
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
File: RE63U1TDcG453qCP6VBEzSZj1q4.mft (raw, json)
Hash identifier: WT0HlV7ZU9GesuuYA+WoJmRrqI6qUtqItKAjgRu5RZ8=
Subject key identifier: 7F:0D:B6:5B:1C:6D:6E:A2:A6:41:1E:EC:6C:BD:31:02:4E:56:FB:F4
Authority key identifier: 44:4E:B7:53:54:C3:70:6E:39:DE:A0:8F:E9:50:44:CD:26:63:D6:AE
Certificate issuer: /CN=A9186004/serialNumber=444EB75354C3706E39DEA08FE95044CD2663D6AE
Certificate serial: 01B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
Manifest number: 01B4
Signing time: Wed 05 Nov 2025 03:14:12 +0000
Manifest this update: Wed 05 Nov 2025 03:14:12 +0000
Manifest next update: Wed 12 Nov 2025 03:14:12 +0000
Files and hashes: 1: RE63U1TDcG453qCP6VBEzSZj1q4.crl (hash: 4B3Bvj1SrxcELX2y9IdG4embDkWSXIlupElq6KUWb7k=)
2: 341206FE1EFB11EEB72FB14EC4F9AE02.roa (hash: 4o3wCFVGGhNXownasTh1SWA7+aLPJnMGrj0RWBQMCcc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.crl
rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 439 (0x1b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186004, serialNumber=444EB75354C3706E39DEA08FE95044CD2663D6AE
Validity
Not Before: Nov 5 03:14:12 2025 GMT
Not After : Nov 12 03:14:12 2025 GMT
Subject: CN=690ac104-2dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8c:6b:ea:fa:0a:e8:5e:cd:38:a7:1b:ef:cb:
99:a6:5f:a2:10:5e:60:21:65:30:60:5b:aa:f8:ba:
73:5b:7b:9f:e3:21:66:a0:22:e4:76:3b:03:9c:53:
3f:c5:c2:40:c5:f9:12:ec:a0:46:87:e7:20:18:8c:
6e:43:cd:54:cd:57:7d:96:8d:70:62:c8:61:96:76:
db:3c:9c:d1:9e:c2:62:f4:48:a3:f4:ba:f4:80:90:
e6:ae:fe:3e:96:c2:1c:aa:90:8c:ab:33:49:eb:41:
2c:b3:73:c3:c1:05:f5:5c:77:78:58:5d:b5:cd:9e:
ad:8f:3e:16:78:71:94:fb:42:e2:f4:e6:e2:b8:35:
a4:cb:44:57:f4:ca:46:9e:e0:00:be:f9:ac:32:1a:
f1:ab:18:e2:90:f1:1b:68:f3:76:ce:5c:cd:df:3a:
26:a4:ef:5b:91:c9:1d:d6:b4:62:6a:5c:a4:f2:73:
c6:01:66:aa:fc:d8:2f:bd:5f:7b:48:12:41:9d:09:
f9:21:9c:e0:22:cf:80:97:db:d2:07:9e:34:d0:e4:
be:f8:dc:e3:7f:2a:39:1c:65:07:85:af:a1:1d:2d:
e4:7c:be:55:98:6b:01:64:a0:a5:06:37:a3:86:b5:
b0:2b:29:e8:c3:99:fb:71:26:a7:b8:35:be:b7:e3:
e0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0D:B6:5B:1C:6D:6E:A2:A6:41:1E:EC:6C:BD:31:02:4E:56:FB:F4
X509v3 Authority Key Identifier:
keyid:44:4E:B7:53:54:C3:70:6E:39:DE:A0:8F:E9:50:44:CD:26:63:D6:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:4f:1d:40:68:ff:9f:f3:09:53:b9:1d:7d:d6:d3:64:27:9b:
4d:d2:a5:50:5e:1f:87:b7:6e:fd:da:27:37:8c:49:4f:02:af:
43:c2:57:53:d8:06:7a:0c:b7:25:9f:79:5b:2b:4d:e3:f9:ba:
32:ce:03:48:73:c4:6f:a9:a8:bb:90:02:e0:1e:ff:92:b5:54:
4c:a7:8a:91:40:11:b1:5e:07:f8:a2:53:28:9e:d8:4c:7a:92:
bb:78:ee:53:6c:48:55:a2:d7:fc:8d:fc:0b:1f:e8:39:2f:31:
0f:5d:db:b7:18:d4:7d:51:a6:a8:a8:b8:63:79:98:b1:f8:8c:
a5:eb:c6:c5:7c:c5:2e:0e:f3:9a:4b:00:8a:cf:91:30:76:f9:
58:53:4e:08:1a:27:c7:7d:89:04:98:e9:94:b5:6a:ec:2d:d1:
b6:fa:1d:a4:53:75:e2:28:a9:d4:b8:71:33:63:a5:e1:1a:40:
e0:9d:ba:a4:18:3d:4c:0e:b1:c7:68:37:e6:0a:c8:f0:2c:9b:
9d:a4:88:c7:b8:77:9b:8a:98:29:f5:6b:24:ad:4a:2a:fe:e2:
93:3a:4c:79:0b:02:fd:69:04:95:25:88:72:de:1c:ca:eb:2a:
62:33:0e:c3:da:41:55:9b:8f:73:5e:54:26:76:8e:b7:2c:38:
0a:96:0f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:04:33 2025 by rpki-client