
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
File: j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft (raw, json)
Hash identifier: MNZRAAuMNz9XysVthrKIJulq6mSnABEOJ7R1I18J7Es=
Subject key identifier: 12:43:36:13:DF:92:2C:82:34:22:5A:56:3A:DA:A0:4C:ED:82:D3:9F
Authority key identifier: 8F:E5:A7:C9:98:FB:8B:78:AC:33:1E:AE:83:BC:17:86:23:EE:3C:9E
Certificate issuer: /CN=A913EF1D/serialNumber=8FE5A7C998FB8B78AC331EAE83BC178623EE3C9E
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
Manifest number: 012C
Signing time: Mon 03 Nov 2025 04:37:10 +0000
Manifest this update: Mon 03 Nov 2025 04:37:10 +0000
Manifest next update: Mon 10 Nov 2025 04:37:10 +0000
Files and hashes: 1: j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl (hash: x5Y0Qx/m+F5WnzLeAwVa8eB3iZ1klJk14Su9N8wBdV8=)
2: 1AE7ED46ECE711EEB12F9A1FC4F9AE02.roa (hash: Ux7MrDkQdEj+Gtfnp0Wmpu2t6Z1MtA7yxD7lmndlZrU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl
rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 04:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EF1D, serialNumber=8FE5A7C998FB8B78AC331EAE83BC178623EE3C9E
Validity
Not Before: Nov 3 04:37:10 2025 GMT
Not After : Nov 10 04:37:10 2025 GMT
Subject: CN=69083176-55d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:03:ad:0f:89:9d:9a:42:57:52:a2:b3:29:
a5:5c:b6:c7:09:e2:1b:45:9c:38:1b:0d:83:a3:7e:
1f:a2:7d:f4:61:59:19:0f:d0:17:0a:1e:10:e6:4c:
f9:d5:3d:cc:1d:fd:76:50:04:a6:10:a2:a2:19:6f:
09:7d:bc:18:63:d0:73:72:b4:e5:56:95:73:59:1e:
6d:b9:4a:a6:52:6b:fc:b9:ae:38:4b:44:cd:d7:e5:
3b:03:3a:7e:34:c8:17:1d:f8:62:33:60:3b:77:d6:
ab:77:7e:61:22:96:8f:bf:d6:5f:02:c1:68:d0:ff:
05:56:d3:28:23:f8:23:ac:63:72:ee:58:e8:14:d8:
04:ef:33:7f:c0:3a:7c:46:21:2c:9d:a6:90:37:68:
06:6a:0c:c9:50:6f:df:9e:43:7f:00:8d:ef:f4:16:
84:50:2a:22:c4:7b:fd:91:ff:19:79:9c:28:ba:16:
f7:1c:b9:33:42:75:33:80:4f:ff:1c:e8:80:e5:fb:
c5:2f:fb:61:4a:60:6b:02:01:a0:e3:02:46:15:cf:
7a:eb:93:94:ae:be:44:12:41:34:23:74:24:d9:68:
16:12:1d:90:a3:93:ea:50:6b:aa:71:b5:66:91:2f:
92:07:f3:e4:c3:96:ba:c9:69:6e:bc:c9:41:c8:e6:
35:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:43:36:13:DF:92:2C:82:34:22:5A:56:3A:DA:A0:4C:ED:82:D3:9F
X509v3 Authority Key Identifier:
keyid:8F:E5:A7:C9:98:FB:8B:78:AC:33:1E:AE:83:BC:17:86:23:EE:3C:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:94:12:94:09:65:3f:61:80:80:ee:95:3d:0b:a9:62:90:fa:
ab:cf:b6:54:ae:11:07:6a:d1:11:dc:c2:3f:89:85:9d:52:0b:
28:a7:94:72:8a:1c:e5:99:0b:1d:34:fd:52:fe:18:0d:11:ed:
eb:95:20:39:c4:be:66:f1:56:6c:94:66:29:dd:e6:84:2e:5f:
23:5f:dc:39:e2:f4:8a:01:46:16:39:d1:56:75:2b:f4:c8:b1:
ff:92:57:76:7e:c3:4d:2d:99:99:6e:41:bf:15:75:d1:92:f8:
a3:a7:94:2f:d4:d6:c7:57:b6:95:30:85:dc:b5:a9:a7:2c:0b:
0f:dc:7a:4b:f7:52:1c:b4:65:e3:9d:d9:be:b8:1f:b4:81:34:
e7:25:fd:e1:d1:82:8d:76:f6:3f:6a:09:2b:9a:3c:be:45:e1:
cb:e5:c8:1a:62:c6:92:cd:55:7d:42:e2:4d:f6:c8:9e:21:2c:
39:60:0d:53:2c:f2:2e:70:28:8a:63:e5:1b:85:60:04:8f:ad:
09:1c:f5:36:da:8c:0e:f4:07:be:a1:27:61:0b:db:9f:7c:37:
3f:c0:93:02:ae:34:98:e7:75:f3:44:d9:fd:0b:12:02:0f:a9:
7e:76:5a:c9:dd:3f:49:1b:f7:a8:cc:14:a4:e0:06:b0:39:52:
51:fd:1f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:08:20 2025 by rpki-client