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft
File: cM1M0T4uN35eXDervHl-7ea2Yhs.mft (raw, json)
Hash identifier: RjdT4X/inLZh+CT+BfqIeidlQvZxzgzGVSsoyvUPDc0=
Subject key identifier: 32:E3:E8:4B:8F:13:9A:0B:3C:20:38:DD:6E:FF:DD:E2:CE:46:F0:85
Authority key identifier: 70:CD:4C:D1:3E:2E:37:7E:5E:5C:37:AB:BC:79:7E:ED:E6:B6:62:1B
Certificate issuer: /CN=A916F338/serialNumber=70CD4CD13E2E377E5E5C37ABBC797EEDE6B6621B
Certificate serial: 02E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft
Manifest number: 02E2
Signing time: Wed 05 Nov 2025 01:23:01 +0000
Manifest this update: Wed 05 Nov 2025 01:23:00 +0000
Manifest next update: Wed 12 Nov 2025 01:23:00 +0000
Files and hashes: 1: cM1M0T4uN35eXDervHl-7ea2Yhs.crl (hash: 7qyjb13g0T0tONxiDaxsYfLM/D2HO8BWDMaAVGkgNvw=)
2: BA5354A4044211EDBB686665C4F9AE02.roa (hash: 5D+EMadPUYOYtPY3WxKsOuXfJZW+RJaKdKnGQtm9R6c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.crl
rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:23:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 743 (0x2e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916F338, serialNumber=70CD4CD13E2E377E5E5C37ABBC797EEDE6B6621B
Validity
Not Before: Nov 5 01:23:00 2025 GMT
Not After : Nov 12 01:23:00 2025 GMT
Subject: CN=690aa6f5-6261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:67:59:f5:e2:db:18:88:7b:2f:1c:8d:e0:50:
2c:4d:b3:ff:f9:f2:4a:42:47:b1:b1:c7:66:83:f2:
c2:4b:4e:08:1d:c4:79:9c:e8:ed:d9:c8:a9:5c:85:
4b:99:cf:4c:cb:af:da:50:a1:bf:3f:4a:23:79:c7:
ae:a0:a3:e9:a5:fb:7f:05:25:09:68:b3:3a:3c:92:
3a:cc:68:4b:c4:58:cb:69:7e:0d:4e:5a:cc:af:85:
5a:af:f0:87:de:94:58:41:96:f3:fb:6c:46:6c:7b:
8a:2f:26:94:9f:9f:09:35:04:4a:6c:52:bd:34:8d:
50:dc:d9:e8:be:e1:f8:bc:e2:5f:40:c1:fa:f0:38:
f5:aa:ae:04:ae:51:67:85:a6:63:ba:e8:e4:c9:35:
7e:3d:87:51:6e:d2:5d:47:67:3e:72:0b:33:b8:a1:
3f:85:eb:91:99:81:fb:3b:00:98:02:c0:a6:18:f0:
fa:57:b7:b8:c6:b4:15:d1:01:4b:8d:2a:20:ff:f9:
b0:c0:22:b6:d1:f1:3a:f1:1a:43:bc:15:e4:27:e5:
e8:ad:6c:04:35:4e:e5:8e:ec:16:78:cf:57:2b:cd:
bc:a0:af:ec:8c:cc:15:e2:66:d9:9e:af:42:4c:64:
0a:63:4e:62:6c:b7:0c:31:65:b4:12:23:a8:1a:c8:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E3:E8:4B:8F:13:9A:0B:3C:20:38:DD:6E:FF:DD:E2:CE:46:F0:85
X509v3 Authority Key Identifier:
keyid:70:CD:4C:D1:3E:2E:37:7E:5E:5C:37:AB:BC:79:7E:ED:E6:B6:62:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:14:7d:99:f2:0f:7c:98:df:42:8c:11:8d:bc:24:2b:6b:99:
0f:36:bf:7c:44:5b:c1:a7:61:06:28:8d:db:d2:ed:fc:88:cc:
2c:46:6d:c8:d4:14:de:f6:3b:fd:08:c9:7f:33:f2:15:e1:3a:
6c:82:f5:a6:31:f7:b2:2d:60:0a:99:3c:4d:f9:61:6a:54:6c:
ee:59:c2:f0:8b:7a:aa:cd:64:eb:8d:1c:e9:83:52:0b:66:fc:
66:c4:65:80:5b:e4:33:33:5c:35:e5:e3:45:30:73:6d:8c:b0:
41:e7:21:15:8d:0a:af:ac:68:48:b1:76:b8:97:55:30:d7:1a:
30:d0:05:1d:28:87:29:01:15:ac:75:ce:5c:b4:2b:1d:41:46:
c8:61:8e:d8:8c:e1:f5:1e:72:98:06:04:3e:40:7c:65:8d:78:
4a:4e:1d:2a:00:54:af:53:b6:b0:dd:36:fd:ca:6d:83:98:d0:
ff:d6:6f:f1:84:e8:cc:2c:f9:db:9c:a3:c4:9a:d3:f2:c2:d0:
37:d4:1e:0b:fe:55:e9:92:99:2a:3a:07:4e:85:35:68:ad:a6:
74:2a:83:6e:90:72:73:b7:46:29:24:e9:b3:09:ff:91:20:65:
2c:4b:51:cc:bb:6d:3d:55:e7:64:1c:f8:69:90:ae:60:28:07:
b1:3c:34:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:56:53 2025 by rpki-client