
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
File: aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft (raw, json)
Hash identifier: WG0eY3hCFNMhivomUj1Tydv2+5lnKSWiHTMEMsho+y0=
Subject key identifier: 1C:2A:39:C8:3C:61:56:83:63:DA:74:32:69:1C:C8:03:CD:5D:5B:6A
Authority key identifier: 69:48:58:B9:2B:CA:7C:08:76:5B:C6:BB:C1:83:92:3E:B5:71:1F:81
Certificate issuer: /CN=A913A748/serialNumber=694858B92BCA7C08765BC6BBC183923EB5711F81
Certificate serial: FA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
Manifest number: F4
Signing time: Mon 27 Oct 2025 07:24:14 +0000
Manifest this update: Mon 27 Oct 2025 07:24:13 +0000
Manifest next update: Mon 03 Nov 2025 07:24:13 +0000
Files and hashes: 1: aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl (hash: RHEHs32co6lYjF8Zp0T+wNTsDmwy0z0LtWdn/X3sX5c=)
2: 1B86A7CCE2CA11EFAA007D32C4F9AE02.roa (hash: AOFWu44ifsxCI8lU0JTnjALVgoq1vvzoggdsff7v9D8=)
3: F31A7084E2C911EFADAB3C32C4F9AE02.roa (hash: jAscgWh7S9/demSMPFwsCSZccuBN3foVEhiH5Tuiw30=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl
rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 07:24:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A748, serialNumber=694858B92BCA7C08765BC6BBC183923EB5711F81
Validity
Not Before: Oct 27 07:24:13 2025 GMT
Not After : Nov 3 07:24:13 2025 GMT
Subject: CN=68ff1e1d-5851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3d:5a:dd:de:58:2d:b1:98:7e:73:d7:68:89:
b2:11:41:cd:9b:9d:86:b5:ee:73:da:f9:91:7c:a6:
0e:e8:31:c2:a9:89:82:dd:55:1f:1e:23:33:4e:d1:
13:2a:53:a1:6f:ed:b2:55:e0:e3:94:a3:40:8a:76:
5d:95:77:7f:6b:88:b3:b9:df:0b:75:43:2a:77:de:
93:3a:d6:76:65:78:d2:3c:69:fe:fd:45:90:20:32:
01:b3:91:94:56:6a:66:42:12:07:08:aa:58:d9:59:
37:ea:1f:56:b5:05:37:d5:c9:db:6d:96:bb:19:b3:
be:b8:0e:31:90:44:b3:42:ff:9f:93:92:58:cc:f2:
fd:45:c1:33:67:f6:64:e9:f1:85:1a:c8:c5:ba:01:
f4:2a:49:0c:76:1b:2f:d2:cf:46:ff:2d:9d:29:e5:
27:70:36:1c:23:27:0b:3e:9d:4f:8f:6c:ba:47:21:
0b:75:4c:93:31:4d:33:11:69:ab:54:fa:9b:c2:9a:
8a:1a:16:fe:00:0e:3f:72:ff:f6:98:79:5d:7a:bc:
97:3c:3b:10:07:7b:ec:72:d3:6f:dd:0d:bb:8d:96:
7a:35:67:67:ec:f9:71:35:61:f7:11:a3:d3:21:46:
e5:5c:c4:c5:3b:1a:dd:21:6b:b7:eb:1b:4c:74:5e:
88:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2A:39:C8:3C:61:56:83:63:DA:74:32:69:1C:C8:03:CD:5D:5B:6A
X509v3 Authority Key Identifier:
keyid:69:48:58:B9:2B:CA:7C:08:76:5B:C6:BB:C1:83:92:3E:B5:71:1F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:22:00:e7:3b:91:6f:fa:53:97:f9:f4:20:fe:ff:17:3f:6f:
90:41:a1:fd:40:d2:47:23:ca:9a:23:70:4b:66:9a:78:dd:76:
db:d5:b2:a4:4f:69:c0:d3:70:04:15:43:a8:15:d0:71:aa:32:
79:db:22:a6:28:bb:69:cb:0e:08:fd:2e:d0:d5:ae:bf:45:bb:
16:27:e7:d1:39:68:f4:0e:36:7b:6c:44:27:c0:65:73:85:2c:
f4:ed:90:8d:09:1c:39:dc:37:2b:fe:7c:2a:ea:13:ee:8e:5b:
66:1b:0b:16:93:2e:67:40:dd:ae:54:ad:a8:ee:85:43:fe:3e:
4f:29:45:0e:55:70:87:c7:7d:93:21:ea:9a:49:e5:04:d5:ae:
ff:8e:f1:df:85:6b:f8:f7:07:fb:bc:70:51:f2:73:9a:0e:52:
61:b9:80:6f:6c:b4:22:fb:54:d0:9c:7a:ed:f0:db:83:05:66:
34:be:eb:e4:51:79:41:44:91:fd:96:3e:93:28:e2:85:a5:b2:
a3:50:b7:3c:47:60:cc:90:78:3a:36:07:e8:72:c6:9f:30:67:
f4:7c:4b:73:9f:d6:2a:e4:dc:27:f9:8e:04:0e:e2:42:39:67:
4b:c8:d4:bf:06:ca:4e:4a:6f:52:a5:98:e1:54:f0:1b:0d:82:
0b:d1:0b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 09:09:04 2025 by rpki-client