
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
File: IugbMnyx-zUB4Fr6uUEhkY_bW14.mft (raw, json)
Hash identifier: fOfQdLiOxIdjHeLwKB8UbBbs+AnhnyaSOy9faSsGXB8=
Subject key identifier: DA:BE:FE:CB:0C:10:A2:19:37:10:D8:EE:DD:A9:56:F8:C1:9A:EA:21
Authority key identifier: 22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E
Certificate issuer: /CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
Certificate serial: 18BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
Manifest number: 1889
Signing time: Sun 02 Nov 2025 16:30:33 +0000
Manifest this update: Sun 02 Nov 2025 16:30:33 +0000
Manifest next update: Sun 09 Nov 2025 16:30:33 +0000
Files and hashes: 1: IugbMnyx-zUB4Fr6uUEhkY_bW14.crl (hash: IHSz6cTaEZkGqnbX++TPDs4pT4Kwb2lq9N5vL/Pwf4Q=)
2: 99D6FBE6341F11E9BF826924C4F9AE02.roa (hash: YlOygXlIDX3GFV4d167GBuN4YNBn3vpIbjUm1yh/9cQ=)
3: AF066E3E8BF711F08B841259C4F9AE02.roa (hash: I9IuYeKsVkPA5gYO/x+81RjmFQuZFPQkT2hjEsy5mDk=)
4: 609B8BC27D7B11EDB6B77173C4F9AE02.roa (hash: iFueyXd2lHMmKAfnAjCjI5GADReoL75SeKIy87AJaM0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl
rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 16:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6332 (0x18bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B5BD, serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
Validity
Not Before: Nov 2 16:30:33 2025 GMT
Not After : Nov 9 16:30:33 2025 GMT
Subject: CN=69078729-c552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9d:48:26:bb:1c:9e:d9:2e:ac:98:72:71:fa:
4e:9e:d5:f4:72:95:9a:5e:3a:55:13:b5:de:77:90:
19:a2:57:14:2c:0e:e2:cb:74:e8:c2:55:53:d8:d0:
78:64:47:c3:66:cc:3b:18:a3:15:c5:93:bf:c6:4a:
a2:90:cc:b9:7f:85:4f:a4:7d:16:5c:24:82:39:5b:
39:6f:40:9d:2a:5a:24:3c:1f:d1:ea:7e:8f:18:05:
b2:05:5a:a3:30:c0:67:15:a8:bb:16:97:b6:27:5d:
76:4f:dd:17:15:9d:04:4c:c1:f1:a9:45:79:56:52:
f5:05:43:83:01:72:8b:5c:c3:9c:4a:51:a6:73:e2:
b7:bd:9a:b5:c5:2c:19:97:d4:84:5b:18:81:bd:fa:
04:a8:08:e3:d4:4f:12:3a:30:ec:25:2a:70:0c:ea:
4b:b4:4b:d4:ab:16:85:ac:74:a8:16:92:10:8a:6b:
6b:e0:d6:9a:71:e2:1b:72:fa:74:a3:cc:7f:53:93:
2c:4c:7f:61:0f:90:da:fd:a4:19:2c:b3:9c:d2:6c:
07:d2:a1:93:5f:4f:2c:7d:28:6a:46:c5:90:ae:9c:
0d:2b:e3:26:72:42:80:40:f8:64:06:97:dd:6c:bf:
45:7f:78:a7:63:60:16:00:92:8b:94:14:ad:7c:be:
8c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BE:FE:CB:0C:10:A2:19:37:10:D8:EE:DD:A9:56:F8:C1:9A:EA:21
X509v3 Authority Key Identifier:
keyid:22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:43:ce:9f:7e:61:67:b9:d6:79:ca:1f:ed:f4:15:a1:49:73:
c5:98:11:99:2b:e6:29:44:ba:c8:19:c1:f3:03:98:fa:99:e5:
e2:55:ce:69:42:5b:d2:10:a0:8d:93:17:a3:c2:31:29:ed:d8:
b1:52:5b:03:0e:d0:74:b4:4c:11:45:f1:02:db:1b:1e:b1:e0:
be:64:64:cd:59:31:7d:a7:f1:15:65:59:17:16:f9:35:28:22:
63:43:6a:a7:fc:a8:bc:8d:f9:c7:94:15:6b:71:75:16:38:d4:
c0:42:37:3b:d0:70:fd:42:6a:f7:5e:19:64:8e:9d:0c:5a:36:
5a:d8:4e:20:01:a6:58:1a:a2:5e:d8:56:c2:b7:36:60:32:01:
c1:3f:92:b5:dc:c3:ac:9a:8e:98:c2:d0:84:2b:96:b2:9f:e9:
79:87:cc:33:f0:05:1e:f3:c9:ed:b5:ef:90:2f:09:4e:93:a1:
88:8f:ad:15:9b:9a:f5:ef:51:36:8f:f2:7e:a4:3e:19:0f:df:
c8:f4:0f:71:b5:49:d0:eb:09:92:15:a9:14:0f:67:41:bf:39:
b4:94:25:69:4f:2e:cb:9e:90:23:15:f6:7f:50:37:11:99:27:
ff:c6:51:db:87:78:db:1b:9e:4e:c3:05:51:64:65:e9:31:33:
df:27:49:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:17:58 2025 by rpki-client