
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft
File: CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft (raw, json)
Hash identifier: E2GFB5rlwCx/5iB2tFstnmRKYv8Zw3ytRqrM65Nw87k=
Subject key identifier: 00:A1:1D:D2:19:9E:2E:8E:A1:43:E4:71:64:3F:11:27:67:BE:1B:16
Authority key identifier: 08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90
Certificate issuer: /CN=A913F600/serialNumber=08DB815B7310D87EEFAFCD52CF261CD15829F790
Certificate serial: 11C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft
Manifest number: 11B0
Signing time: Sun 02 Nov 2025 17:13:51 +0000
Manifest this update: Sun 02 Nov 2025 17:13:50 +0000
Manifest next update: Sun 09 Nov 2025 17:13:50 +0000
Files and hashes: 1: CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl (hash: giu1rzfxz2S+Ca97x+TaDVHeY0d5hr8hLv25x1RSiWk=)
2: A18ED49C9A0D11EC92AD8580C4F9AE02.roa (hash: qJKad/+ZiMDaDiVaiAw8w9uuhueQYfaURJcRIR4BlLQ=)
3: 03960D4AFF6411EFB94AD726C4F9AE02.roa (hash: Dd+h++CV6wNZJ7QO0n2rdW4OE3i2iMOeGWoydYTSCjs=)
4: 86B7624062FE11EEB277647CC4F9AE02.roa (hash: +KT0Egyqjjf85ES0SDoa2VeTo6qX07zVXJ1wUoWuy48=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl
rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 17:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4548 (0x11c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F600, serialNumber=08DB815B7310D87EEFAFCD52CF261CD15829F790
Validity
Not Before: Nov 2 17:13:50 2025 GMT
Not After : Nov 9 17:13:50 2025 GMT
Subject: CN=6907914f-069b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6d:c7:76:c1:4e:da:f9:c9:92:b2:c6:61:bf:
36:73:88:3e:11:46:3e:4c:df:16:73:96:56:44:0c:
67:13:2b:8d:c2:99:5d:8a:e6:db:0e:6a:1e:da:10:
08:0b:6b:42:5c:15:50:2a:bd:3a:b0:ff:f8:eb:9f:
81:25:76:1c:a5:13:3d:b1:59:79:39:16:34:9b:2d:
36:6c:27:9c:a6:90:0e:7c:57:75:3c:4e:7d:67:95:
f6:94:2a:55:f0:06:6b:97:9c:40:dd:18:81:c2:92:
c3:28:40:6a:0d:0d:1d:35:07:ee:1c:69:21:55:d6:
72:f0:d6:df:50:1b:a6:56:39:04:dc:21:e7:16:e2:
f3:a5:db:99:36:ec:2a:96:5b:a4:f0:eb:68:a1:74:
da:d4:3f:2d:25:d5:f8:6c:e4:a5:59:b3:fc:42:5d:
c9:cf:1b:d9:6f:42:3c:c4:ea:56:5e:c8:e4:35:18:
00:ab:0f:76:eb:29:ab:a7:4c:4b:2c:5f:ce:7e:ad:
07:fd:ee:e4:6e:54:65:ab:64:ac:e1:4d:d4:54:f5:
b6:51:45:dd:2c:cf:e7:0c:d2:a8:ac:78:95:f7:0d:
ec:ee:d4:25:52:8b:51:87:a7:ba:ea:28:f5:fd:b7:
86:03:82:01:92:38:db:90:b5:60:0e:db:8f:d4:b6:
4d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A1:1D:D2:19:9E:2E:8E:A1:43:E4:71:64:3F:11:27:67:BE:1B:16
X509v3 Authority Key Identifier:
keyid:08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:89:f9:f9:5a:1e:a7:50:8a:dd:e1:5d:13:0e:70:eb:2d:c4:
e5:a3:fb:0f:fe:22:a7:c9:ca:d1:2d:b3:46:51:79:ef:fd:1a:
74:59:6a:cc:31:66:21:7b:d3:b3:03:19:e1:05:33:ca:51:c0:
10:9b:64:9f:68:29:d4:2f:a6:03:8f:7f:a0:f1:c8:cc:d1:d8:
39:06:15:1e:d9:3d:96:3d:54:23:ae:a2:2d:89:91:bc:82:ab:
8a:1a:ca:42:fa:8b:f6:85:de:5b:24:2d:cb:88:56:be:c9:69:
eb:73:b0:3d:71:88:d9:a3:9d:7e:fd:ee:a8:91:57:59:a1:ae:
f4:06:1a:e1:50:1f:70:90:69:3d:65:bb:89:a0:ec:c5:09:58:
96:b1:f6:6c:b6:38:58:a9:5a:27:44:63:61:57:46:c9:04:7d:
95:0c:23:9b:c9:33:63:47:07:78:a3:c1:3f:91:60:9f:b1:89:
b0:dc:fa:74:a7:bf:36:c9:94:aa:4c:ab:d8:78:a1:a4:16:3e:
37:73:17:aa:54:18:fe:d0:3a:d7:74:d4:2b:ab:d4:b7:b1:a2:
14:d7:13:b7:06:46:a7:e6:ee:42:de:f7:28:32:77:9d:f1:cb:
dd:f6:99:bb:3f:c1:5a:45:f9:8f:f9:4a:d4:ec:f8:fd:8f:12:
80:d2:c2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:11:12 2025 by rpki-client