
$ rpki-client -vvf rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft
File: 7eL0zENHKMeciTkUFPbuA_tBaIw.mft (raw, json)
Hash identifier: BrwYhns4Wi8685ESmShq+KsZScCTzCuhii0WG/MO4EQ=
Subject key identifier: D3:FF:B0:7B:D5:68:B8:A4:66:04:68:B1:EF:FF:9A:1C:1A:47:C2:A3
Authority key identifier: ED:E2:F4:CC:43:47:28:C7:9C:89:39:14:14:F6:EE:03:FB:41:68:8C
Certificate issuer: /CN=A912294F/serialNumber=EDE2F4CC434728C79C89391414F6EE03FB41688C
Certificate serial: 0199
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft
Manifest number: 0193
Signing time: Wed 05 Nov 2025 03:39:32 +0000
Manifest this update: Wed 05 Nov 2025 03:39:32 +0000
Manifest next update: Wed 12 Nov 2025 03:39:32 +0000
Files and hashes: 1: 7eL0zENHKMeciTkUFPbuA_tBaIw.crl (hash: I4OUXlr/dqTnvGkOEZEeTaIHNPxG9SlUYJ83Lbz0lgE=)
2: 099FC48C854911EF8C3F5275C4F9AE02.roa (hash: Vh8HA37Ll1YokJwtXyOXVAZejUyFz/Dlz9aO3ujmjWc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.crl
rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:39:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912294F, serialNumber=EDE2F4CC434728C79C89391414F6EE03FB41688C
Validity
Not Before: Nov 5 03:39:32 2025 GMT
Not After : Nov 12 03:39:32 2025 GMT
Subject: CN=690ac6f4-7e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:17:dc:0d:2f:21:df:39:e2:75:3a:ba:db:14:
bb:cf:13:54:2e:e8:cd:ff:9d:06:8c:1b:5b:40:6d:
3a:1a:62:13:5e:9d:05:4c:6f:d9:c0:cc:57:ec:d2:
cc:c6:c5:e5:13:e5:1a:ad:df:7f:b5:61:1f:69:af:
bb:54:56:63:63:ff:92:f8:e2:28:b7:9d:ef:d3:5c:
0e:ee:c6:f3:3a:7f:74:8a:43:b3:bd:50:a2:51:91:
7f:d4:b0:de:35:97:99:75:c0:6b:1c:06:d1:e4:d8:
ac:f5:f0:e2:53:fd:17:18:83:bd:e0:d7:a3:d7:b8:
e7:3e:02:9a:a1:89:28:76:43:19:a8:76:4a:96:c7:
c8:81:a5:bf:8e:a5:54:c2:00:9b:79:4b:75:d0:90:
22:9c:f8:62:33:d6:ae:a3:ae:27:36:8c:f2:03:92:
6d:92:99:1e:a6:0a:a6:57:e5:bf:47:48:d5:12:41:
6f:3b:39:45:cf:37:39:5d:c6:39:f5:56:6c:fd:67:
84:be:63:bb:6b:71:59:42:a2:16:8d:f9:bb:00:b9:
1a:ce:5d:54:6b:db:2c:65:e3:08:72:29:ad:c6:62:
04:08:3d:9e:7e:f3:5b:f0:a7:fb:14:0b:8b:a2:cc:
3c:d0:8b:38:f2:1b:c1:3a:45:d7:63:7d:b2:38:65:
3f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FF:B0:7B:D5:68:B8:A4:66:04:68:B1:EF:FF:9A:1C:1A:47:C2:A3
X509v3 Authority Key Identifier:
keyid:ED:E2:F4:CC:43:47:28:C7:9C:89:39:14:14:F6:EE:03:FB:41:68:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:30:b6:9a:f2:90:12:1a:57:03:5a:38:d5:e2:96:a1:34:5e:
3a:0a:5f:5d:f8:52:40:dc:e0:84:8d:e1:f9:92:c2:b1:b9:1f:
60:cc:67:fd:23:b3:24:98:f3:2e:76:dc:47:3f:60:9d:b5:75:
34:a0:a5:09:56:10:83:e7:34:7c:75:d9:f4:05:ae:f5:bf:5c:
93:25:01:f9:cd:90:73:9f:81:6b:e2:f6:8d:14:0c:67:8d:08:
d3:84:44:a3:96:c8:1e:a6:68:59:38:9f:37:67:af:5d:18:80:
44:92:58:82:0f:f9:95:bf:38:5c:b3:b6:f1:11:c3:df:d4:f4:
4a:37:32:dc:c0:4d:56:20:47:66:2d:3e:dd:13:c1:8d:56:7e:
09:7a:08:ce:66:1a:a0:95:1b:af:15:8f:17:7e:2f:23:8a:4f:
86:67:b9:40:e5:29:c6:ba:06:1f:0d:a0:bd:55:be:a7:46:6b:
ed:27:55:97:2d:6d:37:b8:dc:03:f4:03:f0:e1:4b:b3:37:d1:
6e:ad:63:24:7b:a6:44:15:42:92:62:63:9e:1c:3e:15:02:05:
27:6a:f7:d3:62:3e:65:27:d9:bb:9d:46:7a:11:63:b4:a9:37:
e1:7b:e3:7b:ef:32:fb:4b:e8:85:a0:b7:4c:f7:7d:5f:dd:f2:
00:3f:3e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:29:06 2025 by rpki-client