
$ rpki-client -vvf rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
File: 4JyfckW5hJiukjOxmA17T0xzjQ8.mft (raw, json)
Hash identifier: npO83J48D6ugxFasSpCaVUD+Ug8v82eBuccF6n/y1bI=
Subject key identifier: 86:9F:E9:D5:7B:09:60:EF:3B:21:31:76:C3:F3:03:F2:FC:CE:AE:28
Authority key identifier: E0:9C:9F:72:45:B9:84:98:AE:92:33:B1:98:0D:7B:4F:4C:73:8D:0F
Certificate issuer: /CN=A914287F/serialNumber=E09C9F7245B98498AE9233B1980D7B4F4C738D0F
Certificate serial: 0798
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
Manifest number: 0792
Signing time: Tue 04 Nov 2025 21:35:13 +0000
Manifest this update: Tue 04 Nov 2025 21:35:12 +0000
Manifest next update: Tue 11 Nov 2025 21:35:12 +0000
Files and hashes: 1: 4JyfckW5hJiukjOxmA17T0xzjQ8.crl (hash: s7Ixf/Njpu9F5TtNHuH8oWoPu0FACT8bS16hvs5piks=)
2: 45CED05E2D2511EBAA63DE82C4F9AE02.roa (hash: MMDW5GKNwb6UBpTQg+bN7/Wer/8y34uE+hwA4JCHhWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.crl
rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1944 (0x798)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914287F, serialNumber=E09C9F7245B98498AE9233B1980D7B4F4C738D0F
Validity
Not Before: Nov 4 21:35:12 2025 GMT
Not After : Nov 11 21:35:12 2025 GMT
Subject: CN=690a7190-0cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ef:cb:15:82:ec:20:02:e5:8d:4e:7c:04:63:
fb:64:aa:ca:64:b5:d1:24:1e:b5:20:0a:f7:36:b9:
73:cc:1a:91:23:ec:d2:83:b0:f3:33:0a:a1:28:77:
9b:2d:25:a9:b0:fc:71:6d:57:23:fc:5e:e1:a0:11:
c7:69:fa:80:21:8c:7c:11:74:69:85:dd:2a:9a:97:
20:cb:5f:1c:d6:cb:2e:39:e1:50:f5:ec:fb:d5:46:
e3:9c:36:37:ae:f8:bd:84:bd:2f:2e:3b:59:ac:df:
84:e4:e1:f6:59:c6:51:e2:49:75:83:53:c9:62:c0:
13:b1:f0:b9:24:8e:dd:97:e4:36:9f:e9:e8:0b:d6:
78:a7:99:2c:92:fb:16:e7:b3:30:c8:48:c2:34:cb:
a2:0c:a5:88:46:ca:72:a9:a1:88:4c:76:31:33:33:
af:7b:8f:b0:ed:f8:93:6f:ee:80:01:dd:96:d5:cc:
f5:fb:41:3f:3f:39:21:e3:ff:1b:f0:7e:b9:90:0d:
76:0c:2d:5e:b5:25:c2:c2:ef:a8:42:2b:9f:e8:26:
b7:3f:df:a8:0a:e9:97:0c:0e:a2:8c:67:19:a5:a5:
61:e8:3a:65:f8:2c:b5:78:14:f4:5f:90:60:2d:53:
51:3c:c4:e3:85:a3:59:65:da:1d:97:c7:a0:7a:0d:
fe:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9F:E9:D5:7B:09:60:EF:3B:21:31:76:C3:F3:03:F2:FC:CE:AE:28
X509v3 Authority Key Identifier:
keyid:E0:9C:9F:72:45:B9:84:98:AE:92:33:B1:98:0D:7B:4F:4C:73:8D:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:00:73:2a:9c:1d:6b:77:38:56:01:97:0a:c8:5e:46:e8:30:
b3:53:9d:f7:11:07:0d:f0:c7:71:a1:f3:17:4e:4e:2f:05:47:
50:95:f6:f1:d3:12:d2:73:be:c1:c1:d8:6d:b6:cc:a6:14:bb:
78:98:96:50:35:a7:bc:ac:d6:c7:bb:ba:2b:31:d5:b9:c6:04:
fe:1f:5f:fe:07:5d:b6:0a:41:80:ae:24:20:c6:db:b5:39:af:
7c:37:02:9d:43:1e:d5:67:54:2d:4a:d7:23:0d:55:15:00:c4:
82:8b:c8:11:01:22:17:54:f0:9b:ad:af:67:82:d8:86:ea:e4:
36:11:a0:b8:a5:e3:9a:50:c0:03:c8:ef:ba:be:e2:c5:62:54:
3f:a7:99:7e:0c:90:1c:cd:3e:9f:28:bd:4c:52:81:62:f2:af:
ae:34:7b:a4:f6:40:e8:58:51:47:8a:52:56:58:be:89:ae:bc:
58:a6:f7:0a:05:1d:a1:6b:6a:d5:b9:cc:52:39:ee:34:27:18:
38:cd:c3:b1:ca:30:5b:f4:6a:39:2e:47:58:23:42:71:84:b7:
ea:e6:15:2e:fc:2c:5e:7c:06:38:3a:60:7c:9e:7d:df:3d:07:
c1:b4:44:c9:1d:1d:f2:27:8a:76:04:db:e3:f2:bb:10:a8:8c:
e2:90:8e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:41:01 2025 by rpki-client