
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft
File: Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft (raw, json)
Hash identifier: N86InDTnvVhxLRFIU/Qrc5Z+0i9d0xaqfTsfTf1qB34=
Subject key identifier: 4C:7B:FD:2C:BA:48:30:9F:93:F3:2D:14:C6:29:88:D7:63:71:4F:C1
Authority key identifier: 53:0F:CD:29:9E:77:5B:8A:CB:27:52:A0:3A:FA:A7:D1:81:E5:00:EE
Certificate issuer: /CN=A913DC32/serialNumber=530FCD299E775B8ACB2752A03AFAA7D181E500EE
Certificate serial: 7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft
Manifest number: 7C
Signing time: Wed 05 Nov 2025 06:58:20 +0000
Manifest this update: Wed 05 Nov 2025 06:58:20 +0000
Manifest next update: Wed 12 Nov 2025 06:58:19 +0000
Files and hashes: 1: Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.crl (hash: pe0XePAgLGm4c/KpcDgew0FC6t8WocJQYzDB26wLuN0=)
2: 455B2534FD0811EF85ADED79C4F9AE02.roa (hash: EqPvfZWybFxDEzuqUOMumy7hGqKdVROQozF26OVvW/M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.crl
rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:58:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DC32, serialNumber=530FCD299E775B8ACB2752A03AFAA7D181E500EE
Validity
Not Before: Nov 5 06:58:20 2025 GMT
Not After : Nov 12 06:58:19 2025 GMT
Subject: CN=690af58c-912a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:d4:99:74:c1:f2:7e:23:e6:72:2f:9a:3b:
33:c0:cd:d0:6b:9a:00:fc:7c:b5:fc:bb:a8:b5:2c:
09:eb:57:32:10:cf:ed:b3:84:e0:6d:cc:81:52:cc:
ca:3a:64:3f:6b:a5:a3:b8:2d:20:c7:06:1f:46:34:
c6:89:af:2b:cf:c5:2b:b8:ec:2f:3f:82:dc:89:54:
7d:a7:c0:48:1e:58:ce:3b:b4:f0:b5:2f:34:78:ad:
2f:e8:53:21:02:d3:1b:3f:75:09:68:e3:78:1e:65:
3d:54:38:b7:23:cb:82:ff:4a:ec:73:77:e0:9f:94:
fb:8d:fa:30:0a:bc:13:e8:91:ba:6b:cd:d1:5d:1b:
40:40:6c:ff:c9:97:62:02:aa:c2:4d:c3:17:46:47:
14:6b:9a:05:b4:17:ba:1e:f8:a3:5a:6b:86:cc:c9:
34:2a:47:94:fb:5a:22:fc:69:ec:64:88:7b:e1:d7:
1c:16:22:69:96:40:ab:a5:f1:c3:3b:ae:0c:27:78:
4e:8a:24:7d:81:1f:1a:32:27:7b:cb:81:c9:9e:8a:
ff:62:67:92:a7:93:15:3d:c0:aa:0a:af:04:c0:b8:
e8:c6:14:74:86:ce:6e:f1:ea:ad:c4:be:40:e6:34:
be:12:c0:58:97:54:19:bc:41:86:10:eb:ef:01:c7:
09:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7B:FD:2C:BA:48:30:9F:93:F3:2D:14:C6:29:88:D7:63:71:4F:C1
X509v3 Authority Key Identifier:
keyid:53:0F:CD:29:9E:77:5B:8A:CB:27:52:A0:3A:FA:A7:D1:81:E5:00:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b8:9d:b8:74:7c:2f:18:3c:f0:a3:c8:93:e5:ba:9b:31:18:
6f:6d:1e:38:d6:99:45:c8:9f:28:c5:0e:fa:6e:8a:ef:6e:d7:
32:c5:67:85:6b:39:e1:ec:42:71:8c:78:49:f2:7d:fb:07:5e:
97:f5:6f:eb:3d:63:1e:bb:d1:84:ba:e8:bf:6d:39:a2:e8:95:
f8:44:57:c3:a4:1a:2a:9b:0c:e0:8f:1e:d4:a2:23:e6:ef:2b:
98:71:76:4c:57:51:50:a8:e0:f2:c8:26:3c:b3:0f:38:b4:cf:
8f:6c:11:f2:53:1e:a4:f5:ee:e2:81:69:58:5f:c0:38:2a:af:
be:e6:5e:d4:67:e4:78:ae:0e:61:84:61:56:49:73:f2:7d:8b:
0b:29:5f:54:dd:5c:62:07:69:4a:7d:69:9d:ea:f7:4b:4e:12:
a8:72:d5:c5:4a:d1:04:55:85:95:28:0c:1d:a8:df:3f:80:c1:
0b:4f:53:b8:4c:bb:38:a5:87:72:2d:27:7c:3b:d4:43:b4:ca:
41:86:2a:ab:9a:83:26:2a:ea:aa:91:4f:0b:64:cd:18:5d:36:
93:d3:ae:9a:0f:32:9a:cf:61:3d:af:8d:b4:11:1c:f6:1a:cf:
e9:c5:f2:db:bf:e2:30:06:e1:23:4f:40:8c:db:e3:ad:81:2e:
d9:4a:fd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:28:28 2025 by rpki-client