
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.mft
File: SIlwUGJk75bYHsEuar0lbbMP3Po.mft (raw, json)
Hash identifier: 6d7eOu2x02zsRcBL+EbAUekyGRNQMLCc0CoXaMJsAUU=
Subject key identifier: 55:D1:6A:B0:2B:34:E7:4C:C5:6A:EF:67:2C:F4:E6:D8:67:D9:EA:17
Authority key identifier: 48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA
Certificate issuer: /CN=A919536C/serialNumber=488970506264EF96D81EC12E6ABD256DB30FDCFA
Certificate serial: 01FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.mft
Manifest number: 01D4
Signing time: Wed 05 Nov 2025 03:24:23 +0000
Manifest this update: Wed 05 Nov 2025 03:24:23 +0000
Manifest next update: Wed 12 Nov 2025 03:24:23 +0000
Files and hashes: 1: SIlwUGJk75bYHsEuar0lbbMP3Po.crl (hash: LEeF9pOMgZM0DEf8mvhsGi8cuZSmO2Jiuuz6rzt3ApY=)
2: 627A2B5C6E8211EFA8F9497EC4F9AE02.roa (hash: GDYTVh4gyl7O9JzQyRBJqT3HYO/YJl9I+B0Gy9Lz2Cc=)
3: A460738A366311EEB376DC3AC4F9AE02.roa (hash: 0NoO1H2x4iLqPGTPjj6vdQCUi1d5uzF87/kugyQBVZA=)
4: A73AF738366311EEB376DC3AC4F9AE02.roa (hash: Q2j+bx3N3ZdUKPXJTepPxaW/OkIMk2izDVndHTAeFvA=)
5: 99A281E8BC3411EE878F6918C4F9AE02.roa (hash: x/8WQYFzZJjd6qiztbaiX3Fhr5RPTxAWezVDeewWTpg=)
6: A6254C72366311EEB376DC3AC4F9AE02.roa (hash: sbz94/ghA9Z8Yf2KftdiTiUietfmj4zdumVvStOwteg=)
7: A4E3DD6A366311EEB376DC3AC4F9AE02.roa (hash: F/8OplCzxxbsHxuvcFxtuR1UH/SV8pdy21RejCPpR20=)
8: A6A9297A366311EEB376DC3AC4F9AE02.roa (hash: Q/tfph6nEYImSVUPIwrVwxqRFftY0TuEkG+wERHRvDQ=)
9: A87D6400366311EEB376DC3AC4F9AE02.roa (hash: 1wC1Zjtr4j1pOe9r95SiDjCvJHvrP4BbdROmwODnYXg=)
10: A5A25326366311EEB376DC3AC4F9AE02.roa (hash: gx3HIUe1RGtDm6y22ZFweid6K0sud9BNrhfyZltCrH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.crl
rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:24:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 508 (0x1fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=488970506264EF96D81EC12E6ABD256DB30FDCFA
Validity
Not Before: Nov 5 03:24:23 2025 GMT
Not After : Nov 12 03:24:23 2025 GMT
Subject: CN=690ac367-231c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:33:fc:dc:a7:ee:22:9b:08:f6:a3:0c:86:64:
e4:73:6e:0f:bf:6a:b2:d2:52:7b:e3:67:e1:ac:89:
53:20:da:b4:57:d0:4f:50:01:4a:09:e7:dd:6a:2b:
8c:1e:83:3e:63:99:c7:5e:e2:be:ae:87:1a:22:a8:
71:f8:38:1e:bf:c4:7b:a7:6a:11:db:ea:40:2f:ed:
d7:84:68:b9:f9:59:58:e5:b6:f0:63:c4:22:ec:c8:
f8:56:18:ff:93:92:44:43:b2:48:76:db:a8:d2:08:
53:2d:f4:13:bc:7c:c7:8c:d2:00:1e:a6:c4:ba:53:
5a:0d:1d:2b:af:15:65:a5:8f:e2:ac:62:66:59:2b:
56:f1:49:fd:5a:96:c2:21:a4:c3:66:72:b9:a5:fe:
1e:dd:9c:d8:68:78:ee:b6:cc:c0:da:1c:5a:a5:3e:
30:f1:6d:97:a6:79:24:4f:67:b1:6c:df:96:d2:32:
c1:82:39:5b:29:84:f0:e3:4c:c1:da:01:93:8a:df:
20:59:27:20:82:f2:e6:dd:19:6b:66:9d:09:97:c3:
c4:1d:c5:c2:5d:35:8c:20:3c:f2:72:58:9d:a6:10:
9d:a0:94:d3:e0:43:42:c0:6f:3f:75:bd:46:2d:90:
ff:7f:cb:76:d3:60:05:78:fe:1b:9f:95:a9:ce:67:
54:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D1:6A:B0:2B:34:E7:4C:C5:6A:EF:67:2C:F4:E6:D8:67:D9:EA:17
X509v3 Authority Key Identifier:
keyid:48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:c2:9b:04:05:4a:4d:6f:e2:09:15:48:1b:88:0a:8a:b4:45:
ee:12:12:b2:0c:8c:72:0f:e7:de:a3:c0:b0:c2:f0:db:04:61:
06:ea:d2:cf:06:48:6d:53:19:a0:6f:b9:56:54:2c:94:2b:24:
15:b6:20:e0:d5:fa:1e:d7:e1:ec:df:e7:45:d7:5c:5f:28:07:
ec:1a:7e:63:51:d3:9f:f6:a0:6b:98:ff:b0:23:4d:38:c1:a2:
6d:13:d8:6d:c2:29:7a:76:b0:2d:9b:05:c8:f4:8f:1e:96:73:
e7:35:17:6e:4c:64:39:73:09:e7:f1:57:9f:f2:61:76:b9:fe:
25:85:1d:43:5d:36:63:c1:ce:40:40:ec:3d:01:61:bc:f8:2f:
80:0e:76:77:eb:26:63:58:39:63:52:b3:94:ca:1a:1c:61:38:
94:5b:3d:39:45:aa:c9:12:30:ee:fa:dc:d4:4f:65:0e:17:43:
c9:cf:42:77:15:36:7c:4d:63:1c:5b:df:d0:6a:40:c9:a0:d7:
60:8b:de:fc:45:85:f2:20:40:e1:19:95:fa:35:77:71:ba:2a:
b0:a3:24:42:5a:ad:d5:ed:68:4d:29:e8:56:6c:9b:e2:10:30:
5a:d2:0d:c6:9e:cb:5c:99:34:23:2f:df:e8:89:f0:1c:d7:39:
34:f2:59:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:03:15 2025 by rpki-client