
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
File: P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft (raw, json)
Hash identifier: /4O8ah3AmXCpSexB7p7qUh8ayoepY23EYBCzVluOYs0=
Subject key identifier: 6A:10:A6:4A:AB:F6:AA:0C:A9:40:FD:05:E9:5F:1D:14:F3:19:E3:87
Authority key identifier: 3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97
Certificate issuer: /CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
Certificate serial: 0323
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
Manifest number: 030F
Signing time: Thu 23 Oct 2025 02:33:40 +0000
Manifest this update: Thu 23 Oct 2025 02:33:39 +0000
Manifest next update: Thu 30 Oct 2025 02:33:39 +0000
Files and hashes: 1: P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl (hash: 7oJRmwvDWC/kdNtOnJJ9kxFbA50AeB14VkRf8SIPZdg=)
2: 460F948CF58C11ECAE269934C4F9AE02.roa (hash: cwVG6skd3N1RIYsEuEG8iHXyP7x6WSmLSEaSXVtQaYU=)
3: 38813674CA6811EE9891A565C4F9AE02.roa (hash: /I66GwSb6b8OKFWqoS4US5PTjIDfLyd4Pk4hVzRDLQU=)
4: 6A347A8E6E0711F0B4073D1DC4F9AE02.roa (hash: WLJSC8F2beVFwk5wQF2XhiW8o1W05YWVEl7Z6TS1RpI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl
rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Oct 2025 02:33:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 803 (0x323)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A646, serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
Validity
Not Before: Oct 23 02:33:39 2025 GMT
Not After : Oct 30 02:33:39 2025 GMT
Subject: CN=68f99403-353e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:e4:b8:25:62:85:a9:95:c1:39:4b:7e:f8:
73:fc:0d:f5:cb:56:bc:ba:8e:96:b7:2b:8f:50:32:
84:f6:a3:3a:14:fa:09:b9:fb:c5:8c:64:06:90:55:
a0:23:5d:dd:82:26:3f:4d:11:65:bf:09:44:44:7a:
2d:ae:99:1f:e0:80:92:46:41:fb:1f:70:95:85:3d:
8c:18:cb:9c:88:02:f0:62:1e:fd:68:c9:9c:05:6a:
94:e2:be:a1:07:ae:f2:c1:66:c6:58:3a:39:b6:e2:
f7:f3:8e:4d:9f:8a:06:bc:df:82:2d:8d:9c:f5:70:
fe:f9:12:c8:06:37:99:25:16:d6:06:68:ce:61:f6:
16:d9:a3:68:dd:80:aa:78:96:33:77:b7:75:9e:6d:
d6:5d:2c:59:38:ac:e8:32:a7:54:0b:9a:d4:9f:71:
4b:0e:8d:1b:be:ad:d3:c0:50:c3:ec:0e:b0:cf:d7:
53:3f:25:54:e1:53:ae:cb:57:e8:77:03:a7:e0:a4:
83:dc:0f:ca:d6:69:11:8b:29:ae:4d:94:f9:f5:65:
1e:73:11:c5:cb:ae:86:3e:34:09:07:83:b6:e0:07:
b3:93:be:5d:3c:41:82:aa:0f:0b:52:c1:8a:5e:9b:
5a:83:f4:d3:0a:b3:83:73:43:2b:c5:0b:3d:f0:c9:
6c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:10:A6:4A:AB:F6:AA:0C:A9:40:FD:05:E9:5F:1D:14:F3:19:E3:87
X509v3 Authority Key Identifier:
keyid:3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:1c:2e:26:3a:cb:64:f0:6e:4c:74:25:2c:40:8a:83:1d:ff:
87:30:fc:31:e8:f9:d7:46:02:fb:58:2e:d3:36:b1:de:dd:96:
0b:10:24:ea:77:79:f5:88:66:94:cb:22:c2:f1:fc:78:0d:9d:
69:4b:69:13:a8:cf:cb:cf:ac:08:96:11:49:63:a9:a2:04:77:
7e:3b:d7:cd:91:fd:ec:99:04:30:c0:c0:ab:d1:89:72:1e:39:
8a:20:9b:dd:49:15:6b:2d:97:74:9d:9d:9a:cf:e3:8f:17:0b:
f7:e7:8d:bb:cc:b5:df:45:90:8f:17:be:12:46:56:92:54:c2:
dd:e0:2f:85:17:f4:73:e0:44:0f:ea:bc:30:4a:67:eb:10:9f:
60:c7:eb:5e:e0:fc:46:97:ff:6f:9a:d8:b7:92:eb:fb:42:55:
5c:66:81:fd:c2:f8:e8:34:e9:37:5e:f4:d3:1f:10:4c:3a:7d:
79:4b:8a:a4:3f:ca:e0:db:b0:01:3f:1c:d2:48:cc:88:cb:3b:
44:bd:fe:2b:7b:28:63:48:1b:d7:87:eb:e0:5c:5c:98:cc:b8:
b3:e5:98:47:18:15:52:79:a9:fb:6f:27:84:b8:a1:dc:39:cb:
45:d1:97:3f:cd:4f:ef:47:ca:6b:ad:a8:59:2b:c0:40:14:be:
05:28:88:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 19:07:45 2025 by rpki-client