
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft
File: MekS6f9zr1vER2k1KNclslorF_c.mft (raw, json)
Hash identifier: PeiM8wgQivLMwnrVTju7YRzvdr7/zSLBk9ZT8Sy3/R0=
Subject key identifier: 94:5E:CC:49:0E:F5:1B:8F:DF:DB:19:7B:7E:B3:8E:89:04:67:1E:DD
Authority key identifier: 31:E9:12:E9:FF:73:AF:5B:C4:47:69:35:28:D7:25:B2:5A:2B:17:F7
Certificate issuer: /CN=A9127673/serialNumber=31E912E9FF73AF5BC447693528D725B25A2B17F7
Certificate serial: 1529
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft
Manifest number: 151E
Signing time: Sun 02 Nov 2025 16:48:46 +0000
Manifest this update: Sun 02 Nov 2025 16:48:45 +0000
Manifest next update: Sun 09 Nov 2025 16:48:45 +0000
Files and hashes: 1: MekS6f9zr1vER2k1KNclslorF_c.crl (hash: Pa5FTkERahkmMJsOXLuC81S5Umc1KlKQglsTs/uLaV0=)
2: 9C524DA858CE11E891382260C4F9AE02.roa (hash: pz/sh5ewtugJGaQEjLj/4LhT6VQlQpXzMK/OXn+CHaU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.crl
rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 16:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5417 (0x1529)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127673, serialNumber=31E912E9FF73AF5BC447693528D725B25A2B17F7
Validity
Not Before: Nov 2 16:48:45 2025 GMT
Not After : Nov 9 16:48:45 2025 GMT
Subject: CN=69078b6e-6163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:0c:79:ee:28:de:18:64:60:3b:e8:3f:62:
3b:92:56:0d:df:96:04:a0:f0:4f:a1:dc:7e:23:cf:
42:7b:1e:b4:88:91:4a:28:89:e2:21:b9:fc:8c:17:
92:1a:67:42:48:0a:87:7f:fb:0f:ba:59:18:b5:90:
b0:a3:25:52:58:9d:26:bd:e9:aa:cc:c7:25:d6:0a:
43:8d:43:21:73:b4:7a:e4:74:ea:bb:fe:7b:10:c7:
e4:f1:5d:18:3b:9f:47:42:4e:27:f7:91:6e:35:e6:
7e:e7:a1:6f:fd:0b:2b:36:4b:e5:cd:74:c7:60:2f:
c2:f6:51:19:08:4e:47:5a:55:db:fd:a5:28:76:61:
92:08:0b:e2:f4:db:43:c0:cc:1f:c1:a8:87:b2:00:
20:e9:8b:4b:cb:84:96:bd:d8:6d:78:c0:d9:90:8b:
4b:d5:54:d2:47:1b:dd:6c:e4:8f:17:03:bc:f3:f8:
f3:75:0e:fe:89:45:6f:7f:4b:dc:b5:5c:fa:ac:e8:
e6:e3:4e:8c:c4:e7:2d:13:2b:49:55:78:56:8f:50:
18:30:f7:0d:74:8e:d9:ff:1e:49:a2:fc:03:ea:84:
3d:78:80:bf:7e:82:17:22:97:9b:93:81:7d:cb:23:
6c:60:08:21:cc:96:08:d0:b3:13:df:58:a0:45:fd:
2b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5E:CC:49:0E:F5:1B:8F:DF:DB:19:7B:7E:B3:8E:89:04:67:1E:DD
X509v3 Authority Key Identifier:
keyid:31:E9:12:E9:FF:73:AF:5B:C4:47:69:35:28:D7:25:B2:5A:2B:17:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a8:fb:99:85:1c:34:a4:56:4a:fa:19:85:6e:65:13:57:c8:
8e:86:4e:e4:38:46:26:94:e1:b2:ef:d0:55:f8:74:85:73:14:
c0:18:be:99:1a:34:be:bc:8d:2c:dc:83:be:95:bb:c4:18:b0:
dd:f6:96:d7:55:af:06:10:39:83:c4:be:e2:a2:8f:ae:e4:cf:
87:6b:d7:6c:22:50:5b:64:4c:32:b9:95:e6:27:b7:b7:5c:13:
f1:54:bf:97:7f:e4:51:60:49:00:bf:5c:e7:3a:8c:f9:7e:8f:
94:6a:37:79:1c:f0:29:f4:4c:76:a8:37:48:bb:a8:6f:cd:9b:
e2:5a:0d:c1:b6:03:d4:cc:a6:bf:f7:d4:5c:17:19:f8:a1:21:
26:3d:19:1d:f3:89:09:32:e4:24:87:4b:d8:04:1a:71:19:a5:
96:43:7f:12:f4:a6:f6:a6:27:0f:a7:c5:bd:69:6b:eb:7a:ef:
99:1e:03:f6:cd:fc:26:f9:60:00:d4:b6:c5:47:80:63:a2:41:
80:7c:20:c2:d4:9c:ad:cf:2e:67:8f:d2:cb:df:ee:69:8e:b6:
a9:65:ab:24:8f:93:7c:14:f7:e7:ec:ac:04:9f:30:66:b1:20:
a9:be:dd:22:72:69:66:0a:e7:77:b4:01:7d:81:18:bf:ce:30:
7c:5d:9f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:10:15 2025 by rpki-client