
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
File: lNWHtudb8QivW0JJIsSouqs-6UY.mft (raw, json)
Hash identifier: 7zQqOL/j8xMr2RFLb1kNca0yCZHJBPQnvcD0ZT00gmg=
Subject key identifier: 41:B7:46:14:D0:45:3D:96:94:AE:2A:F9:15:1E:37:26:50:40:5F:6D
Authority key identifier: 94:D5:87:B6:E7:5B:F1:08:AF:5B:42:49:22:C4:A8:BA:AB:3E:E9:46
Certificate issuer: /CN=A919F0DA/serialNumber=94D587B6E75BF108AF5B424922C4A8BAAB3EE946
Certificate serial: 0839
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNWHtudb8QivW0JJIsSouqs-6UY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
Manifest number: 6128
Signing time: Tue 04 Nov 2025 14:15:27 +0000
Manifest this update: Tue 04 Nov 2025 14:15:26 +0000
Manifest next update: Tue 11 Nov 2025 14:15:26 +0000
Files and hashes: 1: lNWHtudb8QivW0JJIsSouqs-6UY.crl (hash: Ik+z9LMLtfCBcFgyuWoctM3d3R2MYZb6gYJAfZmFjrA=)
2: 58273588C2BD11EBA13EC07AC4F9AE02.roa (hash: 5XIGAWBdKItIK52ECdH5hYRYWf2CTjmbyPBWgm/ArQs=)
3: 22EA7FCC21F111EC85C6186EC4F9AE02.roa (hash: TBXM5JKe9WQFg+eymDKm9rzq3YFGl2pFt087HO+fACs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.crl
rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNWHtudb8QivW0JJIsSouqs-6UY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:15:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2105 (0x839)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F0DA, serialNumber=94D587B6E75BF108AF5B424922C4A8BAAB3EE946
Validity
Not Before: Nov 4 14:15:26 2025 GMT
Not After : Nov 11 14:15:26 2025 GMT
Subject: CN=690a0a7e-2674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:89:e4:19:b5:3d:cb:0b:38:10:4c:4a:e8:33:
97:8d:b2:c9:91:9b:a9:41:95:cb:73:ff:bd:12:6e:
53:f5:75:03:15:ff:91:49:07:dc:6c:57:20:49:5f:
4e:45:98:23:56:8c:44:0a:1b:af:0f:e0:c7:df:25:
bb:db:4e:47:84:44:fc:49:2a:ec:72:6e:d4:07:2e:
2c:b0:96:b1:84:a5:c2:be:dc:e1:a8:36:7d:b8:2d:
ed:79:5b:fd:2b:ab:38:8e:56:2e:cd:7b:3a:90:88:
7f:46:f0:fa:e8:72:9f:cc:7a:36:46:69:90:7c:9b:
06:11:ab:a1:0b:a4:8b:85:5d:55:8e:d7:f4:73:e0:
43:57:bd:fe:90:62:cf:c4:18:44:b7:f6:04:f5:a5:
8a:0a:e7:de:a6:cd:8e:6e:1f:80:60:ac:4b:1c:23:
f2:5e:50:ad:92:e2:a7:d6:c3:3b:8d:25:bf:c0:a0:
26:92:27:c8:d8:b4:64:49:b5:14:6f:24:3e:2f:b9:
20:1e:27:50:a2:b4:e0:d2:34:f2:06:20:b7:48:27:
22:4a:33:d5:5f:2b:a1:ef:92:a5:2b:1e:1e:15:cb:
38:b3:a6:33:74:17:da:68:df:99:c4:41:94:3d:e1:
f2:db:cd:66:31:a0:9d:30:3d:5e:fa:e0:82:a2:2f:
47:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B7:46:14:D0:45:3D:96:94:AE:2A:F9:15:1E:37:26:50:40:5F:6D
X509v3 Authority Key Identifier:
keyid:94:D5:87:B6:E7:5B:F1:08:AF:5B:42:49:22:C4:A8:BA:AB:3E:E9:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNWHtudb8QivW0JJIsSouqs-6UY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:8e:80:b4:4a:0b:15:e8:c1:1f:df:ac:e0:74:e3:4f:a8:b0:
1f:49:d6:d5:70:fc:96:16:db:55:f3:33:8c:81:5b:51:ad:02:
ab:b9:a2:25:73:b3:8c:36:67:b8:a1:8f:e5:64:85:04:37:3c:
c4:33:1c:4b:fb:d2:2c:de:15:6e:b2:8a:cb:12:88:5b:35:cb:
11:42:27:22:8c:49:9f:cd:17:df:ef:d1:2e:09:8d:d3:c0:27:
c8:d1:f4:b5:28:a2:7c:a9:d1:84:ba:38:30:71:01:fc:89:65:
35:d6:e6:ca:3b:4d:73:b5:3f:1f:ef:22:1c:ba:db:53:e1:98:
2a:8a:60:f3:4d:b8:44:4e:59:0e:23:fa:9b:84:16:48:f6:df:
e6:c1:5e:e9:81:94:2c:42:d2:06:7f:ce:cf:fa:11:4c:58:df:
d7:12:9b:62:72:4a:67:d7:43:f2:24:2a:27:80:2c:e8:4f:ae:
9c:16:aa:78:c0:8f:eb:70:85:1a:e1:05:b6:4b:58:c0:80:6f:
56:2c:d7:5d:02:8b:3f:df:34:74:36:57:f1:8b:02:e5:01:1c:
f1:7a:24:a7:ea:e4:f1:bf:c9:fe:59:b0:95:da:98:1b:e3:ac:
43:40:ec:f5:48:e3:73:19:c8:49:c3:7e:07:b8:8c:52:d2:a8:
f3:83:06:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:04:18 2025 by rpki-client