
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
File: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft (raw, json)
Hash identifier: P0kZJ7OP97LO/+ISa0M9l8c1s0PSRWHEqkHZJLi8nSA=
Subject key identifier: 1A:A3:68:5A:CA:36:31:ED:9B:94:D7:2B:D4:34:73:13:87:6D:49:40
Authority key identifier: 21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4
Certificate issuer: /CN=A9176302/serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4
Certificate serial: 0104
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
Manifest number: 0100
Signing time: Sat 01 Nov 2025 05:30:56 +0000
Manifest this update: Sat 01 Nov 2025 05:30:55 +0000
Manifest next update: Sat 08 Nov 2025 05:30:55 +0000
Files and hashes: 1: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl (hash: HXZdW3SOv8bijxNDJrUjjyO4nv6R/4BjCbW8scUuJkI=)
2: 0EE57B38378F11EF88F9BF5AC4F9AE02.roa (hash: 59HLMBrfjjdy7ZkLbK5ZAyw/H+2uYObVepiHANeb3uU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl
rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Nov 2025 05:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176302, serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4
Validity
Not Before: Nov 1 05:30:55 2025 GMT
Not After : Nov 8 05:30:55 2025 GMT
Subject: CN=69059b10-e308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cd:08:de:d4:35:1a:cc:63:c4:b3:3b:a3:5b:
1e:61:4a:fe:fe:57:e5:ed:ab:21:74:5f:91:ab:f2:
c9:04:cb:16:0e:10:00:5d:b5:5c:f8:17:3f:31:11:
34:28:dc:d6:53:bc:9a:c4:1b:59:aa:fb:7e:23:7f:
0a:04:a7:f5:97:ff:d8:8c:96:b1:83:ee:7c:70:c9:
9d:bc:2c:89:e5:e8:93:5f:7f:25:e0:f1:26:ca:3e:
ba:f5:6c:5a:00:de:85:b6:de:e3:68:68:74:9b:dc:
6f:11:bf:3d:35:74:9c:27:a4:a3:2a:df:64:23:aa:
33:08:f3:d0:33:e2:ef:22:30:41:12:2d:02:36:3b:
a1:0b:25:93:07:b7:17:6c:02:da:84:c0:25:d3:86:
c6:c0:6d:a9:b4:fa:c9:1a:8c:73:0c:e8:cc:e5:5c:
52:d8:29:1d:3b:71:28:8d:af:cc:1c:29:ca:5b:61:
d0:b8:d8:c5:6b:41:46:74:df:87:9b:45:33:88:3d:
19:3f:9a:60:d8:f9:12:6b:a0:f3:d5:1d:5f:c5:eb:
16:77:83:4c:da:93:bb:b7:84:56:30:ad:e7:1e:25:
c2:eb:3c:e7:66:74:57:b3:d3:23:3b:1a:bb:51:5f:
7b:fb:fe:1b:0f:52:81:b3:1d:74:43:42:5c:c4:fd:
13:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A3:68:5A:CA:36:31:ED:9B:94:D7:2B:D4:34:73:13:87:6D:49:40
X509v3 Authority Key Identifier:
keyid:21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:83:f6:3e:61:7b:96:f4:af:90:26:19:ef:7f:ef:48:9c:58:
94:61:83:e0:98:dd:f6:a0:bb:0b:5a:ac:87:60:31:60:75:a5:
ea:df:34:fa:d8:6d:a6:74:b4:35:d3:d3:b7:1a:69:73:ed:a1:
27:da:21:3e:2b:31:c7:15:a3:b9:bc:79:40:74:5e:0c:89:d1:
0b:dd:90:77:fe:fe:ef:ee:6d:bc:0c:71:19:c6:ac:a5:d6:94:
b1:7a:69:72:95:47:22:dd:e0:33:2f:75:c1:1f:18:ae:95:20:
cf:8f:6c:84:39:38:62:be:46:5c:cd:09:be:07:c2:27:8c:da:
96:b3:93:de:ce:53:c3:fa:9c:08:12:44:a8:92:8f:0e:2d:79:
91:c1:72:6e:88:61:5c:dc:fe:05:49:e8:65:ed:dd:e1:f3:63:
75:3c:48:e1:c1:39:49:90:07:14:18:fa:c6:7d:64:45:42:43:
4e:df:cc:2a:d2:bb:0f:d8:ab:a5:a7:4b:33:fc:41:ab:7e:49:
11:2b:97:35:c3:ee:70:79:36:7e:fd:7c:9d:37:bf:ba:0b:bb:
7e:01:f6:8b:7a:e3:5b:15:90:a6:9e:96:3d:c3:54:89:3e:6e:
7b:91:b4:e8:c5:72:d7:dc:b1:92:3e:e4:b3:1e:bb:58:19:b4:
eb:7a:8d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 19:19:13 2025 by rpki-client