
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
File: c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft (raw, json)
Hash identifier: nW0RWEBgybGwsbltjtrE9NMJyJSWZesvXm0sPVflwGA=
Subject key identifier: C8:B2:41:85:2A:EE:EE:AE:C9:CD:C3:C4:4A:1F:21:5F:8C:A9:4B:C4
Authority key identifier: 73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2
Certificate issuer: /CN=A91B2492/serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2
Certificate serial: 0B83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
Manifest number: 0B79
Signing time: Tue 04 Nov 2025 19:09:35 +0000
Manifest this update: Tue 04 Nov 2025 19:09:34 +0000
Manifest next update: Tue 11 Nov 2025 19:09:34 +0000
Files and hashes: 1: c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl (hash: SC3/C8nMrQ+435zwLmYAchqD9oGr1IqUIOKLsqRRH/s=)
2: C8436A008D7B11EDB7EB7F37C4F9AE02.roa (hash: yf7uD6ZoAkwSZ6smBK5+++p61GtYidM7gXgm7RNFP38=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl
rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 19:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2947 (0xb83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2492, serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2
Validity
Not Before: Nov 4 19:09:34 2025 GMT
Not After : Nov 11 19:09:34 2025 GMT
Subject: CN=690a4f6e-9fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:be:7a:9a:e7:2e:2e:79:e8:59:39:c8:b7:
85:3e:d0:aa:4c:44:cb:15:c4:2e:ee:ad:b9:cd:92:
96:30:ff:18:95:91:7d:05:cf:65:1e:b6:e7:c9:2f:
ae:7c:72:70:47:55:d7:1d:ef:02:4d:5d:b9:74:33:
74:2a:06:d6:04:84:39:c5:fe:71:3d:4b:96:69:7f:
43:56:8c:dd:92:c9:28:0f:e2:c5:da:af:44:21:70:
19:99:6e:d0:f7:37:46:04:73:b7:89:e8:05:b8:9a:
15:00:e4:02:2e:62:f0:31:e6:a3:7a:c6:bd:18:c8:
29:1f:5f:02:db:b4:d1:e5:85:97:4c:ce:fe:67:8e:
44:cd:d0:98:9b:5a:6f:11:c4:8b:8f:a9:04:c4:0a:
02:3e:ee:eb:94:4e:d6:b9:e8:ae:af:69:5a:ca:54:
ff:7f:2e:4c:e3:6e:f1:7a:b7:21:3e:a6:c0:2e:aa:
e3:62:69:55:9b:8e:8e:d2:7d:c0:4e:ed:a3:86:8d:
f2:99:81:f2:b9:9d:2d:e0:50:95:dd:2c:ca:09:04:
3b:45:16:f8:58:9e:65:dc:3c:2e:5b:e1:b2:c3:60:
f5:bf:1c:4c:14:05:ba:0c:46:3b:c3:e8:2c:34:95:
6c:4b:00:1b:1c:ea:6f:99:22:57:f9:e3:9a:cd:95:
7c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B2:41:85:2A:EE:EE:AE:C9:CD:C3:C4:4A:1F:21:5F:8C:A9:4B:C4
X509v3 Authority Key Identifier:
keyid:73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:05:f4:ce:b6:f9:b4:2a:83:28:6f:e8:45:05:6d:8c:7a:5a:
82:79:ba:23:ec:7a:b0:7b:b4:cf:da:e9:0a:9d:2b:29:37:b4:
9c:f5:fa:ee:78:d5:0e:c9:a9:22:ba:53:8f:59:d8:61:4b:33:
df:e4:4a:80:4d:83:1f:5a:76:dd:06:74:4f:6a:d6:52:02:22:
9e:19:03:13:64:1f:c0:1d:60:6e:4d:f1:64:b8:1e:47:d1:c1:
92:73:ed:04:82:54:38:c5:7e:cd:49:8f:80:f8:b0:98:98:01:
6f:e6:a1:57:de:41:ff:6b:2f:37:53:29:c0:c6:be:f8:8d:7b:
fd:22:34:e7:c2:96:59:96:58:d6:ab:e9:a2:6f:22:38:87:8f:
88:27:5e:5a:f9:03:77:fc:fb:05:33:bc:03:3d:6c:ec:ac:9e:
92:c7:6d:ae:3a:d3:18:46:54:4b:e0:b1:be:04:fc:83:52:e3:
8d:bd:54:40:fb:c5:ac:e2:63:62:22:3c:9f:a7:99:2a:58:18:
6f:41:1e:f6:95:75:aa:c0:0a:72:ab:24:1f:3f:4d:cc:4f:9d:
e6:6f:40:4a:1a:8b:11:a9:2a:71:f0:9d:6d:84:7f:ec:2a:cf:
21:64:54:b4:67:f0:6a:56:16:91:fd:3c:67:0b:da:23:d1:88:
d7:70:cc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:50:23 2025 by rpki-client