
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft
File: rM6Cte30ohwyAbjitAAMgyRRNQs.mft (raw, json)
Hash identifier: TTQm7zFDkOJP2iQF4IEwd9GL2H8RHxtFU9Aa52wQVvU=
Subject key identifier: 9F:B4:B6:E5:51:7B:A1:B5:94:38:41:E2:AA:7B:37:89:5C:34:F8:37
Authority key identifier: AC:CE:82:B5:ED:F4:A2:1C:32:01:B8:E2:B4:00:0C:83:24:51:35:0B
Certificate issuer: /CN=A919F213/serialNumber=ACCE82B5EDF4A21C3201B8E2B4000C832451350B
Certificate serial: 02D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft
Manifest number: 02D1
Signing time: Wed 05 Nov 2025 01:27:31 +0000
Manifest this update: Wed 05 Nov 2025 01:27:30 +0000
Manifest next update: Wed 12 Nov 2025 01:27:30 +0000
Files and hashes: 1: rM6Cte30ohwyAbjitAAMgyRRNQs.crl (hash: huLNpxlaY5l5K5dmKrqR8ELU5rlTaMwfS6pczhOzX0A=)
2: C59B1D6E0C1811EDA9B32927C4F9AE02.roa (hash: mxX4AKL91owHWzEHb/qZfzEc1LLhMztNgoc1pmTwinI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.crl
rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:27:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 726 (0x2d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F213, serialNumber=ACCE82B5EDF4A21C3201B8E2B4000C832451350B
Validity
Not Before: Nov 5 01:27:30 2025 GMT
Not After : Nov 12 01:27:30 2025 GMT
Subject: CN=690aa802-d5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a7:f9:1b:99:72:1a:98:7a:3c:20:f6:52:24:
5d:73:d5:2b:86:76:5b:ca:a4:df:48:c4:8d:67:3e:
f6:9d:34:27:8d:8f:16:8f:d7:d4:fd:97:55:83:62:
bd:12:5f:f2:ba:27:db:88:14:68:8f:6c:a1:7a:4d:
ed:3e:31:ef:9d:45:a6:ad:2e:d1:a4:98:54:41:0c:
5c:9f:df:87:5b:0a:4e:4f:91:5a:3b:77:76:db:6c:
1e:61:e4:a9:d0:29:a5:88:ee:8d:e1:db:fa:b7:d1:
2c:c6:7e:a6:d3:6e:94:7f:33:04:23:74:c3:ee:cb:
71:03:43:17:86:ae:5e:d9:10:ae:44:39:dd:45:b8:
31:97:ef:36:75:d2:b4:f7:e7:2f:27:77:ac:01:9a:
6f:a0:75:7b:70:c5:86:f6:4d:f1:49:60:69:64:3f:
f4:97:39:a7:d7:e7:2f:a4:b2:1d:0f:db:06:1e:4e:
53:ea:35:2c:89:5e:d8:fc:58:89:78:30:c9:c8:e1:
5a:7a:30:af:e8:e2:47:26:a1:2e:c3:63:b5:54:f1:
c1:b5:aa:18:b8:ef:e5:da:1e:5c:6c:72:dc:0d:08:
b1:13:86:44:d7:38:2d:05:9d:99:df:41:1d:30:73:
b1:b3:93:3f:5b:03:48:da:09:5d:01:7e:0d:eb:bc:
87:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B4:B6:E5:51:7B:A1:B5:94:38:41:E2:AA:7B:37:89:5C:34:F8:37
X509v3 Authority Key Identifier:
keyid:AC:CE:82:B5:ED:F4:A2:1C:32:01:B8:E2:B4:00:0C:83:24:51:35:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:a5:e1:65:0a:93:27:84:19:af:ec:23:5e:6a:f4:50:c6:ce:
37:40:69:59:b5:1e:61:64:c9:9d:a9:d6:2a:e3:fb:2d:af:22:
da:cc:8b:df:bc:7c:cb:51:8a:22:43:70:8e:07:d1:02:2f:31:
8a:31:97:65:3f:cc:e1:e3:74:89:fe:0b:31:f2:24:44:9a:c3:
e5:29:b5:9d:8e:59:07:57:d6:82:d7:1a:e7:c5:59:8c:97:37:
f7:be:b1:6f:cf:de:45:de:d9:7f:e2:a6:d1:cf:aa:a0:bb:30:
09:cf:d0:66:72:2f:b0:76:37:5b:0b:45:f3:c7:01:b7:07:4b:
33:20:8e:39:25:4e:78:f4:4b:d6:50:6d:72:aa:79:09:e2:bd:
2e:84:69:2b:51:79:5c:a0:d4:de:7c:df:4e:81:62:39:e3:3e:
4a:e4:30:94:00:5c:18:a8:87:21:a0:a3:a5:bf:4d:46:03:92:
6a:34:1a:77:2f:4c:92:a9:87:9a:ec:7d:dd:89:59:7f:1f:19:
63:44:f7:12:3b:a3:41:4a:93:5d:e3:27:d6:6c:27:2f:ab:04:
34:f3:37:25:42:17:54:58:a0:12:9a:d1:14:9c:1a:6b:c2:3b:
cd:96:38:70:c5:82:a7:d8:8d:57:03:82:49:22:e9:31:c3:d0:
e4:b8:c2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:18:04 2025 by rpki-client