
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
File: A2aKIfDwHwaydP2IzJ4KboPVX4U.mft (raw, json)
Hash identifier: J4ilfHw4WuYB9Dm/Mnojt91ZvXPxRXpYUVTYbPC1GZE=
Subject key identifier: A9:8E:80:96:06:6E:9C:6C:60:41:FD:60:C9:BA:33:21:6A:78:96:1D
Authority key identifier: 03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85
Certificate issuer: /CN=A9141620/serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85
Certificate serial: 07A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
Manifest number: 079B
Signing time: Sun 02 Nov 2025 21:26:17 +0000
Manifest this update: Sun 02 Nov 2025 21:26:16 +0000
Manifest next update: Sun 09 Nov 2025 21:26:16 +0000
Files and hashes: 1: A2aKIfDwHwaydP2IzJ4KboPVX4U.crl (hash: UfeZ9PsCd0dmOhEwlKKh9CcgTFwvEuyZpDxgaM0Oy1A=)
2: 5DDE6BC2293E11EB9DFA3C72C4F9AE02.roa (hash: dyvPcZxPt0csBuZZARHE9y3XiMCjfKdl2w86flcHLuE=)
3: CE899F0A66C311F08BE17B42C4F9AE02.roa (hash: XycQAAjR4EYRiIJrbriGrgbwnZEgUHk+CyGzEa7IeHA=)
4: 2C0DD994525511F0A544424DC4F9AE02.roa (hash: neek5srr+aWcWmnY+eA9qwIexbf1EgEc62zGldwiimQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl
rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:26:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1955 (0x7a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141620, serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85
Validity
Not Before: Nov 2 21:26:16 2025 GMT
Not After : Nov 9 21:26:16 2025 GMT
Subject: CN=6907cc78-2044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:e0:00:5c:81:ab:9f:ff:75:18:44:a9:56:
ea:59:6d:b0:0c:b2:49:87:df:66:27:b9:d0:1e:b4:
4d:75:3f:0a:26:bc:31:a3:d5:d3:5f:34:e3:63:43:
95:82:fb:fc:5b:8b:eb:e2:c7:0e:16:29:c0:62:76:
25:a0:27:be:2d:31:ac:9b:dc:48:9f:cb:61:e9:fb:
d1:66:e0:eb:94:0f:4c:e5:28:3a:e8:db:73:5e:f4:
bb:f0:bf:f9:2a:c5:1d:a9:53:dc:cb:ae:a3:6b:59:
b8:d9:f4:54:d3:17:60:05:b1:40:b1:18:ba:ae:0d:
60:35:4b:f1:c6:79:2a:35:d3:3b:b1:90:6a:75:83:
de:91:92:04:25:24:4d:93:a7:b5:a0:fa:43:47:4c:
b9:dc:95:15:3a:98:7c:7a:67:54:d8:33:4a:2f:4b:
f2:31:82:3c:37:8f:9b:c2:52:9d:c6:f8:0d:ce:ea:
66:16:5d:cf:68:09:fa:06:16:e2:f4:45:8a:87:3b:
57:98:83:3b:60:b7:2e:e3:19:28:5a:9a:50:d3:6a:
5f:5f:00:45:0c:e9:6b:e2:7a:04:22:c3:ee:31:00:
c4:4e:20:7f:6e:fd:71:39:1c:64:43:31:cb:92:5d:
04:f2:9c:36:9c:14:a6:c0:0b:be:ae:48:63:88:b3:
11:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8E:80:96:06:6E:9C:6C:60:41:FD:60:C9:BA:33:21:6A:78:96:1D
X509v3 Authority Key Identifier:
keyid:03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:3e:d7:b7:ec:50:ab:36:17:30:bb:a5:15:35:a8:88:3d:16:
79:8b:f2:52:a6:38:e9:57:e4:4e:8e:1e:b2:19:37:a6:42:e5:
4d:51:53:cf:48:a1:53:c8:d3:35:e9:43:3f:43:99:56:24:91:
2f:ec:1d:0f:b5:40:34:22:fa:2a:05:db:8d:05:72:93:57:d4:
38:fe:3b:da:d7:d6:2c:8a:29:ee:ce:1a:a6:3a:24:ee:57:4e:
26:25:e3:94:9b:a0:57:ad:90:2c:a9:a6:4c:8f:88:d3:33:88:
2f:0a:c1:46:98:99:84:46:6a:86:18:02:38:b4:09:2d:a3:2a:
30:59:9f:b8:e5:e6:59:14:d0:35:9a:1b:97:da:89:c1:dc:55:
67:a8:92:0d:b7:d1:d3:7f:0e:7f:43:01:a4:dd:6a:2c:11:35:
e2:78:67:45:10:07:b5:fd:c7:b0:0c:2b:49:9e:b3:0d:3f:95:
c4:90:9e:56:5c:ef:39:44:cd:02:cf:9c:53:ff:43:ae:4c:4d:
83:db:de:8f:0b:0b:71:69:36:10:d8:ad:33:51:25:c6:4b:c3:
d0:4a:8d:a6:66:9d:64:de:36:b6:40:0f:4e:73:a4:31:86:d0:
ef:fa:e9:dd:84:eb:2a:e6:56:bb:52:7f:2c:5a:25:0b:43:bb:
c0:6f:60:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:09:11 2025 by rpki-client