
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
File: 78F7DRESbH-pQb1NDsp6o56TRqA.mft (raw, json)
Hash identifier: OLG8LlfwxhC2f7e/ziBocDhDVVpye4Orzd6Px3E2x7g=
Subject key identifier: CF:B8:EA:50:E4:3E:75:03:DD:D8:E8:CE:A9:62:4A:1C:29:75:FD:1A
Authority key identifier: EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0
Certificate issuer: /CN=A914B0CF/serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0
Certificate serial: 010D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
Manifest number: 010B
Signing time: Mon 03 Nov 2025 04:57:08 +0000
Manifest this update: Mon 03 Nov 2025 04:57:07 +0000
Manifest next update: Mon 10 Nov 2025 04:57:07 +0000
Files and hashes: 1: 78F7DRESbH-pQb1NDsp6o56TRqA.crl (hash: csNLrhqgE0cWFrmGm5ftm1bRhGJjmA3l96k/mvrPDVY=)
2: 20BCACE21F1A11EFB1CD4814C4F9AE02.roa (hash: gGWIR4nH/QFD71GxDfh04qRa0gYEVkAhSwx6PRLquIA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl
rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 04:57:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B0CF, serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0
Validity
Not Before: Nov 3 04:57:07 2025 GMT
Not After : Nov 10 04:57:07 2025 GMT
Subject: CN=69083623-44ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d0:8b:31:01:93:74:fd:17:2d:be:10:08:af:
d4:46:34:7b:09:c5:e7:81:f8:00:f4:c2:67:65:5f:
6f:1b:6a:18:c2:9a:a1:57:b5:0b:d6:2c:11:95:45:
20:f1:88:de:70:e1:b7:ac:61:1a:75:4b:34:44:0b:
00:59:73:8c:dc:d1:e0:73:27:63:c3:0d:21:41:c1:
f4:00:e4:de:17:30:dc:5f:d2:38:f1:39:b3:19:f8:
d8:96:f2:ac:49:b8:c7:31:db:6d:3f:54:3b:d2:8d:
b5:b4:90:2c:01:c9:35:d7:9c:6e:b0:25:82:ae:db:
43:e0:ae:9f:44:8b:bb:e5:50:9b:99:0a:e0:5b:d2:
f8:14:8d:40:5d:5c:26:99:da:e3:bf:b4:7a:cc:14:
4f:5c:4e:4a:de:8c:e2:b1:a3:ed:2c:15:12:a9:42:
6d:a5:c2:65:0d:96:4e:46:b6:76:8e:dc:39:07:f7:
10:18:64:9e:5d:0d:97:19:79:86:1a:2e:c6:28:51:
b0:13:3c:4b:04:db:e6:01:17:05:34:d2:cf:d6:af:
57:12:45:c5:da:29:34:bb:8b:5e:0f:8a:62:e4:8b:
39:82:6f:b6:2c:bd:f9:10:f9:01:37:a7:06:07:30:
5f:cc:78:4b:3f:4c:97:31:e4:6a:83:4b:9d:cb:a1:
72:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B8:EA:50:E4:3E:75:03:DD:D8:E8:CE:A9:62:4A:1C:29:75:FD:1A
X509v3 Authority Key Identifier:
keyid:EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:e8:e3:4d:2b:41:bb:77:b6:58:e0:14:94:62:9e:48:6a:44:
ee:9c:da:b9:7e:46:80:c4:a5:6f:e4:f9:8e:a5:2e:2b:ab:f2:
39:f2:bf:22:13:5d:da:4e:40:17:f0:f9:52:29:ff:de:fc:b6:
b4:83:76:d5:86:c0:dc:01:5a:74:3b:78:1d:3f:89:87:15:31:
14:ba:e1:e6:ce:f0:87:71:5d:1a:8e:da:a7:a2:25:c2:64:40:
4b:e5:2d:13:dc:2e:52:09:6a:a8:31:95:f7:c0:84:68:9b:62:
1e:76:30:56:b5:95:37:57:61:51:33:b1:93:5a:d6:ed:ed:df:
18:92:3c:6d:ce:f8:5b:70:96:5d:58:1f:aa:93:a7:3a:3b:a1:
4f:bd:64:9a:fa:ae:cd:0f:d0:e6:8b:1d:c3:22:20:a8:09:7d:
ed:db:2e:64:92:c0:ec:72:af:80:5a:db:56:26:d8:f6:96:28:
29:be:6a:4d:fe:f7:f9:87:44:1f:c6:19:15:0e:8c:97:b5:9b:
3e:0f:6c:a9:36:86:4d:a9:ad:fa:60:49:1b:b4:af:82:ed:c6:
99:f1:09:63:ff:a1:cd:21:fd:3f:6d:1d:94:88:9d:c4:c4:b8:
4f:2e:35:f3:98:78:57:18:e6:a3:68:be:ca:68:1a:dd:83:7e:
e8:e2:4f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:13:43 2025 by rpki-client