
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
File: Kprva8EpkUyguRBcknHerznbyGY.mft (raw, json)
Hash identifier: gXwVCDO4/l8SHpbybAqGnvxm7PAim5/yIV7uLNNXC5I=
Subject key identifier: 29:6B:25:01:D2:E1:A3:B7:E2:36:87:B5:2A:4C:BD:7B:87:4B:3B:89
Authority key identifier: 2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66
Certificate issuer: /CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
Certificate serial: 091F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
Manifest number: 0903
Signing time: Tue 04 Nov 2025 20:25:21 +0000
Manifest this update: Tue 04 Nov 2025 20:25:21 +0000
Manifest next update: Tue 11 Nov 2025 20:25:21 +0000
Files and hashes: 1: Kprva8EpkUyguRBcknHerznbyGY.crl (hash: neZZEetQqfYebmcpxy56wPpQZaxuQSE1RpcinNvRlmE=)
2: 6211D40A941F11EEA7C3E86FC4F9AE02.roa (hash: rwFUZotDCsUcE5y4SWo5vzPQMph+ISXIRs0BW/9TgJc=)
3: 9FB96E16929A11EE8CC5D033C4F9AE02.roa (hash: /WRRbCj0rNywmLtoXv249Ng7AC0zIvGMMjOEBzIrMR0=)
4: 62CDEE42941F11EEA7C3E86FC4F9AE02.roa (hash: xYtI619wwIDUtAgGOcO2nVAHPmu/uf2fEsNcyxLWYV8=)
5: 48E4C546941F11EE8517B26FC4F9AE02.roa (hash: u9rGnfekIAlkNgYfnuzbJex52uZyoGapNCA6gJzdd2o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl
rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 20:25:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2335 (0x91f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147C4C, serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
Validity
Not Before: Nov 4 20:25:21 2025 GMT
Not After : Nov 11 20:25:21 2025 GMT
Subject: CN=690a6131-c145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c3:5c:70:e2:2a:88:67:ec:a6:63:23:1e:1f:
c7:ba:15:be:ad:7c:92:ec:85:8c:fa:05:bf:c2:62:
20:d9:05:0e:52:fe:44:dd:e8:ac:2b:af:b3:d2:81:
3e:c9:98:ea:74:35:05:89:e5:3c:60:60:3f:dd:7c:
90:d1:83:1d:1f:2a:90:62:ba:dc:2d:33:55:9b:9a:
c1:db:64:9d:28:6b:f0:1f:37:4f:01:a9:ed:e1:90:
70:35:26:c2:22:96:1e:c7:9f:26:89:60:26:16:60:
ad:cb:a7:14:91:3a:36:7f:01:5e:44:70:51:d2:5e:
78:c4:8b:a2:34:1d:65:69:ac:dc:83:88:af:1b:44:
bb:94:d7:68:37:0c:0a:34:38:64:4c:93:8a:b0:b6:
14:bb:6e:08:89:cf:31:1a:42:9c:91:94:39:c1:24:
bb:5b:1d:48:62:ca:f7:03:80:39:a9:42:51:29:c7:
e9:f4:e4:c0:62:46:46:cf:8a:05:29:c6:bb:b8:16:
15:a1:59:99:28:9c:16:0c:04:11:a1:43:61:9b:95:
38:7f:b3:e8:35:05:ab:c6:b4:34:3c:cd:61:ed:47:
97:18:51:3d:14:74:b2:8c:db:a6:80:1a:2d:64:91:
e6:32:a3:4b:d8:99:9e:06:a0:78:0a:21:6c:a9:84:
0f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6B:25:01:D2:E1:A3:B7:E2:36:87:B5:2A:4C:BD:7B:87:4B:3B:89
X509v3 Authority Key Identifier:
keyid:2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:c7:e3:3a:52:1c:e5:64:11:51:66:a0:4c:92:70:d6:ed:12:
cf:92:6e:db:71:9f:24:b5:41:e4:f1:8a:82:05:73:94:55:e6:
a8:ef:be:1b:f9:d2:72:be:c0:27:ed:7e:b1:b0:d1:99:ae:c6:
24:11:31:e8:7a:c1:2e:a2:07:fa:13:40:51:e0:84:73:ac:13:
71:ff:ba:1e:93:cc:c8:68:94:cb:fa:bd:a2:c1:6b:5a:cd:1c:
2d:89:ac:7d:a3:16:bc:71:74:16:96:b2:71:9f:f0:bb:74:4d:
28:e7:a3:fa:a3:af:c9:fe:35:08:ab:ac:06:31:d2:49:78:30:
30:23:fb:18:06:0a:78:75:20:1b:3a:a8:d6:3f:57:f9:63:f6:
aa:5f:65:c0:95:26:b8:2f:ea:f3:a4:5d:68:bb:7a:86:b3:49:
81:7d:f5:66:cf:f0:21:18:97:65:3d:5b:b7:15:b6:24:ad:03:
16:a2:e3:8d:68:90:38:40:15:4d:28:22:1d:f0:f3:9a:f5:c4:
f8:6e:20:2b:87:81:0b:8f:49:0d:77:ae:5a:14:01:6a:8a:e4:
49:fb:3e:bf:ef:65:74:cd:b2:4b:a1:ed:9f:0e:16:4a:99:e9:
45:cc:eb:3c:eb:16:83:99:15:a0:81:43:32:ad:91:23:86:8b:
9b:ce:a9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:37:53 2025 by rpki-client