
$ rpki-client -vvf rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
File: poz6MR67HxAyDqIHdTAw5_Oij3I.mft (raw, json)
Hash identifier: Te4eakvYRGp++fjlB3qUzdp948RG+xGUv/+NaSLeXus=
Subject key identifier: 65:73:B7:6F:ED:F3:CD:32:B7:C4:DE:6F:0F:51:AF:8F:21:02:5C:33
Authority key identifier: A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72
Certificate issuer: /CN=A913258C/serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
Certificate serial: 0B17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
Manifest number: 0AFD
Signing time: Fri 24 Oct 2025 20:04:04 +0000
Manifest this update: Fri 24 Oct 2025 20:04:04 +0000
Manifest next update: Fri 31 Oct 2025 20:04:04 +0000
Files and hashes: 1: poz6MR67HxAyDqIHdTAw5_Oij3I.crl (hash: 9Sesn8h3ETQhQedDQ9EVO2x2gSzrKma1sChknCfaxXQ=)
2: E3D288CA6BC311EDB9791958C4F9AE02.roa (hash: xfCVW/hkWWtb6veFD5avvPcY4Mz5aIouTpiWuzaIDT0=)
3: F4E06C32804911EDABB05C09C4F9AE02.roa (hash: ESJChcbSeTzsfPRjHjsX6geMHbvNO7hjmHXws1871ls=)
4: D353090841F711ECB1465157C4F9AE02.roa (hash: hyTgYf3yNb3P1osKlb2mkzCC43nsvagjPiYm8g/bHPk=)
5: 110731BE329D11EFB45DDA57C4F9AE02.roa (hash: wHUnMKyUsP+z0ZGxOO5ssZzuISHdGqM1+8ZYBh44vj4=)
6: 1E95063A21E611EEB4824339C4F9AE02.roa (hash: zTEEFeYyenG7e2iJRNTQNMi/VEI/2vKOaAjTvCstuBc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl
rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 20:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2839 (0xb17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913258C, serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
Validity
Not Before: Oct 24 20:04:04 2025 GMT
Not After : Oct 31 20:04:04 2025 GMT
Subject: CN=68fbdbb4-8856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1d:f8:71:f5:74:04:5a:cb:0f:72:64:48:f1:
9b:da:74:5e:da:cc:8a:7f:38:c4:87:a7:f1:f5:59:
87:d6:d7:ad:79:7c:f4:b7:19:62:04:2f:19:7a:01:
38:ec:95:de:84:41:e7:02:9c:52:47:82:41:0d:3d:
16:bf:b9:02:2a:b8:f7:c7:ae:7e:c9:81:6e:de:fc:
17:26:70:d1:b6:2f:ac:d1:0a:8c:bc:63:0d:49:6c:
8a:d3:36:8a:6c:ab:ec:02:7b:de:ec:ef:9d:68:b9:
b3:cc:69:0c:6c:f6:41:c1:ea:51:8d:1f:b1:ac:c9:
f7:2a:8e:89:03:60:e4:89:0a:b5:c8:7b:30:8c:ca:
53:44:76:29:84:13:1f:94:50:0d:0d:f4:9c:54:44:
0f:53:7b:33:4e:fe:4d:36:60:74:15:01:5a:be:ea:
de:fc:fa:58:83:f6:e2:ca:b7:6b:dc:b3:81:0e:04:
aa:cc:f5:e6:8d:0d:6b:f6:5b:4a:fe:ff:9b:62:4f:
18:da:ad:7f:59:8a:6a:99:2f:68:ee:54:56:11:e9:
2a:f0:99:b6:48:ed:55:e1:2d:fa:fa:38:fa:4e:59:
29:9f:f3:22:c9:29:7c:d4:7f:d8:a8:9a:be:9d:0b:
70:0d:f5:45:46:62:ec:b1:c9:9e:53:71:c5:48:3c:
64:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:73:B7:6F:ED:F3:CD:32:B7:C4:DE:6F:0F:51:AF:8F:21:02:5C:33
X509v3 Authority Key Identifier:
keyid:A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:73:c9:84:33:a1:91:ee:94:c2:c0:6a:a6:ee:dc:00:8c:99:
4f:86:83:e4:12:b5:a0:66:f6:bf:ed:92:99:4e:32:6a:20:4a:
b5:ab:ea:39:2d:43:fc:24:f2:f1:67:df:1a:2a:f2:ba:a9:40:
f7:89:8a:f3:10:04:5e:da:3b:23:fe:52:de:a6:25:48:51:64:
42:b5:95:8b:7b:b5:e8:f7:f3:d8:2d:47:e2:c9:9b:39:aa:d9:
4a:98:5f:99:e2:b7:cd:38:e4:63:48:cc:49:77:1d:27:9f:f7:
0c:e8:aa:ab:91:d8:22:eb:78:28:ce:0c:25:b6:8c:a9:d1:84:
a2:5b:da:4f:1b:ae:05:2d:75:72:98:ac:57:b6:b5:ef:23:5d:
01:c2:d9:53:02:52:71:8a:0d:dc:56:01:52:15:2f:b1:ea:9a:
3b:21:6e:13:5d:cf:2e:63:68:81:64:41:bb:c9:89:4b:ba:54:
ca:dd:c2:e3:53:0d:59:e5:f9:10:00:7a:71:a1:2d:80:5c:c3:
f9:d1:68:59:e3:24:d9:1f:bb:a6:6d:93:59:0b:e7:d8:0c:a8:
de:f3:69:19:48:80:3e:2c:ab:72:bf:38:89:22:e0:59:eb:93:
c0:91:b1:2a:8d:6a:cd:c2:8f:6c:1c:17:46:46:f0:70:34:79:
20:97:a9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:50:22 2025 by rpki-client