
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
File: iV2mi62Kf50xeIVse2LpwWiLK3M.mft (raw, json)
Hash identifier: dTGENp+cT5ePFiyg9Aivcx6Tk4Yuhc+y6KDCUFDVaQU=
Subject key identifier: EA:39:8F:7D:6D:A8:64:6F:0D:08:CB:69:04:5A:35:F1:10:40:45:86
Authority key identifier: 89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
Certificate issuer: /CN=A9169CEB/serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Certificate serial: 0FD8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
Manifest number: 0FC2
Signing time: Tue 04 Nov 2025 17:35:29 +0000
Manifest this update: Tue 04 Nov 2025 17:35:29 +0000
Manifest next update: Tue 11 Nov 2025 17:35:29 +0000
Files and hashes: 1: iV2mi62Kf50xeIVse2LpwWiLK3M.crl (hash: xIpMGwYdflWLdYAtNggfU6Og0PXkNBcbcCqac91N2gM=)
2: 47B75B3893EE11E9B1F2926AC4F9AE02.roa (hash: E66SV6WNRD5ULWCmhiJGOhN+NZfmVirzyRoB4Hy/u4Q=)
3: 4735CB9A93EE11E9B1F2926AC4F9AE02.roa (hash: i8fQntshSNYD8zDT2wDiHtaQKzGJtDGb0egHvcZuXHs=)
4: CC72753A7CE511E985E29B7BC4F9AE02.roa (hash: UGdOvww/zqYEiJCbgpSOvpp5LjsG3mU+jjIktHieTx8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 17:35:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4056 (0xfd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169CEB, serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Validity
Not Before: Nov 4 17:35:29 2025 GMT
Not After : Nov 11 17:35:29 2025 GMT
Subject: CN=690a3961-bae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fc:e8:d7:08:aa:ea:43:e7:d6:f6:29:1e:9c:
b6:23:eb:81:e6:4d:b3:f3:08:88:30:fc:d5:76:d6:
3c:de:25:38:47:ae:78:41:d5:fe:56:1d:07:15:24:
e2:dc:65:8d:0d:af:9b:18:4d:b7:29:a8:63:64:fb:
25:e6:30:b2:9e:c2:3c:4f:79:bd:01:94:65:74:a8:
0c:fd:20:ee:7a:85:c0:ba:45:36:64:47:02:3a:9a:
c9:c0:84:46:4f:89:28:fe:52:c1:75:04:c0:99:c3:
c3:fc:aa:9f:b6:71:f7:ad:a2:6e:56:7a:66:dd:37:
9d:af:0d:8f:b9:1f:38:0c:4a:ee:fe:7a:b7:f9:82:
ff:f0:d7:0c:88:83:ec:43:00:6b:23:fe:bd:c5:ef:
3f:a9:aa:34:79:2b:f8:2d:eb:ad:61:ea:14:bd:20:
23:d2:e6:42:22:0d:a3:df:9e:a5:12:ed:8a:88:46:
e8:34:e4:d8:c8:e0:d5:b1:d8:9e:20:77:74:85:47:
17:7b:b6:61:fe:a0:38:f3:3c:b5:d5:c6:d1:21:6c:
0f:37:4c:88:ea:fe:69:43:13:be:ba:4c:84:e1:3a:
a1:e0:f9:27:60:51:51:9f:95:c5:13:0e:6e:c7:80:
5e:33:65:5c:be:76:86:9e:65:16:dd:07:49:62:2f:
34:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:39:8F:7D:6D:A8:64:6F:0D:08:CB:69:04:5A:35:F1:10:40:45:86
X509v3 Authority Key Identifier:
keyid:89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:18:29:31:50:f3:52:89:2f:2c:09:14:88:8d:a6:7e:92:aa:
66:16:7a:8d:b1:58:ee:d4:eb:08:5b:f8:64:56:1b:60:09:58:
ad:0d:87:8d:1c:2b:20:75:2f:c0:b5:75:27:4d:c3:2a:fc:7e:
6c:ba:41:f2:5f:fa:7a:23:34:c2:72:68:a4:88:69:f7:5c:97:
0b:f6:8e:42:f4:f4:0e:11:6c:93:af:9f:6b:76:03:b8:89:21:
27:25:db:63:59:62:36:64:0b:69:84:0c:fb:45:4c:40:16:91:
0d:70:6b:49:05:c7:61:cb:38:8d:ee:47:66:06:9b:c8:6d:3c:
59:7f:da:11:b7:04:aa:1d:e7:59:46:92:6d:a6:9f:34:db:52:
58:3d:d5:74:2d:e1:bf:1a:31:e4:29:ff:66:ba:55:96:71:49:
89:01:db:4e:6f:4b:97:68:e6:14:56:99:8b:bd:a2:a5:30:c1:
1a:d5:95:d1:e1:a5:c9:3c:b4:25:95:d4:69:6f:2f:b1:5c:7b:
02:76:65:32:57:fb:db:c6:6d:11:a4:4a:40:1c:9a:e9:1a:8c:
df:06:01:c4:d6:6b:9c:3b:22:b8:b8:0f:70:ff:90:37:fc:94:
1c:f7:49:65:bc:b4:ad:57:82:3d:28:6d:62:7a:1e:3c:a0:d7:
f9:a5:0e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:17:55 2025 by rpki-client