
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.mft
File: haOfEGRko23KJ0v8d_uvewMDh24.mft (raw, json)
Hash identifier: WB5t/W8PdlwdQ+ou+v3EeWPAC0i7GJPMZM+O6LgmHso=
Subject key identifier: 05:E7:C7:DD:52:49:3B:3D:43:AE:CC:7B:D2:A3:85:8F:B3:24:1C:09
Authority key identifier: 85:A3:9F:10:64:64:A3:6D:CA:27:4B:FC:77:FB:AF:7B:03:03:87:6E
Certificate issuer: /CN=A9131181/serialNumber=85A39F106464A36DCA274BFC77FBAF7B0303876E
Certificate serial: 72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haOfEGRko23KJ0v8d_uvewMDh24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.mft
Manifest number: 72
Signing time: Mon 03 Nov 2025 06:54:17 +0000
Manifest this update: Mon 03 Nov 2025 06:54:17 +0000
Manifest next update: Mon 10 Nov 2025 06:54:17 +0000
Files and hashes: 1: haOfEGRko23KJ0v8d_uvewMDh24.crl (hash: wsd3R6rfVweM+X6azm/pgMqbQXhklQaXTpCxgYt4qHQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.crl
rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haOfEGRko23KJ0v8d_uvewMDh24.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:54:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131181, serialNumber=85A39F106464A36DCA274BFC77FBAF7B0303876E
Validity
Not Before: Nov 3 06:54:17 2025 GMT
Not After : Nov 10 06:54:17 2025 GMT
Subject: CN=69085199-f451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:d2:45:f3:b2:19:36:d9:1a:c8:09:64:2b:
b2:54:1b:47:c4:01:9e:c7:2f:17:26:94:2d:2e:78:
da:c9:b8:ec:d2:f1:41:f6:fb:c5:94:9b:49:c9:b8:
bc:2f:97:8e:6b:0a:90:89:35:1d:3c:cf:ac:46:50:
b0:6d:fb:17:e1:1d:44:b6:9c:7d:ad:ee:71:eb:e6:
c7:97:48:1a:d8:cd:61:c8:c1:74:2e:43:40:9e:05:
ac:0b:8f:98:e3:af:ad:24:95:c7:36:c6:f0:ad:4d:
fc:f7:b4:4c:24:75:90:7c:1c:4c:a5:8d:42:72:a6:
1c:4f:3e:c0:06:86:75:eb:5a:81:4b:7b:29:b2:85:
ef:70:02:ef:35:2b:90:98:ec:49:ff:79:9c:c0:ee:
90:4d:1b:7e:15:5a:e4:e4:22:57:bc:fd:69:38:da:
1c:a1:2e:01:1f:b9:cf:30:30:7c:55:62:77:eb:6a:
ea:68:c5:06:40:0a:f0:a2:b5:3c:92:51:42:53:8d:
c3:71:f6:38:b8:70:f7:99:1f:d2:27:12:6a:3c:70:
ba:e8:2d:28:8b:71:d6:a9:d8:af:aa:ed:be:26:48:
18:86:64:d7:38:c0:29:80:7f:51:c6:63:48:c7:03:
c4:3e:16:68:ab:00:cc:bd:11:e9:a4:32:a3:2a:45:
e9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E7:C7:DD:52:49:3B:3D:43:AE:CC:7B:D2:A3:85:8F:B3:24:1C:09
X509v3 Authority Key Identifier:
keyid:85:A3:9F:10:64:64:A3:6D:CA:27:4B:FC:77:FB:AF:7B:03:03:87:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haOfEGRko23KJ0v8d_uvewMDh24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b1:08:f6:d3:dd:5e:fd:3c:5f:b0:a6:f3:c3:f6:1e:c6:9a:
e3:2d:10:4a:a0:fa:b3:4c:f2:df:d7:55:d9:bc:2b:93:9e:eb:
b1:bd:52:79:ce:9b:a0:82:e3:91:4f:69:9f:46:fa:fe:fb:2a:
39:09:d7:22:e3:33:f4:e0:5c:f0:6f:f3:8d:4e:7b:ae:45:15:
81:d7:5b:ba:86:d5:17:d3:58:87:36:60:a1:26:16:c4:c6:6f:
49:c5:8d:9d:79:54:ca:2e:fc:b7:5f:e3:1b:77:69:13:93:33:
15:45:51:00:f3:b0:1f:14:f5:74:9b:33:9a:10:da:bb:21:2d:
5d:f0:c4:76:e5:52:81:12:f1:e2:cd:70:e9:e4:38:c3:f9:d6:
88:8d:f2:c0:0d:31:f7:89:0d:31:35:a4:23:88:a4:b9:8d:62:
5f:81:9e:66:80:30:e6:cd:eb:7e:2a:db:39:df:62:e4:d2:63:
bf:01:f2:3f:1d:5a:3e:cd:39:58:52:5f:ac:5b:1a:a2:56:68:
36:84:1a:2d:77:26:9f:4d:ea:a7:00:d0:f1:f8:46:2b:4b:5a:
15:40:c6:98:32:35:41:4b:0b:85:9a:24:d1:91:49:98:f0:ae:
cc:22:4b:f6:ad:49:1e:45:fa:f5:77:4b:58:44:92:01:cd:a6:
04:2f:81:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:20:11 2025 by rpki-client