
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft
File: 7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft (raw, json)
Hash identifier: n3FOQ/mJ+KbZDCTVLBxle7WyHTOVsShQbnrlW4/HPGE=
Subject key identifier: AB:B8:C2:6D:5F:E2:E2:1D:10:6A:4A:50:0A:CE:19:76:D4:E6:1E:BD
Authority key identifier: EE:AE:52:92:3B:0B:AE:72:C9:83:D0:10:5F:50:9D:F2:10:BC:09:1C
Certificate issuer: /CN=A9193369/serialNumber=EEAE52923B0BAE72C983D0105F509DF210BC091C
Certificate serial: 018F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft
Manifest number: 018F
Signing time: Mon 03 Nov 2025 03:25:49 +0000
Manifest this update: Mon 03 Nov 2025 03:25:48 +0000
Manifest next update: Mon 10 Nov 2025 03:25:48 +0000
Files and hashes: 1: 7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl (hash: h99zfJI3/ZDyPvrUivZTT4JEQ+gDMvS84FNFC77+bjI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl
rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 03:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193369, serialNumber=EEAE52923B0BAE72C983D0105F509DF210BC091C
Validity
Not Before: Nov 3 03:25:48 2025 GMT
Not After : Nov 10 03:25:48 2025 GMT
Subject: CN=690820bd-7a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:58:52:88:01:34:3e:b8:b1:37:24:73:69:ec:
0e:af:17:ca:90:b7:e8:75:22:c4:9f:fc:37:66:44:
b8:6c:19:78:db:c3:57:c2:1d:c4:89:ca:bf:a2:7d:
5f:c6:6d:b3:8a:02:01:44:fb:c9:ac:aa:44:84:c8:
68:59:e1:30:9c:24:f2:68:f9:3b:5d:34:d7:18:84:
8d:61:c5:16:63:c8:ca:55:1b:12:e4:3f:b2:60:d6:
c4:0a:e4:d1:9e:53:97:88:ae:71:00:3f:42:ae:46:
df:50:0e:45:95:78:cc:42:7e:bb:7e:18:58:bf:b8:
ca:b6:cf:a2:a2:6e:e0:83:38:9d:28:08:aa:c9:12:
02:38:15:dd:b5:90:ee:46:bd:33:c0:27:be:91:d5:
78:91:e3:00:30:b7:d5:85:e8:b5:81:57:a5:a4:6c:
8d:a5:94:e6:ac:3d:d9:eb:e2:e7:00:de:ed:50:4d:
5a:ca:d0:40:df:a9:c2:15:dc:ae:16:bd:9f:94:6d:
a4:83:1b:25:fa:26:77:cf:69:75:a5:c2:7b:d6:39:
a1:8a:60:07:b6:e7:19:15:2b:9d:3c:bc:13:73:67:
0c:3e:92:47:01:7d:99:7d:7f:dc:12:5c:c6:d1:de:
98:96:e1:a4:ba:c7:26:47:9a:c1:f3:b4:c4:6e:12:
54:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B8:C2:6D:5F:E2:E2:1D:10:6A:4A:50:0A:CE:19:76:D4:E6:1E:BD
X509v3 Authority Key Identifier:
keyid:EE:AE:52:92:3B:0B:AE:72:C9:83:D0:10:5F:50:9D:F2:10:BC:09:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:bf:56:d3:b5:90:f7:f1:55:51:bb:1f:7f:ec:80:3d:67:e0:
78:10:88:cd:e0:09:5f:b8:fa:4d:cb:85:2b:db:b6:a5:f1:13:
bb:fe:cf:35:e0:b6:58:9a:de:99:1b:b2:20:d8:8c:7a:a2:49:
6b:77:e9:e9:96:15:33:45:d6:e1:80:4a:26:24:e7:6a:93:a7:
bc:19:6d:75:7b:b7:a0:8e:7a:57:db:d6:5f:ab:16:45:a9:3b:
a5:78:f5:11:ed:0c:0d:5b:20:45:c7:6d:fc:cd:b3:80:f8:18:
94:87:fe:7b:33:80:6c:38:e0:45:59:ca:87:48:cb:9d:5a:99:
aa:15:59:5d:ae:56:1e:59:73:63:08:c2:e4:4c:b4:74:e2:21:
9e:8a:59:33:08:01:f8:fc:e7:03:30:15:ad:7b:0a:cf:30:32:
51:02:a6:3b:88:fd:6a:8e:66:58:06:68:10:d4:8c:c8:57:ca:
9b:33:6e:a5:83:fc:e2:bf:44:ab:da:80:93:39:8f:8d:3f:06:
bf:f9:fa:03:ac:4f:53:9b:69:63:06:b8:77:93:a0:fe:c0:91:
e4:37:6c:ce:2e:c6:b1:23:8f:3c:b8:0c:e1:36:bb:65:9d:58:
6c:50:00:e7:47:bb:d5:a9:7c:ce:5e:99:06:4e:f2:a9:ec:8f:
76:4f:c0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:04:08 2025 by rpki-client