
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft
File: _pB9p6f5k3mm_UY90X0ltNUB3-g.mft (raw, json)
Hash identifier: 53saCDLN1WTPVOEuS2ULlXp08tQ8BZiuD1lrnjCWhoo=
Subject key identifier: EE:F7:BD:28:B2:E1:C7:71:1F:EF:D2:13:B6:F0:64:0B:10:83:40:1B
Authority key identifier: FE:90:7D:A7:A7:F9:93:79:A6:FD:46:3D:D1:7D:25:B4:D5:01:DF:E8
Certificate issuer: /CN=A918D7D0/serialNumber=FE907DA7A7F99379A6FD463DD17D25B4D501DFE8
Certificate serial: 085A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft
Manifest number: 14ED
Signing time: Tue 04 Nov 2025 18:19:50 +0000
Manifest this update: Tue 04 Nov 2025 18:19:50 +0000
Manifest next update: Tue 11 Nov 2025 18:19:50 +0000
Files and hashes: 1: _pB9p6f5k3mm_UY90X0ltNUB3-g.crl (hash: NsCIPUvc8pTV602hNfxAe1Eq4aGOPso3bHvhloPwSB8=)
2: 57B4ADB0066A11ECA8CBA567C4F9AE02.roa (hash: CrwjFPg8gDUHmyLmt3AGGq8klRcYSMyETp380bqgF2I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.crl
rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 18:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2138 (0x85a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D7D0, serialNumber=FE907DA7A7F99379A6FD463DD17D25B4D501DFE8
Validity
Not Before: Nov 4 18:19:50 2025 GMT
Not After : Nov 11 18:19:50 2025 GMT
Subject: CN=690a43c6-3f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:60:fb:a0:5a:40:93:d9:41:46:af:dd:94:fc:
be:80:06:90:70:7e:07:7a:bb:cf:2e:4d:5b:df:eb:
9f:5a:71:f6:3e:bd:a6:b7:02:e0:4f:88:b3:2d:c3:
5d:3e:ec:84:ec:1c:c7:0b:0e:ab:85:84:c0:dd:75:
eb:62:83:0f:b0:2a:7c:db:3d:a6:ea:2e:3e:f7:e4:
32:81:51:3f:e3:cd:6d:2c:5e:11:de:23:e7:76:11:
fc:56:21:d9:d8:34:39:8e:f1:41:71:04:76:43:3e:
f9:6e:7f:9b:05:2a:19:ef:bc:67:7c:28:ca:a7:08:
5a:2b:39:30:21:66:0d:17:d6:c1:27:a6:6d:ab:12:
1e:b2:67:5e:f2:70:3a:f4:d6:4f:98:7f:60:62:55:
f4:c4:d7:1a:46:8f:29:18:68:17:10:18:97:97:eb:
ad:1f:a3:c9:5c:38:23:6e:4e:60:9a:05:93:8c:54:
be:67:f3:5e:17:d0:3b:4a:b5:c8:27:1a:ec:7d:5d:
01:0f:90:a0:10:be:87:69:bb:82:3e:5f:6d:21:1f:
8b:10:f8:12:0c:31:63:43:21:e0:3d:31:79:74:bc:
95:da:12:fc:72:9d:3f:e7:07:7a:f3:05:9d:df:a0:
7f:0d:c3:bf:b9:58:3b:89:64:84:56:1c:d9:18:06:
8a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F7:BD:28:B2:E1:C7:71:1F:EF:D2:13:B6:F0:64:0B:10:83:40:1B
X509v3 Authority Key Identifier:
keyid:FE:90:7D:A7:A7:F9:93:79:A6:FD:46:3D:D1:7D:25:B4:D5:01:DF:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:0d:3b:d5:44:66:6f:df:28:62:15:9f:76:ab:32:ba:d6:a7:
66:2c:4d:ff:80:fe:1d:b5:7f:4b:65:94:aa:5a:3e:4e:bd:37:
08:ac:e0:84:2a:88:b3:cf:4e:c7:8c:df:05:bd:82:cf:c5:e6:
b6:e4:95:44:b9:0f:07:df:20:7d:be:e9:93:ca:53:07:3c:b5:
03:a1:4f:7c:1e:ab:84:09:aa:72:07:a1:35:dc:d3:09:a3:a4:
c6:a2:6a:bf:7b:f8:97:60:b3:92:49:2a:e5:ef:8c:4e:00:d8:
59:ec:cb:d1:b6:70:25:1e:bf:cd:68:11:d4:b9:6d:85:ce:9b:
7b:5f:17:df:b6:e6:06:c9:74:e0:48:e8:78:0e:13:a7:f0:78:
70:5b:d1:ca:e4:7e:5a:57:eb:14:c2:b0:b8:9a:1a:ee:69:85:
ec:0c:63:53:21:65:13:2b:d2:a4:8e:a1:92:eb:ba:1f:82:f9:
67:67:96:ee:f3:14:dc:28:77:d7:dd:2d:1b:b6:c1:f0:41:d1:
e5:e8:cd:f5:ff:d4:9c:e1:7c:cf:5a:85:d8:0f:4b:3d:03:a1:
1d:1a:5b:f0:c2:c6:a0:d5:b3:6c:6a:36:f6:50:56:e7:b4:cc:
45:3c:8d:8e:6e:f2:cf:16:60:91:bf:8e:a0:df:d1:cd:fd:9b:
f2:a6:8d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:27:07 2025 by rpki-client