
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.mft
File: m0G07JA0ytKB1baCVnQwWQMlK94.mft (raw, json)
Hash identifier: FFSZqV4kUf8l8kq2VWm5RpJlDdsAm1w1mJP6NyA9Aws=
Subject key identifier: 56:D5:4E:27:F6:84:0E:0D:37:55:48:ED:05:C0:8A:11:BE:88:81:5F
Authority key identifier: 9B:41:B4:EC:90:34:CA:D2:81:D5:B6:82:56:74:30:59:03:25:2B:DE
Certificate issuer: /CN=A915E39C/serialNumber=9B41B4EC9034CAD281D5B6825674305903252BDE
Certificate serial: 066D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0G07JA0ytKB1baCVnQwWQMlK94.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.mft
Manifest number: 0668
Signing time: Tue 04 Nov 2025 22:39:02 +0000
Manifest this update: Tue 04 Nov 2025 22:39:02 +0000
Manifest next update: Tue 11 Nov 2025 22:39:01 +0000
Files and hashes: 1: m0G07JA0ytKB1baCVnQwWQMlK94.crl (hash: xXon9ZmCz4rk4DiY1lomvLu6IA9v1Wa3UKuAXRuGWH0=)
2: 7EA34D309EC511EBA85F8276C4F9AE02.roa (hash: yK6C1pWwJA6WJCQDjIzeh8mb+889ajrC1dn+LyzHgJg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.crl
rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0G07JA0ytKB1baCVnQwWQMlK94.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1645 (0x66d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E39C, serialNumber=9B41B4EC9034CAD281D5B6825674305903252BDE
Validity
Not Before: Nov 4 22:39:02 2025 GMT
Not After : Nov 11 22:39:01 2025 GMT
Subject: CN=690a8086-9607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7d:74:b1:cf:1e:23:1a:4d:1e:3b:c9:4b:48:
5d:70:5c:94:97:57:0e:8f:f2:8a:3a:4d:12:65:05:
3f:08:a0:57:14:ee:94:78:38:5a:e1:0f:53:d4:e1:
ca:ab:2b:7a:41:f2:59:14:4b:e3:ea:64:f0:0b:f0:
61:6a:99:ba:fc:5e:51:95:84:bd:99:72:92:71:92:
15:45:3e:d5:fa:f4:a6:ac:cd:67:77:57:cb:78:98:
ea:ea:1c:a2:89:bd:88:01:1f:df:04:f1:bf:64:75:
1c:63:cf:4c:5a:c7:58:54:2c:bf:68:12:8f:f6:92:
71:1e:7f:a0:a8:5e:ef:56:f2:64:7d:38:de:e7:00:
0d:7a:a7:c3:86:b2:4f:10:d9:f8:3a:a0:84:4d:08:
38:32:0d:3c:9b:81:0f:ec:14:50:be:a2:2f:7c:cf:
f9:74:1f:b7:5a:c2:f2:6f:f0:83:77:e0:cd:2a:c9:
00:78:b6:c0:43:97:10:c8:73:e3:37:eb:b5:fe:86:
c2:52:3a:2e:15:b5:2c:07:be:b7:c2:e8:28:bb:2f:
7e:5d:00:21:ff:07:71:5f:0e:cb:dc:1b:99:81:3c:
53:1f:0d:10:94:fc:4b:8c:86:d3:ad:97:af:2a:45:
ec:7a:1e:1a:8d:62:88:06:38:ec:7f:93:9b:19:10:
9d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D5:4E:27:F6:84:0E:0D:37:55:48:ED:05:C0:8A:11:BE:88:81:5F
X509v3 Authority Key Identifier:
keyid:9B:41:B4:EC:90:34:CA:D2:81:D5:B6:82:56:74:30:59:03:25:2B:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0G07JA0ytKB1baCVnQwWQMlK94.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:b3:1f:23:4f:d4:45:78:f8:3b:21:dc:39:63:f9:01:b2:7a:
2a:9e:73:9c:ec:85:df:54:c8:09:31:4c:ca:7c:87:6e:ed:b5:
86:77:a6:e5:6d:e1:10:51:46:f8:6f:01:f1:25:78:b0:fa:ed:
ae:15:d4:8d:9b:de:b1:7f:a1:c9:9a:09:f4:d1:a8:7b:57:84:
f1:dc:9f:d0:a8:61:a3:15:01:c4:d7:00:e0:4b:ae:96:4d:ec:
fa:db:61:e1:df:76:a9:d0:aa:78:69:78:24:f8:d7:76:62:72:
b8:73:db:69:22:0b:d3:b7:bc:d8:2c:34:ab:ec:12:67:36:6f:
97:fb:bc:2f:81:3e:d7:38:d1:76:e9:df:ca:cf:0d:1e:d8:27:
ee:c1:ae:d3:1f:8a:f8:ce:cc:09:fb:6a:13:e1:f1:59:1e:bc:
06:b1:81:3b:c7:c7:7b:22:df:cd:e6:6b:a7:54:45:33:72:a7:
de:e4:4b:f4:84:b7:c2:ca:87:5d:24:57:77:c8:71:23:40:62:
0f:b3:c1:32:d3:88:b3:82:c1:3b:d8:25:af:0b:d7:96:76:a5:
d4:f7:af:df:da:24:5a:8a:c9:2d:1a:91:1d:b7:85:a1:a2:18:
17:99:bb:d4:90:e1:e6:0c:df:d1:c6:92:80:ac:4f:54:b8:5f:
89:47:31:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:23:43 2025 by rpki-client