
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft
File: 7ZIUoK3iNSkzeSFihbucXj4PXW8.mft (raw, json)
Hash identifier: 40Jr7hZfa5+5+vNnZitHjEwsuHGyCcvunWVPI6RTvow=
Subject key identifier: 71:4B:5D:F6:A4:DF:AF:64:75:E5:DF:5A:82:1C:D1:C3:EA:6F:0A:48
Authority key identifier: ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F
Certificate issuer: /CN=A9183587/serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F
Certificate serial: 0389
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft
Manifest number: 0381
Signing time: Wed 05 Nov 2025 00:55:59 +0000
Manifest this update: Wed 05 Nov 2025 00:55:59 +0000
Manifest next update: Wed 12 Nov 2025 00:55:59 +0000
Files and hashes: 1: 7ZIUoK3iNSkzeSFihbucXj4PXW8.crl (hash: dERrgZdonYOpwFIqGUnjjQYH56lptU5gCp+usWryrnw=)
2: E9CDE63CD56811EFB4A0C533C4F9AE02.roa (hash: 5H3doinpQy2aJUR8V/Iyn/j6ZGC3RyvpumpsTRmuHeE=)
3: 632E90B0C6C811ECA5A9AB33C4F9AE02.roa (hash: lc1pPdhpDyedJmN9wKoMqneYMH913sVIQlr9uEAlmPc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl
rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:55:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 905 (0x389)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183587, serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F
Validity
Not Before: Nov 5 00:55:59 2025 GMT
Not After : Nov 12 00:55:59 2025 GMT
Subject: CN=690aa09f-331b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:30:7b:17:eb:43:d7:b1:e6:79:81:e3:ce:12:
8d:16:e7:23:45:5e:b9:28:62:3b:31:fe:ab:b1:31:
80:64:23:1d:18:3b:1b:a0:56:21:ef:3b:10:27:b4:
21:72:ac:16:9f:97:c4:c4:8a:d5:72:77:6a:64:4f:
a9:ce:d5:7a:20:83:21:95:da:3b:44:e4:54:99:89:
3f:19:75:87:8b:f3:ee:0b:b5:59:7a:f3:e2:c5:23:
28:dd:5d:af:b5:ed:42:30:8b:cb:81:a0:1f:91:22:
5f:fb:96:72:cc:81:1d:59:38:8c:63:81:ae:39:e8:
fc:88:ff:26:55:92:c4:46:75:9b:ca:70:d1:46:92:
b3:3c:18:3f:00:4a:43:50:33:bb:c6:4a:9c:53:fe:
81:af:03:0e:59:fa:3d:d8:e2:dd:54:87:61:73:9a:
85:f8:34:98:9e:b1:ae:9f:68:61:b5:81:40:2d:e5:
36:d6:ab:75:29:ee:87:08:f2:7e:c4:07:74:85:fd:
43:3e:9f:4f:f6:a7:e7:9f:66:7f:86:58:6d:78:85:
52:72:90:25:b2:39:3f:1b:de:87:50:3f:cd:21:6d:
40:95:a2:53:ef:88:47:aa:c3:dc:62:d5:99:16:78:
3e:47:24:e1:02:de:8d:03:52:14:97:c3:63:1e:ad:
84:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4B:5D:F6:A4:DF:AF:64:75:E5:DF:5A:82:1C:D1:C3:EA:6F:0A:48
X509v3 Authority Key Identifier:
keyid:ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:95:c2:f5:31:43:61:9d:c7:97:1f:5c:d8:9b:c4:42:3d:0e:
10:70:82:ac:82:e9:c3:aa:5e:85:70:c8:14:69:5f:c5:d8:7f:
18:bf:1e:45:5f:d4:ac:70:c4:36:5a:e7:f2:54:a9:70:fd:17:
ab:ee:b2:e5:5f:a1:da:26:4e:be:45:8e:b1:17:b1:2d:19:bd:
4f:15:6f:05:70:e6:9c:7f:0d:fc:0f:65:27:74:c2:4c:39:0a:
7e:d4:12:c0:05:d5:b4:3d:97:a9:4d:44:d8:10:2d:4f:88:26:
5a:66:48:9b:13:40:4f:c8:8f:ae:e6:bd:37:17:43:6a:1b:0e:
34:22:05:01:62:d0:80:59:9e:ef:10:76:f9:9a:db:f8:76:23:
60:05:ce:b0:e4:24:ff:43:11:07:ef:d2:dd:f0:f2:b4:17:ed:
08:01:49:d6:4b:ed:3d:3b:9d:45:5b:de:bb:e9:67:c2:b8:00:
61:4d:e6:63:e0:4a:fa:fb:27:7f:c4:04:6a:e4:59:d8:aa:dc:
eb:a3:fd:e5:2b:4a:aa:cb:e3:01:e9:cb:2b:c4:91:09:bd:bd:
23:5c:be:5b:d1:da:c0:15:26:d4:5f:b4:91:ea:88:de:e5:ab:
47:c2:73:2b:1e:fd:e0:f4:f4:f4:71:0d:c0:7a:88:32:c2:d5:
18:00:a8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:34:29 2025 by rpki-client