
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
File: npKCbPR9rsiFyZgQKH24bmlXaOo.mft (raw, json)
Hash identifier: 77lmNsIm7U+lfKrXwi0fLP60+eip01mINkUBvQRN4AQ=
Subject key identifier: 77:1C:E2:D6:3C:61:99:89:3A:6B:49:F6:1F:9B:B7:88:23:8F:4B:FF
Authority key identifier: 9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA
Certificate issuer: /CN=A9187000/serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
Certificate serial: 15B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
Manifest number: 1590
Signing time: Tue 04 Nov 2025 16:52:18 +0000
Manifest this update: Tue 04 Nov 2025 16:52:18 +0000
Manifest next update: Tue 11 Nov 2025 16:52:18 +0000
Files and hashes: 1: npKCbPR9rsiFyZgQKH24bmlXaOo.crl (hash: ClTXMpDHcIt59fOcIBFak7W0gey+DUU38nsCwtddPPw=)
2: 08C486D0E47311EBB62C361EC4F9AE02.roa (hash: E6ZfJqWKl59ctqtC8pvHl8ZSeijGWf0fidXXivDnF8s=)
3: 75417ABE781411F0BDF7A723C4F9AE02.roa (hash: +PM/BNSQ17ND+kO8gcl6/hex8B+MKYuBQPyA7XyFPXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl
rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:52:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5558 (0x15b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187000, serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
Validity
Not Before: Nov 4 16:52:18 2025 GMT
Not After : Nov 11 16:52:18 2025 GMT
Subject: CN=690a2f42-b6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:54:37:ce:d2:94:89:f5:b9:53:1f:a7:f2:
d9:02:ee:9e:26:2a:f3:55:4b:62:fc:69:bb:7a:00:
ca:0e:4a:eb:c3:7a:d0:d3:40:9e:aa:69:ce:37:8a:
96:a0:31:fe:37:44:cf:6e:a6:6e:52:10:82:39:c3:
9a:2b:fe:5a:0d:fd:85:ec:db:5a:91:47:7b:bc:e3:
8b:45:81:df:1f:65:1c:eb:3e:3f:3e:d0:5a:c0:b2:
67:2f:6e:44:82:b6:e3:c7:5d:0b:d9:2a:98:07:58:
93:b4:f5:97:cd:e5:0a:6f:f7:99:7b:f7:05:b1:2b:
78:ef:a2:b9:68:f2:19:0d:a8:1c:e4:74:7d:af:05:
42:2f:7c:de:b1:4b:37:d0:12:eb:b8:30:20:57:c7:
f0:40:b6:6a:a2:70:1b:a9:9f:66:99:7e:53:91:b9:
ba:17:ae:2a:8d:5d:f9:da:31:75:cb:39:d2:aa:e1:
3c:c0:4b:0d:39:23:28:38:66:94:b4:e8:8f:05:18:
fd:18:f4:80:ac:6d:4e:27:0b:d5:20:2e:85:53:63:
96:87:ce:66:d5:e5:9f:27:a8:f2:13:10:19:23:07:
63:36:8d:2b:2c:78:bf:f9:f5:db:ed:44:fe:d6:4b:
86:4f:f3:17:d5:71:20:7c:37:48:d3:7c:b0:e3:1e:
bf:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1C:E2:D6:3C:61:99:89:3A:6B:49:F6:1F:9B:B7:88:23:8F:4B:FF
X509v3 Authority Key Identifier:
keyid:9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:fa:f3:17:10:25:5b:d7:c6:29:b8:e4:93:36:ee:3a:b4:a1:
6e:8f:41:86:3b:7d:06:6e:6e:bd:ad:a9:2e:f8:a2:6c:d1:0c:
1f:5c:6f:92:b4:63:71:09:24:4c:e6:8c:39:8a:c8:4c:3a:81:
50:ff:f6:4f:56:25:b7:d8:b9:0f:f1:8e:48:57:64:08:69:bb:
85:d8:fe:8d:35:c6:a2:05:2c:b5:38:3a:f0:7b:e6:d8:4c:68:
11:7f:94:92:d8:ef:10:8e:2a:38:c3:47:aa:e8:2c:9c:ed:c6:
27:68:34:74:15:eb:a7:22:45:9b:43:49:f3:d7:91:a1:7c:b6:
bc:cc:e6:a6:a1:82:37:2f:be:d2:d3:f0:cf:23:4d:7e:b6:55:
9e:90:1a:7f:0a:18:93:55:c1:1b:1d:d7:20:3d:5f:c3:58:dd:
15:94:4b:26:9c:39:62:d0:65:19:54:c5:49:e3:b1:f5:eb:be:
54:5b:f1:d0:10:c6:a6:72:4e:83:23:ff:6e:2e:59:72:f1:5d:
65:2d:58:18:bb:c1:53:aa:00:8c:68:e6:6f:a2:50:d0:a7:75:
9a:11:7f:dc:f3:92:e6:d0:06:38:6d:c3:62:78:d5:bb:69:af:
43:0d:67:3b:95:3d:16:a3:5d:bf:47:34:5a:6e:2d:6f:60:f6:
3d:40:bd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:29:07 2025 by rpki-client