
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
File: S-7HT0dvsXHcjtr5SR1swnv4Di8.mft (raw, json)
Hash identifier: ZCrueUptz+EKUJ7enCjc4G1RxL7XGMLv8E4+m0lCp0Q=
Subject key identifier: 90:8F:2E:3D:D1:8C:6F:7C:46:5C:3A:EE:73:FA:17:50:BF:84:75:DA
Authority key identifier: 4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F
Certificate issuer: /CN=A918F961/serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
Certificate serial: 7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
Manifest number: 7C
Signing time: Wed 05 Nov 2025 06:56:17 +0000
Manifest this update: Wed 05 Nov 2025 06:56:16 +0000
Manifest next update: Wed 12 Nov 2025 06:56:16 +0000
Files and hashes: 1: S-7HT0dvsXHcjtr5SR1swnv4Di8.crl (hash: HvBVseX/BqiEFbdaEa/Mo3FdDSpI2KySrsSJIy8Ag34=)
2: D0D1D812FB0D11EFABB24730C4F9AE02.roa (hash: FptmFY6XaETE0B5U8dohhb5+IR8DEmGWZVTlRovACOI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl
rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F961, serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
Validity
Not Before: Nov 5 06:56:16 2025 GMT
Not After : Nov 12 06:56:16 2025 GMT
Subject: CN=690af511-5282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:7f:e5:f9:71:6d:14:3d:39:68:56:e5:e0:
e7:69:65:41:4a:8b:fb:68:2d:9d:cd:dc:39:cf:19:
c2:2b:1b:a6:57:f0:ee:89:ed:df:8c:5b:d2:a8:b1:
a5:13:86:6e:a2:8d:62:c4:7f:8e:59:51:4b:6a:ab:
99:5f:0d:4e:27:fe:de:88:c8:39:2d:d4:39:8f:f0:
06:c9:c7:11:a8:8e:37:a6:a2:fd:72:46:b8:b0:54:
af:d0:a2:30:c2:13:65:58:21:a8:c8:d3:9d:e2:ea:
b3:4d:ab:bf:ee:3e:41:99:8e:b3:50:16:39:c1:85:
36:76:72:c8:cd:9e:74:f8:63:a7:8f:6f:71:30:85:
c7:a2:9a:73:a0:ff:68:39:67:f8:49:f1:6c:08:8c:
75:b8:78:1c:b1:5d:2f:3c:08:74:51:55:97:42:72:
05:e4:26:60:02:37:da:44:9c:a7:d8:59:0a:de:d6:
ee:9e:37:fd:8a:c8:74:4e:30:6f:0a:bd:92:31:26:
fd:4c:97:69:b5:1b:96:22:8f:08:5c:2c:d7:f3:f8:
50:e5:5d:6f:1b:ae:56:83:fb:6c:7f:fc:9b:dc:75:
bf:09:9c:15:d1:13:2c:44:b9:2b:0e:b0:80:94:76:
d7:82:30:1d:8f:77:33:06:38:f0:fa:59:c4:58:7b:
bb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8F:2E:3D:D1:8C:6F:7C:46:5C:3A:EE:73:FA:17:50:BF:84:75:DA
X509v3 Authority Key Identifier:
keyid:4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:f5:e5:23:ac:ae:4e:a1:df:b5:0f:59:12:3b:d9:63:2e:f8:
f9:f5:49:d9:a5:ff:9f:19:3e:72:7a:c7:07:ff:3a:f6:30:d1:
5e:9b:90:21:cf:84:79:01:7b:e3:af:21:aa:25:37:f1:42:82:
27:ba:37:cb:18:ce:ce:9c:14:53:df:86:8b:a4:91:10:37:94:
c8:72:c3:53:d4:3e:4c:86:0e:51:0f:aa:11:9c:24:98:89:05:
fe:48:1a:b7:56:e9:64:99:f1:a4:06:68:90:57:98:20:7b:49:
bd:03:5a:da:25:3f:a8:02:3b:20:55:64:97:8a:6f:d1:25:21:
ab:44:18:24:99:c6:a3:a9:da:f3:74:03:3f:04:0a:1f:50:10:
42:8e:9f:12:a0:3e:ec:93:27:3d:d4:15:d1:01:51:8f:83:51:
52:b6:53:be:e8:e9:1d:c3:eb:33:a9:ff:5b:40:3f:6f:5b:4d:
de:8a:71:b1:f5:b8:f7:16:ad:5b:ef:20:65:4b:ce:3a:7f:21:
02:f7:8e:ad:dc:8d:3e:11:1b:51:5f:25:91:17:7c:5c:49:45:
ed:62:8b:ce:d9:c0:51:02:6d:15:c9:40:18:02:7f:b3:6f:2d:
80:07:e3:17:3c:d4:0d:bd:ab:fe:76:fc:e3:29:49:c0:1b:52:
78:1e:ac:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:22:45 2025 by rpki-client