
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
File: siw9CrzTkZSGo-YejXiJI5Ir9qU.mft (raw, json)
Hash identifier: +Xxq/ssFzEuxZF5F0ZKABNqydYAP/XtVPuniAL/a/vs=
Subject key identifier: EA:7E:76:3F:B7:0D:C6:47:52:5B:D0:6C:80:F1:53:2E:33:39:00:13
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial: 018D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
Manifest number: 0165
Signing time: Mon 27 Oct 2025 06:24:44 +0000
Manifest this update: Mon 27 Oct 2025 06:24:44 +0000
Manifest next update: Mon 03 Nov 2025 06:24:44 +0000
Files and hashes: 1: siw9CrzTkZSGo-YejXiJI5Ir9qU.crl (hash: sndznpW7xMYGUmUM5dhnjxhfa0uM1dN1Yzx06kT+5WE=)
2: B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa (hash: yi/JlbD7n+64UZKPjWeRYXCwO+TbmKfGvCIR+gFBIgU=)
3: 936A4548AC3A11F0A9C43F44C4F9AE02.roa (hash: aDzusaC8Tp4Xh29QzEkDqXm9UtTCSIlF3bFjfnnKcb4=)
4: BB982DDC211611F08D31C34DC4F9AE02.roa (hash: kdnh0lY80uMfga5l6WUOTwTWs5iXaL/0Tn0l6KDoAeU=)
5: E26269722E3811EFA4AF2445C4F9AE02.roa (hash: Rw5/f7mwiL2A4bDLQlquOGpfyNbiDbGp1uerfy4o6ls=)
6: 555E0D90B71F11EFBBE56410C4F9AE02.roa (hash: 9NSBUz8m7XvUpzDF2q/kWtrtqPYOWvRlzQxmdt8OCJc=)
7: A0BD00DEF5B311EFA334BB67C4F9AE02.roa (hash: EN6MJJBs25VJA8BxPoTDjeqUMnebmHL6ptBQ7dXtzww=)
8: 4C7C5ECCE1B211EE84F03918C4F9AE02.roa (hash: 4bqguqQkO2NdVWuTGwGDP28FXTuH4VtBBVIWhIpTMAk=)
9: BB17221E211611F08D31C34DC4F9AE02.roa (hash: ROJzIN797AliUmkcNaXXEwujC8/puzfhlC19YDeoFFk=)
10: 6E1519E8E1B211EEB4706E18C4F9AE02.roa (hash: 5GSc16lAwm/VgJPQr9dFvZJgXnG3knNsBXTvWJ5YEVU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 06:24:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397 (0x18d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Validity
Not Before: Oct 27 06:24:44 2025 GMT
Not After : Nov 3 06:24:44 2025 GMT
Subject: CN=68ff102c-b817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:e9:ef:98:09:4b:12:61:bf:6d:05:f4:93:
47:dd:c7:ea:5a:e8:af:90:b6:29:73:51:33:3f:e6:
7c:a3:84:22:ab:2a:94:e8:ba:f9:56:80:7e:71:aa:
f4:66:61:52:f5:8b:34:a6:ad:34:14:a7:b4:a2:e1:
96:3c:36:c6:21:e4:f9:d4:89:3c:3e:7f:0c:f1:ef:
c4:5f:15:f2:fe:07:68:b9:32:ec:0b:06:6e:58:e0:
6f:fa:3f:af:1b:ed:41:2e:60:dc:dc:52:d6:d8:e3:
9b:6d:97:15:8f:b0:ab:bc:57:ee:fb:81:eb:f4:03:
d5:10:da:86:39:9b:53:d0:77:fa:6c:ad:91:9d:04:
7a:9f:37:2b:e4:61:55:7e:c2:8c:a3:d3:ab:2d:89:
f7:90:65:69:a2:1e:8d:97:17:1f:04:04:bf:26:61:
7c:3d:5f:37:3e:67:b7:1a:24:72:78:6d:40:6f:ec:
df:85:fd:12:14:95:0c:59:2f:26:44:a7:c0:dc:6a:
da:64:90:0c:07:af:37:0b:ae:61:0e:a4:5e:bd:81:
79:fb:59:1c:bb:42:43:8f:ab:c5:18:e9:51:9a:46:
62:95:46:3a:9b:72:c3:74:61:82:f4:73:f1:48:49:
6f:5e:08:c4:3a:32:77:b4:cb:2a:b3:f2:8b:97:a4:
bd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7E:76:3F:B7:0D:C6:47:52:5B:D0:6C:80:F1:53:2E:33:39:00:13
X509v3 Authority Key Identifier:
keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:d5:87:46:1c:d0:11:bb:4c:d2:ee:ed:8f:a1:d0:94:29:0d:
75:82:b7:fd:5b:3d:a4:90:dd:b7:c5:78:4b:f5:fb:19:0b:8a:
cf:49:f8:5b:b7:df:d0:e5:d6:88:7a:40:64:3b:1a:cb:d0:ff:
79:5d:b2:17:09:46:3f:e1:64:5a:25:8c:b7:92:a6:e1:32:6a:
e9:98:b2:46:08:3e:1a:78:67:ad:00:a8:5e:c3:e7:8b:d0:2b:
3e:a3:ec:42:18:84:9b:4d:1d:31:39:68:5c:61:ba:3d:cb:8c:
da:41:6b:3d:cd:66:52:e3:8b:3b:2f:b4:b0:23:cf:c6:26:c2:
d3:56:50:70:a6:9c:eb:0f:d9:df:ac:0f:ff:19:a6:e1:83:dd:
14:09:4d:96:30:52:b3:1b:c3:bb:14:7c:a1:f6:e3:9a:40:94:
80:b7:24:7c:9a:67:b0:5e:76:2e:cd:e2:6b:99:75:76:0b:24:
72:5b:28:d7:4e:8e:02:ba:3d:12:94:dd:4f:f8:3b:16:95:b6:
ee:df:39:94:96:02:25:b3:32:be:8e:d9:5e:b3:0a:d6:12:18:
16:04:3b:17:28:b9:ef:e3:38:ca:29:fe:6d:a7:6e:65:8d:5e:
0c:ee:34:df:05:46:7d:54:b4:db:ba:19:59:b1:43:38:17:c8:
d7:2b:45:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:19:02 2025 by rpki-client