
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft
File: B7vs0OoIn8ZO4UDdyN26UufZENA.mft (raw, json)
Hash identifier: 3fwiCJNrkrKayqS60WOiK1eShmdDSzMzfJA0ZIAd06M=
Subject key identifier: AE:B1:BB:01:BE:C1:08:F6:92:A6:4F:7A:6B:C0:4C:15:B8:2E:81:08
Authority key identifier: 07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0
Certificate issuer: /CN=A912E64A/serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0
Certificate serial: 0630
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft
Manifest number: 0622
Signing time: Sun 26 Oct 2025 23:41:39 +0000
Manifest this update: Sun 26 Oct 2025 23:41:38 +0000
Manifest next update: Sun 02 Nov 2025 23:41:38 +0000
Files and hashes: 1: B7vs0OoIn8ZO4UDdyN26UufZENA.crl (hash: F4GQYfcnGZUxISSmxmBP8NIezo2Ay5kzs/gEzHqIpaM=)
2: 55B56780BABA11EB8A51C234C4F9AE02.roa (hash: sP79wAGbbrsAMI5IpKgqsFFoZmUGm0NqHRGgmh1aLzQ=)
3: 55056D1CBABA11EB8A51C234C4F9AE02.roa (hash: 0B8CEdwj7To0b9OkFucnpnuOoYqshX93UqB7JYje0u8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl
rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Nov 2025 23:41:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1584 (0x630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E64A, serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0
Validity
Not Before: Oct 26 23:41:38 2025 GMT
Not After : Nov 2 23:41:38 2025 GMT
Subject: CN=68feb1b3-0e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7b:23:4a:ab:2e:0d:42:de:a4:65:ea:f0:95:
40:9b:98:d4:60:14:7f:cc:bc:c8:2f:cd:c8:1d:b5:
8b:98:05:76:a4:6c:46:ca:9c:1c:cf:a0:c5:d2:a7:
72:72:c2:90:0e:95:cc:38:8d:5b:3a:06:38:88:42:
83:ec:41:53:61:4c:be:7b:d4:df:66:8a:8d:8b:c7:
a6:6b:83:46:90:08:2e:c9:3d:c6:9b:f2:63:50:20:
99:3d:3d:62:cf:2f:f4:5f:a1:63:64:98:8e:9d:a0:
21:b8:66:33:57:27:6f:67:b3:96:9b:d1:2c:a0:5d:
54:11:97:e2:5c:35:db:4a:38:4a:a5:bf:b7:dd:eb:
02:20:29:90:dc:49:70:63:df:0e:b0:54:2a:71:cb:
ff:dd:5a:77:43:20:95:9e:eb:a0:0e:f2:46:bf:39:
92:32:4e:80:da:3f:39:1b:60:6a:f7:3d:80:ca:80:
6f:43:01:d7:96:1e:db:2f:75:69:2d:7a:8f:9e:39:
15:e8:b5:e2:f3:fc:be:64:5f:18:24:61:54:04:07:
76:c6:11:b7:68:cf:4e:f8:95:0d:99:bc:ff:53:62:
18:81:a9:8e:68:0d:d4:eb:93:6a:de:1d:0e:be:b6:
47:e0:e7:e0:14:3a:77:eb:4a:ca:b4:35:c4:cc:92:
92:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B1:BB:01:BE:C1:08:F6:92:A6:4F:7A:6B:C0:4C:15:B8:2E:81:08
X509v3 Authority Key Identifier:
keyid:07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:06:ad:26:3c:9b:9d:f2:72:3e:54:23:41:a2:fc:37:c3:93:
94:6e:f7:58:6f:0c:fc:48:7e:e8:96:0e:a7:a5:2b:c4:a6:9e:
b6:79:6c:46:21:18:d8:63:9e:25:1a:39:7c:63:db:e3:c0:a9:
f6:23:13:91:3e:62:6c:3e:93:67:3f:60:62:f4:29:c2:0f:c3:
cc:ae:bb:a5:17:bf:f3:4c:38:5f:1c:25:22:6e:87:22:95:08:
41:75:d4:90:8a:2b:19:3a:fd:7a:ae:39:96:44:46:40:f0:3d:
d4:b2:fd:56:08:a3:97:02:88:f9:ad:4d:2e:34:3e:d4:4b:ef:
88:e9:f3:7c:04:10:07:04:0f:58:09:72:57:c8:0f:6d:f2:fb:
8e:a8:2d:4b:f7:49:03:3b:54:cd:99:9b:70:09:8e:41:1e:2b:
de:bb:c2:15:1e:79:d0:2b:e0:09:ec:a9:42:50:96:9a:cd:59:
16:a2:94:d5:2c:06:4a:8e:6f:1d:a4:02:2f:28:83:23:9e:f7:
33:f5:f7:e7:1e:69:75:99:d0:35:14:84:de:e2:50:76:0e:11:
c0:1c:53:e5:ac:06:88:a3:58:24:ef:e0:f8:24:f4:59:5c:95:
95:2c:05:ef:08:67:0d:57:95:37:ae:fb:c9:48:31:62:27:9f:
9e:ca:47:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:25:20 2025 by rpki-client