
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
File: Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft (raw, json)
Hash identifier: 0kZBkAnzdVLHJlaGSEfa3ih6MHu19+HROr21Xj48emY=
Subject key identifier: F4:41:BD:AC:81:2A:F0:E5:B9:07:5F:AD:44:55:C3:34:9F:59:60:F5
Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
Certificate issuer: /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Certificate serial: 1066
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
Manifest number: 102A
Signing time: Sun 26 Oct 2025 17:48:00 +0000
Manifest this update: Sun 26 Oct 2025 17:47:59 +0000
Manifest next update: Sun 02 Nov 2025 17:47:59 +0000
Files and hashes: 1: Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl (hash: qXhSRitGNu2mVj45D1k3eE2BcR/hHyHFBbK6VRPBDaE=)
2: 8030E8628FD211F0924FE573C4F9AE02.roa (hash: uKLFwAF6OPU48tvtT2EBR+YQZKAwbAGiUD5OlNlMeM8=)
3: 912FB56E7E7811F08636DF33C4F9AE02.roa (hash: 0m5izQuKw0aRUU+0vXd30tEyd5boDVcm7O+m75Izs0o=)
4: 3AA7BC60818D11F0BBDB1314C4F9AE02.roa (hash: Y+3y48bqaUxF+K9WiQLSi+R8dX2P6kaRh5bC6H+qDqg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Nov 2025 17:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4198 (0x1066)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Validity
Not Before: Oct 26 17:47:59 2025 GMT
Not After : Nov 2 17:47:59 2025 GMT
Subject: CN=68fe5ecf-b510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:41:4b:53:16:3c:84:d4:96:2a:46:ad:db:9a:
85:b6:81:13:cc:69:53:31:3d:8e:6a:2e:10:fc:2a:
f9:45:3d:b9:59:65:9e:2c:c8:a1:7d:28:74:23:44:
8b:fc:d9:8f:c5:c2:63:c0:90:24:bf:57:01:89:8a:
87:9e:5d:fb:16:9c:4a:a7:cd:63:6e:ec:d7:64:65:
e4:bc:6f:1e:88:8e:9b:f4:2c:17:68:aa:1e:60:a1:
bb:94:3d:63:77:4e:0b:35:cc:09:2c:09:91:e6:98:
ab:3e:e7:c9:1c:dc:c1:4c:93:27:2e:17:e5:f2:67:
db:f8:f4:1f:db:cc:b0:b3:39:98:87:58:6b:01:f2:
6b:41:b8:b9:6f:a6:fa:ee:c3:e6:20:05:16:2d:34:
90:e4:b2:0b:80:9e:f7:92:eb:3c:44:97:aa:3a:de:
c0:87:05:b4:7f:ea:b7:4f:82:72:7f:a7:f8:82:94:
c2:80:f9:22:22:3d:d0:17:63:f5:33:66:b7:70:37:
74:e1:05:96:de:f2:77:1a:c8:1f:27:dd:4d:42:0a:
09:a4:36:60:33:4e:e7:1e:af:e1:1f:f9:b7:ab:a6:
76:ad:cb:15:57:43:6a:9a:74:ee:5d:a5:16:80:37:
8d:f0:23:94:81:bf:65:ee:d6:a6:b2:9d:04:b1:a6:
fa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:41:BD:AC:81:2A:F0:E5:B9:07:5F:AD:44:55:C3:34:9F:59:60:F5
X509v3 Authority Key Identifier:
keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:d2:89:ca:76:a9:6a:0a:22:81:b0:95:06:87:0d:9c:50:bf:
b5:4a:be:b9:a9:bc:06:90:20:25:02:be:d8:8e:aa:bc:48:26:
60:75:ae:06:82:57:dd:76:ad:33:e4:f2:81:82:7e:02:f2:85:
0e:d0:66:f6:52:d5:c0:b3:5e:1a:8f:3b:20:b6:49:92:e4:23:
84:4b:e8:fb:92:32:2d:4b:41:76:d9:b1:24:2c:02:81:ad:10:
24:d4:85:f3:47:98:95:77:51:cf:c3:12:38:ad:54:39:08:f1:
71:14:4d:27:02:df:bc:50:25:f6:dd:bc:48:d0:8e:30:a8:6f:
be:de:fd:99:bb:2c:98:88:fb:61:7d:18:40:84:81:0e:ea:fa:
23:e8:10:7c:f7:76:9c:7c:c3:c8:80:1a:67:31:03:0f:e0:7a:
2e:8b:54:15:68:a0:07:2d:8e:f6:c9:63:68:6e:29:08:f0:a7:
4f:51:12:ec:ab:e5:15:15:e5:e8:96:1f:72:b7:9a:eb:a3:fc:
6e:54:fe:ce:83:6b:cc:23:63:aa:69:36:dc:3a:2e:ec:6e:2b:
13:35:f7:f6:7d:a9:f3:55:b2:ab:b8:ec:05:9e:b5:d1:b5:8c:
31:9a:4e:a1:f7:56:00:23:92:e9:d0:3b:99:dc:4d:fb:59:39:
c3:d0:9b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:00:49 2025 by rpki-client