
$ rpki-client -vvf rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft
File: 8gl4uKIsE6CwK586X8LUiKuovtU.mft (raw, json)
Hash identifier: 1VDmK+pzWbgwywEs2hsYDk0VysvswN+hLuqcJSZ4C0k=
Subject key identifier: 96:A8:59:9C:88:F0:7F:7E:7B:CB:29:29:8B:58:E3:4C:83:1A:16:DC
Authority key identifier: F2:09:78:B8:A2:2C:13:A0:B0:2B:9F:3A:5F:C2:D4:88:AB:A8:BE:D5
Certificate issuer: /CN=A914653C/serialNumber=F20978B8A22C13A0B02B9F3A5FC2D488ABA8BED5
Certificate serial: 0A40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft
Manifest number: 0A3A
Signing time: Sun 02 Nov 2025 19:40:54 +0000
Manifest this update: Sun 02 Nov 2025 19:40:53 +0000
Manifest next update: Sun 09 Nov 2025 19:40:53 +0000
Files and hashes: 1: 8gl4uKIsE6CwK586X8LUiKuovtU.crl (hash: mQ2DjGnmdr4QQcW6HKbYFZS5C1Q83a6axaxJgb4V9ao=)
2: BD7E578079E011EA8DD5907FC4F9AE02.roa (hash: iYxIY6VXdTf7gHnwepU+/VGZkh/V1c1cIjc+gsTh8TE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.crl
rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 19:40:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2624 (0xa40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914653C, serialNumber=F20978B8A22C13A0B02B9F3A5FC2D488ABA8BED5
Validity
Not Before: Nov 2 19:40:53 2025 GMT
Not After : Nov 9 19:40:53 2025 GMT
Subject: CN=6907b3c6-bc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:53:13:97:78:8c:84:88:9b:4a:4b:29:b3:19:
db:91:16:9d:26:a4:bd:26:c9:31:77:d0:63:62:8e:
04:ae:39:14:c2:90:07:6d:ba:9a:e0:03:23:0a:0d:
45:e2:36:f7:50:b9:c8:9c:21:20:8f:d0:47:b6:46:
41:52:4c:f9:b1:ff:76:3a:42:74:ab:b2:10:b0:9c:
15:02:a0:1a:c7:bc:cb:6f:7d:fa:b1:e0:1f:1d:a3:
b8:03:9f:90:5a:6d:9b:68:d9:2a:30:c3:29:70:9f:
d0:fd:58:19:85:bf:f5:61:54:45:9e:53:2e:cc:42:
4f:5c:04:01:dc:49:a5:53:9e:a8:6a:38:03:ab:5f:
cb:06:ea:14:e5:41:be:58:d7:aa:78:61:85:9a:7c:
50:64:c4:36:fb:b8:72:9b:1e:17:60:9b:a7:d5:7e:
4b:7d:52:05:78:e5:36:f5:79:d8:58:47:6e:22:ed:
79:39:3b:70:9c:75:18:2e:aa:c3:5d:93:e8:3b:3b:
5f:ae:a2:f7:9e:2d:5d:9f:0a:d3:fa:8d:4c:2e:c7:
c7:0e:20:3b:5c:38:12:9d:92:91:25:b0:4f:36:fd:
d4:cb:ce:c2:7b:38:3e:57:f7:9b:5a:29:e6:cf:f3:
0d:a7:99:9e:ec:54:b0:b5:20:aa:ac:2a:9c:3e:21:
0f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A8:59:9C:88:F0:7F:7E:7B:CB:29:29:8B:58:E3:4C:83:1A:16:DC
X509v3 Authority Key Identifier:
keyid:F2:09:78:B8:A2:2C:13:A0:B0:2B:9F:3A:5F:C2:D4:88:AB:A8:BE:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ff:17:08:8a:af:0f:ef:75:14:68:18:14:7b:f2:0f:28:9f:
c5:60:95:68:23:31:52:ec:df:33:09:e2:ef:a4:1a:10:70:bc:
7b:b8:35:0b:1c:b9:4c:a1:cc:bb:30:e3:e5:88:8b:62:60:98:
16:6e:e7:61:c9:8f:fc:e5:7c:19:ff:36:98:9a:e8:f1:63:b9:
94:af:63:1c:87:0a:b0:76:06:69:20:ac:33:55:c9:b6:f0:4d:
2f:b5:82:53:30:c6:18:25:c7:18:2d:bb:a2:ed:79:8d:16:d9:
69:92:87:e3:4c:73:f5:a1:89:b6:63:a9:b3:8e:f3:6c:3c:a1:
27:26:6e:90:58:ff:f6:7a:f9:dc:6a:9f:d4:14:d1:12:b6:20:
28:ef:25:ba:66:93:f3:0a:47:49:5c:ba:0b:7b:ed:b1:db:a8:
86:3b:2b:c9:87:8a:8c:99:ed:ab:a2:f7:db:b8:05:f4:da:37:
de:9a:4a:83:cf:80:7a:c6:e2:b7:e7:a7:83:4c:32:9f:e2:a4:
ac:18:c9:92:f8:07:f7:1e:5d:75:93:e5:61:2d:f8:d6:3f:d8:
da:cf:b6:d8:af:f3:c7:77:84:56:40:f1:b5:e2:50:d7:dc:39:
81:09:01:34:89:ff:76:b8:1d:fc:14:04:4e:07:66:7b:d3:33:
5b:d8:16:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:16:28 2025 by rpki-client