
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
File: nPapYQAMl2lHu76x0XPCPpCflUQ.mft (raw, json)
Hash identifier: PiLMJwnJKdE+T55M7eSOLmwvqy9FgZ/ZKbbgEa8UnVk=
Subject key identifier: 3C:6B:6F:33:67:68:77:E7:6E:DE:C7:90:4C:0B:AF:6A:C2:A9:32:F7
Authority key identifier: 9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44
Certificate issuer: /CN=A912FA65/serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544
Certificate serial: 06FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
Manifest number: 06F8
Signing time: Sun 02 Nov 2025 21:55:15 +0000
Manifest this update: Sun 02 Nov 2025 21:55:15 +0000
Manifest next update: Sun 09 Nov 2025 21:55:15 +0000
Files and hashes: 1: nPapYQAMl2lHu76x0XPCPpCflUQ.crl (hash: zUbFpzvrDfMMEecmJMLfDGpSnzr+/WcWedH1byPbATc=)
2: E14DB058662411EBADFEB364C4F9AE02.roa (hash: AGJnIVMVxGCqhPBai/J+rGCznBK2uUe21t16AbPm6pM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl
rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:55:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1789 (0x6fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FA65, serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544
Validity
Not Before: Nov 2 21:55:15 2025 GMT
Not After : Nov 9 21:55:15 2025 GMT
Subject: CN=6907d343-2932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:94:d6:fb:be:77:c6:cc:52:70:24:ce:b9:
79:e9:4e:23:75:ff:1b:ec:77:f7:61:11:bf:3a:a2:
4d:2e:bf:2c:83:9b:71:31:b9:dc:32:87:fc:ea:94:
80:94:20:9e:f3:10:06:30:8d:4f:9b:9f:9f:87:da:
fa:a9:0b:e6:17:e0:71:3e:20:f2:f6:dc:88:12:dc:
3b:4f:bd:7d:3d:69:e8:ad:b0:53:ab:74:f0:af:5b:
c7:66:ea:71:4d:4c:8b:01:94:29:fb:db:ba:53:81:
74:9b:5f:82:a5:57:90:e0:2c:34:fd:39:0d:11:73:
c2:d6:1f:fa:70:10:dd:c5:cb:2d:3e:f3:72:dd:1b:
6c:30:2d:b0:aa:a9:37:44:2c:e7:d7:36:31:82:c0:
10:40:c7:93:2c:c8:10:df:25:59:53:5c:93:d9:7b:
f9:2d:5d:5c:76:1f:42:ee:35:63:c7:5c:cf:a3:5d:
97:32:d4:83:da:53:8f:a1:65:e0:fc:7c:2c:fb:dc:
67:51:d2:e4:f1:0b:db:4a:ee:b5:7f:03:3d:a1:f9:
ee:dc:0e:84:a2:61:e7:37:27:41:31:bf:78:d1:d1:
b0:05:83:17:70:d0:d2:bc:60:ea:d2:7e:8c:3e:eb:
64:2b:8a:c5:2e:fa:69:3f:d8:25:a3:3a:e2:2f:94:
0f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6B:6F:33:67:68:77:E7:6E:DE:C7:90:4C:0B:AF:6A:C2:A9:32:F7
X509v3 Authority Key Identifier:
keyid:9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:2b:2e:f4:b5:28:08:4d:2a:c7:d5:94:4d:de:ba:01:37:2c:
c9:0a:67:d3:e4:f6:0b:69:88:f3:d4:74:51:7a:a6:c1:1d:9f:
ce:cb:b3:9c:98:4c:a2:7a:23:93:7b:ed:e3:16:c1:ea:bb:6a:
c8:da:90:61:c0:55:fc:31:ba:51:b1:62:1b:74:78:1a:64:7f:
1f:bb:e6:2f:98:d6:2f:7c:cf:95:f0:5e:0f:ca:75:4c:63:aa:
9f:6e:43:d8:ef:30:f9:93:fc:12:74:b7:c3:2b:98:ba:41:4c:
a2:2f:d8:33:7f:01:b5:86:d0:40:6b:6c:81:0a:23:e7:3f:df:
47:e0:7d:fb:6c:f2:dd:09:4f:ba:82:99:9e:de:c2:a3:6e:5d:
a7:2d:7b:2b:25:aa:5d:cc:e6:f7:7c:11:b9:22:a6:c7:2e:4a:
e3:3e:28:0d:78:75:50:ef:7f:c3:8d:c7:8e:17:06:0c:65:33:
a1:36:f1:7d:b2:fe:64:4d:0b:fe:1c:91:85:73:89:82:b5:8b:
07:62:d4:1d:51:89:81:1e:33:b0:7a:51:86:e9:56:03:e1:22:
cc:33:7a:bb:2b:39:49:26:70:63:bc:86:4a:ba:6c:e7:e3:23:
b2:e7:49:ca:58:a6:23:64:ca:d8:9f:64:4c:d1:d1:41:00:13:
15:97:1a:25
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZBNjUxMTAvBgNVBAUTKDlDRjZBOTYxMDAwQzk3Njk0N0JCQkVCMUQxNzNDMjNF
OTA5Rjk1NDQwHhcNMjUxMTAyMjE1NTE1WhcNMjUxMTA5MjE1NTE1WjAYMRYwFAYD
VQQDEw02OTA3ZDM0My0yOTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1EaU1vu+d8bMUnAkzrl56U4jdf8b7Hf3YRG/OqJNLr8sg5txMbncMof86pSA
lCCe8xAGMI1Pm5+fh9r6qQvmF+BxPiDy9tyIEtw7T719PWnorbBTq3Twr1vHZupx
TUyLAZQp+9u6U4F0m1+CpVeQ4Cw0/TkNEXPC1h/6cBDdxcstPvNy3RtsMC2wqqk3
RCzn1zYxgsAQQMeTLMgQ3yVZU1yT2Xv5LV1cdh9C7jVjx1zPo12XMtSD2lOPoWXg
/Hws+9xnUdLk8QvbSu61fwM9ofnu3A6EomHnNydBMb940dGwBYMXcNDSvGDq0n6M
PutkK4rFLvppP9glozriL5QPNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxrbzNn
aHfnbt7HkEwLr2rCqTL3MB8GA1UdIwQYMBaAFJz2qWEADJdpR7u+sdFzwj6Qn5VE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkE2NS85MzVEQ0ZCRTY2
MjMxMUVCQUExMUQ1NjNDNEY5QUUwMi9uUGFwWVFBTWwybEh1NzZ4MFhQQ1BwQ2Zs
VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25QYXBZUUFNbDJsSHU3NngwWFBDUHBDZmxVUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RkE2NS85MzVEQ0ZCRTY2MjMxMUVCQUExMUQ1NjNDNEY5QUUwMi9uUGFwWVFBTWwy
bEh1NzZ4MFhQQ1BwQ2ZsVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDHKy70tSgITSrH1ZRN3roBNyzJCmfT5PYLaYjz1HRReqbBHZ/Oy7Oc
mEyieiOTe+3jFsHqu2rI2pBhwFX8MbpRsWIbdHgaZH8fu+YvmNYvfM+V8F4PynVM
Y6qfbkPY7zD5k/wSdLfDK5i6QUyiL9gzfwG1htBAa2yBCiPnP99H4H37bPLdCU+6
gpme3sKjbl2nLXsrJapdzOb3fBG5IqbHLkrjPigNeHVQ73/DjceOFwYMZTOhNvF9
sv5kTQv+HJGFc4mCtYsHYtQdUYmBHjOwelGG6VYD4SLMM3q7KzlJJnBjvIZKumzn
4yOy50nKWKYjZMrYn2RM0dFBABMVlxol
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:19:56 2025 by rpki-client