
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
File: rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft (raw, json)
Hash identifier: Xn/YX/ukE6T4EivChoBAJBrgmT9mKfV7iqRKp1IFfK8=
Subject key identifier: 7C:89:57:42:72:F3:F5:C8:63:BF:D0:84:7D:CA:07:B3:D1:3F:12:C3
Authority key identifier: AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04
Certificate issuer: /CN=A911A69A/serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204
Certificate serial: EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
Manifest number: EB
Signing time: Mon 03 Nov 2025 05:20:32 +0000
Manifest this update: Mon 03 Nov 2025 05:20:32 +0000
Manifest next update: Mon 10 Nov 2025 05:20:31 +0000
Files and hashes: 1: rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl (hash: j7KDauRtR21PjfGKB035tUBTgVqklRmcFY3VnLvfRD8=)
2: 39E76DD0589311EF88BF4665C4F9AE02.roa (hash: t3nWUOarrxhEFD60ip2NaXslcMEcqGLVxqGfot6fF3I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl
rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 05:20:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A69A, serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204
Validity
Not Before: Nov 3 05:20:32 2025 GMT
Not After : Nov 10 05:20:31 2025 GMT
Subject: CN=69083ba0-fa36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a1:83:4a:9c:c3:72:50:8f:2b:ba:6d:05:5c:
69:28:38:ad:ca:90:c8:b5:b2:0d:bf:2e:73:df:a3:
4c:11:39:2c:37:66:62:52:ac:10:66:91:04:9c:14:
4b:05:32:8f:f5:04:de:c9:ef:0c:db:b6:f2:c6:7f:
ec:06:e1:d2:63:97:ca:db:d9:0d:af:01:94:6f:de:
be:24:ba:e8:8d:1d:ea:25:ff:5b:7d:65:fc:ee:ef:
24:ab:9a:c0:1b:15:ae:0c:66:a2:36:0b:70:d9:ba:
80:0d:b8:bc:6a:c4:5e:28:99:18:82:a8:ad:48:16:
f4:7a:fe:85:d7:50:63:cb:ff:75:97:f5:f8:13:6c:
e5:fd:6c:0a:60:02:1c:d6:03:dc:e2:5d:07:e6:42:
ed:81:e2:32:0f:c6:21:69:52:c1:55:0d:f8:92:0b:
e7:db:3b:69:60:ab:3e:5a:db:30:7f:d0:33:43:88:
f0:d3:5c:de:f2:1d:03:ef:7e:41:a1:04:c9:56:86:
cb:4f:90:9e:a8:04:0c:0e:ff:09:b6:66:77:06:64:
40:0f:80:26:f9:a8:47:e1:5e:9c:d1:d2:bc:d9:95:
3b:f5:d3:a2:77:99:a2:46:c1:62:f5:1a:c5:bb:6a:
83:76:99:22:10:ec:39:d4:d0:40:ec:10:be:ae:ae:
8e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:89:57:42:72:F3:F5:C8:63:BF:D0:84:7D:CA:07:B3:D1:3F:12:C3
X509v3 Authority Key Identifier:
keyid:AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:58:45:62:14:49:99:ea:2d:8e:e9:7d:50:82:a7:b5:d5:ef:
87:99:e8:cb:3f:cb:ca:1d:f1:18:fb:ab:18:b2:45:ab:4d:ae:
78:9a:fe:eb:d6:23:27:6a:2e:11:ed:58:66:6a:ae:d7:c4:4d:
ab:af:67:61:31:b2:5a:c4:60:9f:45:70:f5:c3:3f:87:4c:f2:
0d:e1:14:1b:32:a2:e5:a0:e3:87:2f:19:ce:98:64:7c:2e:74:
9c:82:81:4f:c0:28:b0:69:15:63:00:e1:46:0d:ac:29:2b:49:
60:73:50:a3:27:fe:63:15:10:e0:47:08:4a:54:8b:3a:53:7a:
c8:2b:6f:c1:d3:c1:16:00:dc:68:a9:46:dd:6a:9a:e7:a0:cd:
e2:05:46:90:58:c9:86:b7:d6:52:4e:9d:59:b7:40:53:f1:de:
c3:a8:7e:be:8c:39:1b:b3:56:b9:53:9d:d5:bc:9d:ac:42:92:
95:1c:7b:c4:e8:ea:56:5c:1b:13:d6:ba:fb:a9:45:07:4c:30:
54:65:cb:22:31:6d:84:74:9e:72:bd:bf:95:a3:e2:17:0d:64:
66:4e:a0:c7:23:9f:a4:a6:1e:0b:72:2f:96:bd:0c:bc:ec:31:
e7:2a:17:fb:a4:6c:29:c8:da:d1:18:81:10:b4:16:99:cc:ff:
63:39:99:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:56:10 2025 by rpki-client