
$ rpki-client -vvf rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft
File: cM1M0T4uN35eXDervHl-7ea2Yhs.mft (raw, json)
Hash identifier: QHVwKELSXtBVNOOG5sc+HGoqQqWD4Ez/jBQeEi5iV5A=
Subject key identifier: F1:6D:72:C1:0C:D9:A8:67:1C:E9:4C:C4:58:CE:FF:15:38:7B:6F:2D
Authority key identifier: 70:CD:4C:D1:3E:2E:37:7E:5E:5C:37:AB:BC:79:7E:ED:E6:B6:62:1B
Certificate issuer: /CN=A916F338/serialNumber=70CD4CD13E2E377E5E5C37ABBC797EEDE6B6621B
Certificate serial: 02E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft
Manifest number: 02E1
Signing time: Mon 03 Nov 2025 01:15:15 +0000
Manifest this update: Mon 03 Nov 2025 01:15:15 +0000
Manifest next update: Mon 10 Nov 2025 01:15:15 +0000
Files and hashes: 1: cM1M0T4uN35eXDervHl-7ea2Yhs.crl (hash: 1KuTkRYH7rk7F4tSzc99O0Pa/2+XA+diAfc1yiavXt4=)
2: BA5354A4044211EDBB686665C4F9AE02.roa (hash: 5D+EMadPUYOYtPY3WxKsOuXfJZW+RJaKdKnGQtm9R6c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.crl
rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 01:15:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 742 (0x2e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916F338, serialNumber=70CD4CD13E2E377E5E5C37ABBC797EEDE6B6621B
Validity
Not Before: Nov 3 01:15:15 2025 GMT
Not After : Nov 10 01:15:15 2025 GMT
Subject: CN=69080223-8de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ac:21:b9:2d:08:22:48:07:ee:0f:ad:f3:b2:
ae:fe:a5:d3:21:2e:84:6c:2f:b4:62:90:36:0c:14:
7a:57:5c:99:1a:18:d8:60:f3:1f:f2:c7:66:3e:18:
e8:0f:49:dd:dc:25:e6:76:f4:bc:e4:ad:35:3f:e6:
74:98:6f:6a:ec:96:26:9d:5b:c9:36:90:ab:46:59:
0a:36:dd:f7:af:05:ec:1e:3c:9d:7f:97:21:c7:1b:
ee:e1:53:0a:90:89:23:10:47:f5:1e:2c:61:9f:dc:
e3:d2:03:1b:fe:36:75:96:66:43:5e:ff:8e:97:64:
64:54:28:54:16:07:19:8c:b3:b7:f0:ef:36:91:8d:
a7:42:e7:21:1d:de:e0:59:2b:85:10:c8:26:e6:9b:
b3:f3:c9:52:01:39:0a:ed:cd:85:3a:17:0c:a7:2e:
35:8f:48:6f:83:22:3f:5f:c3:ff:ae:72:21:c4:fc:
40:7f:fa:11:c1:1f:71:f6:69:a1:58:8b:93:0b:e5:
5a:9e:d4:50:f8:3b:e0:f6:08:8d:5d:b7:60:f0:35:
27:57:58:3a:34:17:b4:f1:ee:6e:70:90:40:65:d8:
a5:3a:a6:ca:f7:3e:07:db:88:08:f3:9b:54:b1:4e:
a9:d4:8b:b2:76:55:4d:a2:be:64:d4:f3:b8:a5:6b:
30:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6D:72:C1:0C:D9:A8:67:1C:E9:4C:C4:58:CE:FF:15:38:7B:6F:2D
X509v3 Authority Key Identifier:
keyid:70:CD:4C:D1:3E:2E:37:7E:5E:5C:37:AB:BC:79:7E:ED:E6:B6:62:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:0f:53:18:64:d9:be:d8:63:4b:d8:68:fe:d5:78:c6:51:15:
db:85:b8:c7:05:2f:fc:9e:7e:96:a2:c9:8f:57:f9:7a:cf:c3:
b7:fd:98:5f:f8:08:3e:5a:d8:c8:ec:91:df:29:65:fd:ef:bd:
55:95:57:67:b4:fa:69:20:fc:d9:97:a0:7b:46:89:3b:fe:83:
3c:9e:9b:44:54:99:76:39:5c:7d:09:62:ce:8a:2c:f4:8a:c5:
1b:ab:d3:3a:fa:d7:18:0f:ed:57:d2:dd:73:98:7d:0a:2d:44:
02:17:e0:47:a7:fc:65:c5:07:4c:36:9a:cb:5a:5a:2c:51:5e:
2d:82:70:96:05:66:14:9d:ff:87:a6:3d:4b:ea:ec:3a:db:0c:
51:47:72:d3:cb:69:62:51:17:fc:53:d3:b0:e3:b8:40:46:7c:
21:2f:a9:c1:1d:70:09:65:27:6f:18:22:ef:7e:30:ce:55:b8:
18:0f:eb:df:13:43:5f:56:b4:e0:88:32:3b:01:97:9f:36:77:
70:42:f8:5b:d4:8e:1e:f0:19:8d:1c:a3:7e:b5:b0:61:57:ca:
7c:95:a3:17:c9:c0:ad:f2:cf:33:3a:b1:f0:36:f5:79:ca:af:
4c:31:28:5d:75:51:f1:e1:1a:ea:3a:ee:f3:b2:1f:93:36:e4:
a6:8f:f1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:08:22 2025 by rpki-client