
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft
File: f99iGPoBXQoAdKhEJFGAaij53fU.mft (raw, json)
Hash identifier: erxyDqULr47Nx1dHfXtAJZUFyn4hCiKHBczQJDoUdZA=
Subject key identifier: 71:72:90:48:BC:7B:72:40:1B:DF:64:16:B8:B7:CF:0F:37:4C:FE:36
Authority key identifier: 7F:DF:62:18:FA:01:5D:0A:00:74:A8:44:24:51:80:6A:28:F9:DD:F5
Certificate issuer: /CN=A9173060/serialNumber=7FDF6218FA015D0A0074A8442451806A28F9DDF5
Certificate serial: 07FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft
Manifest number: 07F4
Signing time: Sun 02 Nov 2025 21:00:14 +0000
Manifest this update: Sun 02 Nov 2025 21:00:13 +0000
Manifest next update: Sun 09 Nov 2025 21:00:13 +0000
Files and hashes: 1: f99iGPoBXQoAdKhEJFGAaij53fU.crl (hash: 8O+BTlBex0FPEBLar0mDASi30ShXss714w23V3sgp28=)
2: 7FAEDE3A03B411EBBB548A5EC4F9AE02.roa (hash: zYkuWCX1X2lloXdYhvISAPhidi7ivs3H5XjhpAN4fng=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.crl
rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2043 (0x7fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173060, serialNumber=7FDF6218FA015D0A0074A8442451806A28F9DDF5
Validity
Not Before: Nov 2 21:00:13 2025 GMT
Not After : Nov 9 21:00:13 2025 GMT
Subject: CN=6907c65d-03d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:5c:c1:95:49:18:6b:92:fe:9d:5b:d0:89:
fc:a0:c5:f7:a8:16:88:5b:0c:f8:9b:d5:b9:1f:e9:
bd:9c:75:15:de:df:89:88:7d:9f:4a:68:c0:54:9d:
49:f5:0c:23:9c:f3:e7:11:e9:3b:7d:7d:3b:12:03:
ab:11:31:82:45:5b:78:d8:f1:1f:42:52:a9:8f:bd:
b8:67:94:8e:29:36:36:91:84:e6:ad:ff:30:e5:2a:
8c:dd:63:93:a1:d9:82:f4:14:1c:74:dd:89:77:82:
04:a4:95:18:5d:6f:2e:e5:06:95:0a:3b:0e:8c:42:
b2:b5:de:76:90:29:4b:9d:ce:9b:78:12:83:05:8e:
fc:53:d9:78:e0:1a:30:5d:90:d4:e6:3d:bb:d8:5d:
4c:43:d5:59:91:ea:d7:7c:fb:20:5f:8c:ea:96:22:
cf:38:bc:81:41:a5:9b:c7:bb:8c:8e:41:d6:a5:19:
b3:a8:25:bc:3e:89:54:73:a3:32:17:90:30:3c:6c:
9b:c6:cd:ff:88:00:48:8a:35:40:d1:ce:cb:7c:7c:
e6:f0:e2:ef:aa:a6:ed:25:29:ca:37:99:bd:a1:32:
3a:fb:2a:7a:4d:b0:ba:1f:b1:e0:0f:91:b4:35:a2:
54:25:7a:ff:cd:76:b8:b2:b6:36:af:19:9d:1b:d4:
a7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:72:90:48:BC:7B:72:40:1B:DF:64:16:B8:B7:CF:0F:37:4C:FE:36
X509v3 Authority Key Identifier:
keyid:7F:DF:62:18:FA:01:5D:0A:00:74:A8:44:24:51:80:6A:28:F9:DD:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9f:a5:8b:f9:d8:1f:49:9f:a5:46:05:80:a9:bb:34:d6:09:
9e:2a:e2:48:80:30:8b:72:96:55:9f:3d:87:58:84:69:ae:10:
89:b5:44:66:44:e3:84:af:91:a6:53:eb:80:b0:be:d7:40:9f:
60:3a:0b:4e:44:cc:b7:99:bf:ba:bb:63:ea:ae:8e:50:5b:b8:
fa:16:9d:56:aa:b4:8a:99:27:17:88:91:72:a5:7d:d2:36:b0:
68:76:e0:dd:56:b9:ea:14:c2:06:50:b4:f4:98:48:a4:10:9b:
c6:c2:cb:f1:d1:e4:51:3c:3c:d1:bd:3e:3a:27:be:a0:28:50:
45:7b:ab:63:30:18:68:ce:8d:73:2b:d2:01:b3:c9:df:e4:68:
87:e1:6b:fb:b7:8e:09:b9:22:64:88:a9:5a:3c:1b:c2:ca:f1:
37:12:98:3d:7f:cf:90:c6:0e:b2:03:1b:2e:9e:d1:c0:73:7b:
f5:9f:c7:fc:ea:dd:af:e2:af:dc:38:4f:d3:6d:97:8e:ed:77:
c0:b9:65:6f:c3:6d:0c:56:1f:75:47:d4:37:66:e0:b6:e9:f3:
9e:27:fc:01:20:06:f4:ae:3a:9b:58:75:47:fc:0b:48:53:f9:
73:e8:2d:4b:ad:93:59:64:ea:30:56:8b:60:cc:08:43:d7:df:
59:67:25:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:08:17 2025 by rpki-client