
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
File: em4wIQZCz0-7QXPzUnSOHqXCx8M.mft (raw, json)
Hash identifier: XD3mCexJV5shBdxmxMQucqlYvuUOYNmnbABcfIG24vc=
Subject key identifier: A6:EE:C5:E5:BB:51:B7:AA:56:4B:5B:BE:1F:78:BE:3E:3F:FD:CB:05
Authority key identifier: 7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3
Certificate issuer: /CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3
Certificate serial: 1886
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
Manifest number: 1865
Signing time: Fri 24 Oct 2025 16:52:11 +0000
Manifest this update: Fri 24 Oct 2025 16:52:11 +0000
Manifest next update: Fri 31 Oct 2025 16:52:11 +0000
Files and hashes: 1: em4wIQZCz0-7QXPzUnSOHqXCx8M.crl (hash: MAXwHOF96lYy0YBZh0ZNHfMedXQGqkB+dzUiK4mNX+0=)
2: 708DE4A87AB011E8B7AB0E53C4F9AE02.roa (hash: 4Q+SEdvBQGfYmmHeFRyy/2R/EHACTjORm2A/+Pw5UxE=)
3: F49AA4A889C211EEADFCF27CC4F9AE02.roa (hash: p3nDO3WF2LVR/VuRYdJhLml5b3M6N0ju1bV/+dQUHBY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl
rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 16:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6278 (0x1886)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D9FC, serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3
Validity
Not Before: Oct 24 16:52:11 2025 GMT
Not After : Oct 31 16:52:11 2025 GMT
Subject: CN=68fbaebb-415c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:9f:cf:c2:45:01:24:34:a2:99:49:5c:cc:
93:fd:27:1e:3c:68:21:77:72:ff:fb:7c:b2:f3:3a:
c2:34:e5:c4:42:f3:a8:4c:81:94:69:fd:a3:ed:4c:
ac:24:d9:fe:37:a2:aa:47:9f:45:fa:87:6f:6c:a0:
86:02:e9:a7:05:52:10:e2:31:7a:6d:1d:c5:73:e9:
6f:0b:47:05:b0:22:e9:ee:2f:2d:a5:45:3d:12:ef:
fd:af:d6:80:b2:1d:c2:f1:19:43:6e:c7:f2:0e:63:
07:bb:ea:b7:8c:c1:9d:ec:31:2b:47:c3:45:93:4d:
87:db:88:b7:eb:3b:f6:8a:58:44:99:7c:95:b0:85:
3a:2a:9e:16:89:9a:3c:c2:85:c6:f3:4b:f4:73:cc:
3f:9c:a2:18:fd:a7:c7:2b:4f:43:93:8d:a0:1f:29:
f9:65:2c:25:7c:7b:ff:6f:a5:f3:15:a1:12:23:e6:
b6:08:07:c9:b8:65:f4:8b:0a:73:f3:3c:77:ce:fe:
87:aa:b6:79:7e:ae:36:26:9f:08:ca:35:f5:f6:d3:
92:fe:67:ba:78:c6:14:80:80:03:3e:77:6b:84:a0:
3c:c6:aa:e5:ef:42:b3:1b:a7:cf:61:78:35:d1:d1:
e9:5a:a0:55:03:72:5b:b8:a2:de:b4:2f:3f:72:46:
31:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EE:C5:E5:BB:51:B7:AA:56:4B:5B:BE:1F:78:BE:3E:3F:FD:CB:05
X509v3 Authority Key Identifier:
keyid:7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:65:86:f6:fe:95:40:da:9c:23:bb:7e:c3:da:ef:97:9a:70:
7c:44:bc:c8:73:8c:af:eb:2f:8e:bf:49:fe:ce:f0:18:4e:aa:
4c:b7:34:cf:64:34:cb:09:89:58:c7:18:fa:ad:23:66:b8:49:
5e:ad:f0:e5:c1:fd:1d:bc:03:d5:69:f4:c8:ae:46:8d:4c:bc:
06:d8:06:0b:38:be:30:0d:d8:90:b8:73:86:d5:c6:92:92:ee:
4f:2a:18:41:5a:d0:12:32:0f:c3:84:7e:e5:3a:44:ba:d3:ae:
e0:79:fb:b2:5c:aa:95:1c:7c:25:e1:f3:fc:46:d5:f5:92:78:
20:3c:e9:e3:5b:ea:79:3a:7e:48:dd:43:c6:ee:eb:12:f2:22:
9c:fc:37:99:a0:6e:3e:45:c2:f0:d9:7d:8f:a4:dd:36:c0:33:
fc:c9:ae:2f:be:b4:dd:3f:c6:9e:e5:67:54:d7:a9:68:d8:c2:
08:61:2b:b2:13:f6:f4:0b:b0:f2:5e:d8:97:3f:ed:40:80:c9:
26:79:fb:06:b7:1c:49:9a:85:61:0c:d4:22:4c:1c:1b:7e:3e:
be:86:7a:81:80:7b:02:69:6e:36:a6:2e:17:cd:12:67:0e:b4:
ec:23:66:6c:11:dc:fa:f3:72:5a:cd:36:ff:20:5d:40:d6:d9:
57:3d:7c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 17:39:02 2025 by rpki-client