
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
File: P7w69DECztpPoPf6m9kbLWU0bW4.mft (raw, json)
Hash identifier: TnAQv3bTPBP3xxiHxZPwIFx5a0Ajq0KJgrOX4PIE/Xs=
Subject key identifier: B7:92:9C:2C:3E:15:0A:F1:0A:D5:95:5B:18:40:74:59:EB:A5:24:A9
Authority key identifier: 3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
Certificate issuer: /CN=A9161DF8/serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
Certificate serial: 02AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
Manifest number: 027A
Signing time: Wed 05 Nov 2025 01:59:09 +0000
Manifest this update: Wed 05 Nov 2025 01:59:09 +0000
Manifest next update: Wed 12 Nov 2025 01:59:09 +0000
Files and hashes: 1: P7w69DECztpPoPf6m9kbLWU0bW4.crl (hash: v8+/jlHU3/PzlT5adHhuxeux2CTb/OyD6zx9RPaSASc=)
2: 845D92BAFC5111EFA8505536C4F9AE02.roa (hash: b6MhCI2q2jPGB8Vadu+OAGml/y/4nQ509qbcxbzKawM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl
rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:59:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 686 (0x2ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161DF8, serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
Validity
Not Before: Nov 5 01:59:09 2025 GMT
Not After : Nov 12 01:59:09 2025 GMT
Subject: CN=690aaf6d-94d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:35:ac:09:cf:63:ad:ba:9a:bc:df:0e:6a:73:
70:3c:38:65:ea:78:98:97:64:a6:16:a2:3f:5c:73:
ff:ee:18:f9:5d:14:ec:df:bc:02:d2:aa:a0:e5:70:
5d:59:e6:9a:3f:e8:2f:7e:7a:1d:fe:0d:a2:ca:58:
3b:5d:0f:93:f6:bf:ff:2f:7a:00:9b:ee:78:ea:b1:
4d:f3:61:90:0e:36:de:4e:dd:d4:db:1c:ba:7d:0a:
ca:72:42:99:73:3f:56:9f:4f:79:49:56:b9:78:c3:
a5:8c:be:2d:f8:0c:83:8c:7b:ff:77:2b:98:b1:b5:
b0:c9:87:1a:24:46:6c:da:0f:66:04:0c:3c:cd:02:
c4:70:81:f8:db:b7:6b:70:92:30:1b:6b:f0:18:25:
0b:2e:fc:23:d6:bb:84:f7:46:c1:cf:64:1b:f5:71:
71:e9:b8:8a:20:62:6e:78:b9:01:db:2d:b9:72:ca:
c3:48:c7:1f:1a:dd:4b:6c:32:e5:82:ba:18:70:20:
47:7f:05:ae:7a:d0:9c:15:d3:d7:31:90:3c:e3:73:
62:b6:bc:0e:ab:58:2c:6e:58:04:d7:92:6e:4d:b2:
a1:82:0a:d8:b7:f2:0c:66:5c:95:53:b4:76:dd:97:
1c:17:cd:10:a3:b7:0d:1b:f3:94:bc:5b:19:eb:4a:
78:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:92:9C:2C:3E:15:0A:F1:0A:D5:95:5B:18:40:74:59:EB:A5:24:A9
X509v3 Authority Key Identifier:
keyid:3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:d4:46:55:24:33:a7:e8:31:23:c3:f2:cf:04:12:b2:d6:e6:
2c:34:57:22:fb:a6:04:a5:b9:af:7e:9a:bf:09:f0:53:05:69:
03:7b:fe:ef:2c:88:6a:0b:83:81:cc:8c:53:0d:a1:a2:ae:b3:
24:37:a9:6b:f0:87:f7:9b:2e:c4:4e:fc:77:c5:41:b5:e2:99:
e6:01:20:69:fe:04:d3:91:ca:f4:c9:9a:c8:9f:e7:e7:d0:43:
bb:c8:f1:0a:c1:32:29:a8:eb:95:0b:8a:35:8f:77:24:bb:58:
50:b1:2c:28:c2:66:0a:4c:1b:b2:6a:6c:36:85:84:41:0d:93:
e3:76:b9:87:af:60:97:78:72:61:54:23:b3:2a:8c:e6:6d:52:
d0:b3:61:55:a3:76:9f:b4:a4:7f:d5:af:aa:2b:cd:3b:71:cd:
5b:ea:49:43:cb:bb:07:5d:66:e4:81:f1:3a:69:b4:58:ef:41:
06:f5:36:13:71:c6:3d:47:7a:f3:20:f8:da:ff:23:05:14:f5:
f7:22:76:95:8e:48:10:09:dc:17:b9:8d:38:56:ca:70:d3:9c:
94:bd:02:53:cb:6e:d2:3b:92:98:4c:77:52:a8:9a:b0:91:23:
d1:49:ea:ee:0d:3e:bf:cd:3d:f4:4f:42:21:20:7a:1f:d1:93:
a3:41:5c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:22:54 2025 by rpki-client