
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
File: t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft (raw, json)
Hash identifier: Sf7R8jSvPx0LaWJY/6EzDk85sUYA9HANQTse9evLZ1c=
Subject key identifier: F0:02:A0:5D:DB:F0:90:34:89:16:E8:2F:68:C3:BD:FC:0C:19:DE:B5
Authority key identifier: B7:59:09:2A:69:18:F4:5E:AC:D0:DC:FD:F9:71:D0:D3:FA:50:21:AA
Certificate issuer: /CN=A9149680/serialNumber=B759092A6918F45EACD0DCFDF971D0D3FA5021AA
Certificate serial: 07EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
Manifest number: 07E3
Signing time: Sun 02 Nov 2025 21:06:55 +0000
Manifest this update: Sun 02 Nov 2025 21:06:55 +0000
Manifest next update: Sun 09 Nov 2025 21:06:55 +0000
Files and hashes: 1: t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl (hash: LFGXEtZzHXXTMoX5QFH+ROmzS3lUTzGzbrW+uLDFx04=)
2: 4EF261AE0BA211EB99DE471BC4F9AE02.roa (hash: elCspCf7kpxqe/1sy2Dq4/SmTn/Yog4Qi7W5Fjs7BFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl
rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2026 (0x7ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149680, serialNumber=B759092A6918F45EACD0DCFDF971D0D3FA5021AA
Validity
Not Before: Nov 2 21:06:55 2025 GMT
Not After : Nov 9 21:06:55 2025 GMT
Subject: CN=6907c7ef-ab4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a2:d4:40:1a:4c:27:fe:d1:01:56:5a:53:96:
37:15:35:57:24:a7:2c:85:32:85:c5:20:76:b0:02:
94:05:90:38:b1:34:25:da:8d:ed:47:8e:01:38:f5:
d9:29:42:58:96:ec:39:d1:ae:b1:90:ef:3c:94:78:
52:d8:a8:ee:40:58:97:d0:26:bd:51:a4:cd:f2:c7:
26:c5:2f:98:b0:ba:30:98:fc:06:6c:a0:26:b4:0a:
98:53:8d:76:2f:8e:d5:e8:eb:28:8d:e6:85:61:73:
f1:56:03:7c:b3:59:44:91:d6:16:b9:6d:01:11:b2:
e8:21:66:6f:ff:0e:fa:72:ff:a7:6c:6c:9e:a1:ba:
d8:66:21:95:26:9d:6c:f0:94:85:13:b8:68:df:7a:
84:fb:6d:93:f7:ad:bb:12:d5:a4:d8:20:78:c6:0e:
fa:0e:74:01:cc:6e:ce:e8:2c:ed:43:fb:9a:5f:a7:
29:4b:d1:03:a2:7e:64:fc:dd:82:fe:4f:1a:33:a3:
b9:ff:19:f5:e5:4e:48:37:62:f3:d0:87:13:65:ed:
6f:57:90:6f:40:ff:f6:29:ab:e8:fe:df:71:93:f8:
62:4f:d6:27:2e:8c:fa:e5:ca:b1:e2:ca:6e:0a:b2:
6c:b3:27:95:33:cc:c9:d5:b6:13:3a:da:de:61:a8:
8a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:02:A0:5D:DB:F0:90:34:89:16:E8:2F:68:C3:BD:FC:0C:19:DE:B5
X509v3 Authority Key Identifier:
keyid:B7:59:09:2A:69:18:F4:5E:AC:D0:DC:FD:F9:71:D0:D3:FA:50:21:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:98:8a:8e:01:7b:55:9c:25:ff:69:3b:30:1a:68:8d:b8:74:
84:72:d7:10:f6:cc:6c:10:18:5c:8e:1d:78:1d:83:7f:e4:4b:
d5:84:53:46:d3:bb:bb:6c:db:d3:e0:73:b5:39:e7:74:fd:54:
1e:2e:39:77:d7:14:e9:8f:3f:41:49:7d:0d:eb:09:4c:8a:cb:
22:b5:97:87:72:25:81:a9:4d:17:47:05:e9:69:ec:a3:59:ba:
47:38:7c:14:a8:0d:a0:b4:1c:0c:3e:9b:b8:67:bc:79:95:8e:
09:71:5b:f6:70:fe:cc:d8:81:79:49:7f:c6:3b:0e:cb:ea:cd:
c2:3f:ba:86:35:ac:ce:81:4d:88:05:2b:84:6b:cf:a5:28:b0:
42:34:6e:02:e0:84:c5:1a:c1:19:1b:95:af:2e:55:46:84:5f:
36:26:c1:38:4e:49:6a:f8:93:51:4a:ad:c2:18:dd:4e:86:51:
51:93:e6:51:36:ce:86:36:60:b0:4d:23:ac:56:c8:45:f6:93:
3e:3a:e5:aa:e4:dc:0f:47:63:5b:0b:b1:8f:fa:99:13:92:8a:
c0:b6:0c:ba:b4:1b:41:35:1e:cb:81:10:5e:de:43:c2:5a:61:
87:99:7e:94:18:87:6f:39:bd:3e:c0:b8:d0:dc:da:af:ea:30:
6b:1e:99:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:14:36 2025 by rpki-client