
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft
File: N1NyjlTwmkhRPf_S-nGARBH82yA.mft (raw, json)
Hash identifier: qCgJJq0C7rNkVY2RO6OAD7Sg/biCPfe1Z0DEEec9McU=
Subject key identifier: 45:7C:FE:09:CC:FB:4F:EE:41:1B:A2:F6:85:51:31:2B:47:03:4B:0D
Authority key identifier: 37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20
Certificate issuer: /CN=A919D6BB/serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20
Certificate serial: 0CE1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft
Manifest number: 0CCD
Signing time: Tue 04 Nov 2025 18:15:31 +0000
Manifest this update: Tue 04 Nov 2025 18:15:31 +0000
Manifest next update: Tue 11 Nov 2025 18:15:31 +0000
Files and hashes: 1: N1NyjlTwmkhRPf_S-nGARBH82yA.crl (hash: Fr1yR0ASaXtq/JtJzB7vrT+pkKrF4r640wQdkfw0aYY=)
2: CA39F7F0FB6311E999847F4DC4F9AE02.roa (hash: vr09dbtEy2Fgutt0NtzNOJlZbFaSyEOb3HlcebNKKlM=)
3: B647F704090C11EFB666C967C4F9AE02.roa (hash: C/GK3qZr1DIfgcq87pT0/h+xz6IT2+9Jo03Tvm4UR1g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl
rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 18:15:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3297 (0xce1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D6BB, serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20
Validity
Not Before: Nov 4 18:15:31 2025 GMT
Not After : Nov 11 18:15:31 2025 GMT
Subject: CN=690a42c3-28c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:72:f3:b1:62:ce:3f:98:19:49:21:91:86:b5:
53:3c:e6:7f:04:cf:d0:86:5b:64:63:ba:3b:a5:f0:
e4:64:49:b1:65:c8:d9:94:5d:dc:82:08:b5:dc:b3:
e3:b5:1f:0f:cd:b2:ee:45:ca:cf:07:59:58:08:3e:
22:6e:a4:a1:46:2b:39:9f:c0:01:ef:97:e5:0e:91:
3a:a8:e9:29:0c:ea:33:95:bc:1d:f3:96:54:ce:d5:
03:d3:bc:2d:fa:9d:9d:24:44:d6:1c:66:3c:0c:c6:
73:d8:ad:90:38:41:a9:3a:c6:fb:2b:4c:af:96:d8:
24:cb:f8:2a:d9:9f:cc:ee:02:e6:d6:57:06:f7:8b:
5c:bf:86:54:70:83:f0:7f:47:36:c2:7e:85:eb:c1:
81:69:3f:b7:03:6c:a4:83:a5:66:a6:41:61:05:4f:
8d:6f:b3:e5:58:5c:08:cd:25:55:0f:7c:62:f6:90:
b5:79:11:aa:6a:17:a4:45:fc:68:2e:49:d9:c6:6f:
a6:1f:e1:7e:4e:29:4d:e6:fd:f3:a6:10:48:7d:d3:
28:3b:d3:89:22:98:f7:6c:c6:a9:80:51:d2:f4:49:
d1:d5:73:4b:c6:31:a6:44:da:21:e7:55:a9:e5:bb:
8c:fa:0e:4f:17:7a:45:f9:39:b3:f0:35:12:39:33:
bf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7C:FE:09:CC:FB:4F:EE:41:1B:A2:F6:85:51:31:2B:47:03:4B:0D
X509v3 Authority Key Identifier:
keyid:37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e2:50:56:34:1c:fc:9e:02:67:a2:66:92:b2:29:44:29:50:
80:d3:57:bf:9b:32:50:8a:da:d7:d6:f3:79:ac:e7:3f:b8:0c:
2d:78:d6:c5:b5:0a:b6:02:b0:5b:e5:2a:94:f3:5d:ad:3c:c6:
89:f4:2b:61:d5:56:2b:14:38:7c:6f:19:0d:39:92:a8:57:98:
65:cb:e1:64:7d:10:1a:d6:ea:dd:e9:bc:d6:86:92:ba:89:f7:
28:43:a1:e6:bb:63:78:e6:c9:cc:bb:d1:99:ef:5e:36:b3:ed:
6d:fc:81:27:2c:b1:26:f2:09:7a:a4:f9:e6:e2:93:d6:e9:0e:
b6:16:6b:a9:60:0f:65:c8:21:60:ad:cf:86:ce:06:3d:fd:b2:
be:1a:9e:69:74:b9:d9:af:bb:f7:91:c4:7d:0a:6f:8f:d4:90:
44:ee:d2:76:a4:72:e6:96:0f:95:0a:2a:34:6b:f7:16:df:da:
f6:8e:03:54:39:6e:56:e1:99:46:83:98:a4:66:ad:39:74:ea:
c8:97:61:73:07:d9:73:92:d4:01:84:5e:5b:7f:ff:4c:ee:97:
78:68:4b:f7:00:cb:ce:39:1e:bd:07:66:e5:0c:9b:79:1d:96:
29:cb:4a:03:0e:26:ed:38:20:4e:8f:b3:78:5e:1a:98:a0:c8:
1b:2d:40:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:17:16 2025 by rpki-client