
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft
File: gprYV1claHsfCkxV-UIq8zsA_LE.mft (raw, json)
Hash identifier: Vjr5mErWEb7wbCbh3wqAxdSdjDtfLVxd2wX5usr3KgE=
Subject key identifier: 37:E7:DB:EB:C1:C1:56:ED:17:20:E0:34:6E:E6:4B:56:ED:D0:BA:E4
Authority key identifier: 82:9A:D8:57:57:25:68:7B:1F:0A:4C:55:F9:42:2A:F3:3B:00:FC:B1
Certificate issuer: /CN=A916A511/serialNumber=829AD8575725687B1F0A4C55F9422AF33B00FCB1
Certificate serial: E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft
Manifest number: E3
Signing time: Mon 27 Oct 2025 07:38:16 +0000
Manifest this update: Mon 27 Oct 2025 07:38:15 +0000
Manifest next update: Mon 03 Nov 2025 07:38:15 +0000
Files and hashes: 1: gprYV1claHsfCkxV-UIq8zsA_LE.crl (hash: ZTPC4cGWSARWxqF3U9q96rot240Vf+U46qOB/mc/rdQ=)
2: C95F7472ABD411F08661983DC4F9AE02.roa (hash: k2YDwc03t3OBZ/zjfO15D6Psianh7LMJ/JmqviJo7uA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.crl
rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 07:38:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230 (0xe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A511, serialNumber=829AD8575725687B1F0A4C55F9422AF33B00FCB1
Validity
Not Before: Oct 27 07:38:15 2025 GMT
Not After : Nov 3 07:38:15 2025 GMT
Subject: CN=68ff2168-0f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:7d:e1:0c:e7:78:aa:6d:c8:42:11:44:8f:
66:89:89:71:e0:80:dd:63:6a:65:5e:09:7c:3a:b5:
1a:6a:c8:11:7b:29:bf:72:ce:fd:6c:18:fa:01:18:
3d:fd:3a:0e:28:e9:2a:65:05:21:a6:4c:c0:3e:98:
e9:c3:d1:45:b7:aa:13:58:50:fa:78:c0:16:9b:c7:
5c:5d:42:26:af:50:d8:05:fe:6b:cb:c0:20:94:a9:
d6:5f:bb:bc:2e:94:82:87:f0:91:31:b1:05:30:32:
ff:72:f0:d6:cf:7a:f9:f4:0a:ab:55:64:fa:de:3f:
2a:d1:a9:14:9b:48:62:88:ed:45:f1:01:83:f9:21:
d9:e8:84:3b:58:b6:2f:e2:c9:68:c6:e4:15:68:37:
1e:28:c5:d2:ee:23:b2:3e:66:d1:1c:45:3f:55:67:
27:5a:6f:9d:4b:68:2e:53:49:74:2c:5a:c0:4d:96:
65:57:ce:a9:44:22:5e:13:48:95:b6:c7:06:a3:86:
a7:03:8f:86:70:7b:cc:d8:d1:72:e4:95:c2:07:6e:
4c:9a:63:db:bd:ab:82:a0:c5:17:09:d6:32:85:b0:
da:7e:fa:6b:7d:1b:19:2d:9b:9b:0d:bf:4d:6d:56:
46:ad:07:b4:34:1d:16:6d:0b:a2:68:47:1c:23:4a:
a9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E7:DB:EB:C1:C1:56:ED:17:20:E0:34:6E:E6:4B:56:ED:D0:BA:E4
X509v3 Authority Key Identifier:
keyid:82:9A:D8:57:57:25:68:7B:1F:0A:4C:55:F9:42:2A:F3:3B:00:FC:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b3:69:dc:46:3c:eb:fd:53:62:92:a7:eb:e5:df:8e:b7:4a:
64:33:84:5a:cf:d4:0d:82:a8:b9:fe:37:e1:e8:8b:4f:d8:35:
21:3c:98:68:0b:91:37:6a:92:1e:6c:90:fc:fb:c1:60:a1:ad:
d2:83:20:22:7a:6f:6f:9c:4c:e1:e1:d3:f3:90:63:f9:04:41:
2f:69:32:51:a0:2f:bf:1c:1d:11:75:64:e7:41:95:7f:bd:33:
ff:d6:02:7d:06:b9:47:07:18:21:06:d7:9b:e7:4f:39:b3:73:
89:dc:04:73:b4:ec:52:bd:9a:46:ef:8b:3c:a1:5d:55:92:c8:
79:37:6f:93:d0:5f:b0:a1:11:c0:88:87:c9:c3:83:a3:6a:b8:
92:0d:08:73:f3:79:06:d3:51:02:74:c0:9a:5c:e5:98:6b:12:
11:0d:9d:7a:ad:db:75:3d:11:28:95:50:8a:95:10:30:15:10:
fa:e1:e0:9a:13:5b:b2:a0:59:28:3e:cf:fa:d0:b6:e8:3c:55:
ab:3d:17:76:b7:34:61:97:96:08:33:8b:10:79:46:b7:78:09:
b2:cd:d4:da:bd:ad:a1:c5:21:e2:83:37:90:b8:9b:f0:3d:46:
b5:2f:05:2a:09:05:79:e8:c9:32:89:a5:20:e1:83:f3:4c:ae:
d4:3c:4e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:05:14 2025 by rpki-client