
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
File: t7c-ibYhCBYJzWiasK73-vFIkmw.mft (raw, json)
Hash identifier: fX2E8v+uywgl7mxgnkdEf4phFUkNG8ylW5MDAd1YFNM=
Subject key identifier: AA:14:E9:68:3A:F5:35:2F:A1:5A:5D:84:FA:18:26:71:AD:8A:7B:35
Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Certificate serial: 26A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
Manifest number: 260D
Signing time: Tue 04 Nov 2025 15:49:04 +0000
Manifest this update: Tue 04 Nov 2025 15:49:03 +0000
Manifest next update: Tue 11 Nov 2025 15:49:03 +0000
Files and hashes: 1: t7c-ibYhCBYJzWiasK73-vFIkmw.crl (hash: O2tdNhh3+CT2/Q2PLT+ozVxQ7vUCmOiszWfP8BknVfk=)
2: C9848396CD1711ED898C311FC4F9AE02.roa (hash: 90bUXqg3cX6TcPrG0r+8gEIwyzz7y27hAZ4AHHGnSac=)
3: AEEA3AE45BF611E984E25E54C4F9AE02.roa (hash: DUev2xfHV3YTqcp72PQ09DnBBnHJHORn9wfutfk8dS4=)
4: BE402F16707F11EDBD17DD28C4F9AE02.roa (hash: qxLlD9upoansLJQWeRP+10o0I/V0d1r/bH5x1O0/V8g=)
5: 4A479BB45A7911E998A6BE80C4F9AE02.roa (hash: CuSJKhwFQb+hfMj84NKrDKsK04kxlYtYkdcmO6stGaQ=)
6: A8ED74B2677F11F0A8B65370C4F9AE02.roa (hash: Wp4WdYeftXiPfjW7HOoNIgzcAj0lp284UPmRoAoGjBI=)
7: 1A982CC85A7C11E9A28B110DC4F9AE02.roa (hash: nvK1Z24o3Y0mSxZfV92U/XVDn0m0mWCKdJH5EqiltEc=)
8: 6223956A752011ED84F8CD3CC4F9AE02.roa (hash: YVcbpgXMdHx8v+kxbQV+/jeMyoJodLse3XaExj7zMzE=)
9: 8F92939C46C711E9A5547325C4F9AE02.roa (hash: DmzFqtms4jMKGs52grdF6fZLNgf7jxYCHnP/u/dLXR0=)
10: 3824883E72ED11EE812CE764C4F9AE02.roa (hash: ZM3YNiXjfVF2bNQ/sApF+ztIkamifRhD/WVYawLJU90=)
11: BD9FC7C4707F11EDBD17DD28C4F9AE02.roa (hash: DsDyu/qdLDuGh2vqG5nWK3AVRpzQ90DBj9cQIus0csA=)
12: FF145268EEAB11EFAD1FDC0CC4F9AE02.roa (hash: 7+AOspFdBHo0otaBbRJ8yi3iLWVOhPxZMZxpVy1nPP0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 15:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9888 (0x26a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Validity
Not Before: Nov 4 15:49:03 2025 GMT
Not After : Nov 11 15:49:03 2025 GMT
Subject: CN=690a2070-228b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:50:43:a5:f8:7e:ea:f7:06:45:d2:75:f9:14:
4a:03:98:d1:84:78:9a:67:c3:81:8a:86:46:58:20:
79:85:51:82:d5:5d:8b:85:44:8a:db:8b:f0:02:b1:
f2:ee:f5:8e:65:78:32:90:b4:c2:98:ab:34:2e:e9:
6d:33:dd:a2:bf:24:6c:28:6e:7d:4b:b7:54:97:f6:
f1:ce:da:90:b4:24:56:95:12:61:8c:c0:3e:1b:a6:
fc:37:67:be:74:d5:11:d7:04:42:75:3b:dd:bf:93:
e1:09:98:1e:bf:7c:15:6c:fc:37:cb:ff:d2:29:59:
be:71:3a:e4:0e:1a:b3:6c:3d:58:8f:0a:86:d0:59:
89:e9:09:ce:75:b5:62:34:40:7c:81:cd:5d:ca:eb:
fc:ca:b6:4e:f5:0b:09:65:ea:4e:99:9f:45:88:e6:
0d:f5:7d:5a:6e:5a:c5:f2:47:34:15:d5:93:39:4c:
0b:7e:c7:90:54:31:cc:de:a7:8c:b8:cc:c5:57:3e:
bc:f8:94:c4:d5:c7:be:a6:c2:b5:11:6e:af:4a:b2:
92:45:09:9f:63:91:e3:43:f2:2a:fb:83:69:29:88:
bc:44:14:e9:e4:9d:c3:26:6c:cc:54:b9:77:9d:c2:
28:4a:da:54:83:41:e5:6a:cb:92:95:6e:1c:2d:71:
42:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:14:E9:68:3A:F5:35:2F:A1:5A:5D:84:FA:18:26:71:AD:8A:7B:35
X509v3 Authority Key Identifier:
keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:04:5b:ff:8e:ed:52:f9:1a:74:01:f6:46:f8:e6:39:f1:c7:
20:17:ff:1a:e4:e8:8e:10:c1:14:25:3e:69:bd:84:19:a5:fb:
bf:bb:3e:b8:d9:7e:8e:6e:f2:b3:34:84:6e:44:7e:39:a9:41:
f3:98:fa:e5:3d:90:cd:3e:4d:9c:a0:e5:61:5d:12:82:b3:12:
24:6b:f9:3d:7d:69:fb:a1:dc:9e:7a:66:ae:47:89:af:d5:eb:
9f:3e:8b:08:bd:cc:12:b4:9a:5c:94:78:6e:96:6d:38:77:fa:
07:da:ce:c5:41:10:b4:a3:30:6a:a7:e8:3c:e2:d4:3a:a4:c5:
ee:78:74:7e:63:36:61:51:b7:c6:e8:37:f6:7d:a3:bb:de:be:
5e:1b:d6:ee:ac:a6:64:34:b0:e7:d5:39:d0:8e:8b:63:48:49:
cd:58:20:a8:3a:07:53:93:df:d7:18:92:29:7d:1b:1e:e2:13:
30:2a:0b:69:6b:9a:9e:83:63:12:e7:35:2f:29:ab:b8:27:d6:
ef:c7:78:37:73:f2:58:e5:03:de:23:5c:63:f6:9d:d1:56:87:
72:ef:d0:34:a8:1f:51:93:5d:40:c9:c9:85:ed:03:ce:a9:f6:
f9:94:95:9e:53:0b:ac:d5:1b:2d:38:6c:a6:a8:08:49:2f:82:
ac:dc:4a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:52:49 2025 by rpki-client