
$ rpki-client -vvf rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft
File: H7TDxXlvFLOd9R77qdra_Vzr0Js.mft (raw, json)
Hash identifier: k+amPZL4RkMThlW5ELB5Ia/9s7Dd1s2kMrNaCUF7kss=
Subject key identifier: B8:A9:A8:C3:02:E4:06:27:6C:AD:75:AC:0A:E2:D6:1F:91:5A:A9:0C
Authority key identifier: 1F:B4:C3:C5:79:6F:14:B3:9D:F5:1E:FB:A9:DA:DA:FD:5C:EB:D0:9B
Certificate issuer: /CN=A916732F/serialNumber=1FB4C3C5796F14B39DF51EFBA9DADAFD5CEBD09B
Certificate serial: 0607
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft
Manifest number: 05EE
Signing time: Sun 02 Nov 2025 23:00:11 +0000
Manifest this update: Sun 02 Nov 2025 23:00:11 +0000
Manifest next update: Sun 09 Nov 2025 23:00:11 +0000
Files and hashes: 1: H7TDxXlvFLOd9R77qdra_Vzr0Js.crl (hash: nWp1M77DYuLs9zTl/ECh39HjYG+Avv3dBkjIOJqA3SY=)
2: 2EF7E9168D2811F0B3A81665C4F9AE02.roa (hash: gZwSZaiGMHX80XPTAXje3zfVajGe3ErXWKRuYWUwlhE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.crl
rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1543 (0x607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916732F, serialNumber=1FB4C3C5796F14B39DF51EFBA9DADAFD5CEBD09B
Validity
Not Before: Nov 2 23:00:11 2025 GMT
Not After : Nov 9 23:00:11 2025 GMT
Subject: CN=6907e27b-f6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4b:cb:7d:d2:6d:64:5c:81:4c:e5:45:61:4e:
0d:64:17:2c:a8:ce:7c:34:78:8f:f6:ec:3d:0b:d2:
33:7c:f2:eb:26:de:8f:6e:60:1a:15:60:29:55:c4:
ab:ff:14:70:77:13:f3:d4:98:d4:0b:26:0c:dc:9e:
e4:09:fc:20:dd:2b:49:81:07:0c:bc:53:c5:d0:78:
98:88:a1:a9:91:60:f3:45:16:d9:70:a6:52:4b:4e:
2e:e4:7a:2b:6d:e3:ac:84:ea:b3:19:76:bf:7b:b9:
3a:47:0c:74:df:09:3b:28:ed:19:73:b7:9b:45:01:
7e:ee:31:cc:13:69:d4:4d:fd:ec:81:4a:a0:20:17:
5f:e1:3f:84:cb:5e:39:5c:e3:b6:7d:c1:86:b7:65:
bc:3a:14:d7:06:32:84:cf:c4:40:1a:52:1c:53:3d:
c2:09:44:d9:77:6a:64:28:d8:fd:87:53:e0:11:4c:
a0:73:f9:9f:7f:21:cb:99:35:05:90:17:a5:2d:e5:
84:f4:ca:b1:d8:9c:e4:85:b8:01:01:d4:d6:e9:a6:
1d:fb:d8:e1:c3:73:ac:99:7c:2c:a2:81:5b:b9:fc:
8d:c0:fa:13:68:ae:1f:06:c0:18:2b:b6:74:7e:2b:
d5:14:f7:ed:bb:a5:b5:90:a0:91:64:15:48:6e:0c:
bf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A9:A8:C3:02:E4:06:27:6C:AD:75:AC:0A:E2:D6:1F:91:5A:A9:0C
X509v3 Authority Key Identifier:
keyid:1F:B4:C3:C5:79:6F:14:B3:9D:F5:1E:FB:A9:DA:DA:FD:5C:EB:D0:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:94:aa:8f:3d:ce:0e:2e:62:14:e5:50:dd:5b:86:9d:7e:d6:
4d:59:b4:62:eb:60:e9:c6:0a:ac:7a:99:98:6d:8b:f1:df:a1:
60:ba:a0:a8:cf:65:a9:0a:0f:71:61:06:09:ab:d6:b7:a1:87:
cf:51:5b:e1:17:82:52:09:2d:d2:62:f0:0c:59:9c:b5:16:8a:
6d:47:ac:d4:84:bb:18:83:8b:fe:85:b3:17:72:dc:f5:55:4c:
ee:ab:40:8f:10:7d:d7:d6:ec:64:f5:51:b1:b5:ef:ba:f4:37:
87:85:21:e3:34:56:24:05:73:8e:b0:c3:b7:a8:52:32:41:20:
6f:b0:08:75:2e:1b:df:9e:1b:97:a8:4b:b5:25:73:50:05:b3:
44:8b:89:30:7e:68:e6:bd:47:e8:8a:69:9a:fa:be:c1:9d:86:
eb:03:31:fe:ca:87:6f:fc:8f:77:77:fd:b8:69:aa:f7:c4:7b:
1a:b7:7e:79:e6:92:30:d8:26:32:1e:03:3c:93:65:3c:03:6a:
76:da:10:98:4d:9c:f2:ba:87:95:4e:42:ee:4a:eb:a8:3c:1c:
ca:84:29:78:65:18:91:64:4e:fd:68:5f:a5:4b:03:af:a0:d6:
37:1a:2f:10:0d:d7:c4:45:f6:68:7c:a7:fe:3b:65:16:bd:bc:
49:e8:46:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:08:19 2025 by rpki-client