
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
File: e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft (raw, json)
Hash identifier: OLE1s2fv/6acGOkRzh0+XNMr4HjsTWxKfco6ROuaIY4=
Subject key identifier: 34:48:25:59:3D:5A:21:3B:44:87:B2:2C:BE:55:42:1B:1D:38:9B:8B
Authority key identifier: 7B:53:4A:ED:D3:0F:24:45:95:88:0D:64:E7:64:6B:D1:33:34:AF:B4
Certificate issuer: /CN=A913C83A/serialNumber=7B534AEDD30F244595880D64E7646BD13334AFB4
Certificate serial: AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
Manifest number: A9
Signing time: Wed 29 Oct 2025 06:01:54 +0000
Manifest this update: Wed 29 Oct 2025 06:01:53 +0000
Manifest next update: Wed 05 Nov 2025 06:01:53 +0000
Files and hashes: 1: e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl (hash: KrDCRR8j1FMbi6Zla0IBdSNAucIVpKodEuHoGYF9mWc=)
2: 265BE218B69F11EFB2CFE86CC4F9AE02.roa (hash: ROjBhj4WNSVnQpneHUZVLTay7BSLWkeCN2H9UxKd4tc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl
rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 06:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C83A, serialNumber=7B534AEDD30F244595880D64E7646BD13334AFB4
Validity
Not Before: Oct 29 06:01:53 2025 GMT
Not After : Nov 5 06:01:53 2025 GMT
Subject: CN=6901add2-810b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f3:1c:e8:e4:e7:9f:7a:88:12:06:23:4d:08:
54:9c:18:04:c2:cd:d2:79:7a:b7:ac:4a:c3:54:49:
88:b1:ce:21:b9:5a:f6:a7:4a:cc:2b:66:ae:b6:61:
37:41:78:2c:5c:43:09:ac:52:51:10:48:84:8f:44:
9d:a5:9c:ca:15:87:a1:fa:16:73:65:b4:e5:a9:91:
d0:a6:2e:c3:1d:a7:b5:30:cf:bc:2c:0c:5a:05:bf:
b8:5c:22:d7:46:f8:34:ad:1a:5d:39:20:0f:33:fb:
12:52:a2:0a:fb:aa:46:66:a9:7a:02:e4:bd:a6:df:
53:cb:ac:44:d3:44:ca:fc:b0:7f:11:34:ab:6e:5d:
e9:f5:dc:cc:06:10:58:af:08:2e:6b:5d:b2:64:50:
b2:65:36:92:a4:01:32:86:e3:74:45:b4:51:f9:df:
1f:f1:d3:c6:30:95:6e:63:db:00:6e:ad:85:f1:80:
e2:76:5b:00:73:15:a3:fd:41:10:40:75:04:dc:d0:
68:6f:de:54:f7:9f:02:72:b9:f8:67:82:61:b8:8c:
d9:d0:5d:cd:79:23:3f:fb:fd:95:1b:5f:d1:3a:a4:
a8:c6:de:80:c1:06:37:9e:d8:29:a3:9b:ef:73:0f:
e9:41:f0:5e:a0:c2:c3:d1:4a:81:1f:a4:97:76:cd:
55:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:48:25:59:3D:5A:21:3B:44:87:B2:2C:BE:55:42:1B:1D:38:9B:8B
X509v3 Authority Key Identifier:
keyid:7B:53:4A:ED:D3:0F:24:45:95:88:0D:64:E7:64:6B:D1:33:34:AF:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:a6:e1:bb:89:49:3d:57:88:17:b6:13:0c:53:c3:cc:1e:7d:
ca:ef:39:ca:8e:18:20:36:48:dc:57:20:af:25:64:8d:9c:cc:
75:66:06:d1:07:dd:4a:78:1c:95:60:cf:2b:59:98:8b:6d:38:
c5:b0:fa:9c:6d:e6:47:8f:4d:8d:f0:3f:52:f8:b8:23:dc:35:
29:fa:51:4e:8f:64:e7:9a:45:97:8c:76:7d:c6:43:e8:92:7b:
a3:05:d9:b0:74:05:0a:f1:89:20:75:54:e6:dd:b2:ff:15:20:
6f:48:c7:e2:02:0b:b1:98:74:ac:a2:65:8d:c8:c1:7c:91:8f:
d4:40:11:7f:0e:8e:b9:58:dc:fc:68:ce:d6:53:81:6b:c1:2f:
2b:e0:76:a7:7b:70:b6:9e:4c:70:0a:ba:db:40:58:ff:f1:96:
e4:cc:1b:b5:b6:53:ad:5b:84:db:83:f4:3f:3a:96:68:81:d4:
37:28:0e:b1:f4:b5:d6:a3:42:b4:6e:52:58:56:ee:9a:52:81:
26:7d:67:c1:82:29:c1:ad:58:b2:df:9d:20:a9:b9:0c:cd:57:
4d:4d:f9:37:d0:b3:e7:8d:04:d5:cc:b6:47:0c:7d:1b:0e:b5:
27:a6:5d:8c:33:6b:e2:4d:36:a2:c7:fc:ec:c1:6f:ae:e3:07:
30:c7:d7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 15:52:30 2025 by rpki-client