
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
File: tJhXdJtDHfMjL417C4OVpy_9GEk.mft (raw, json)
Hash identifier: j/iTL1oNxBmz/LQOd2ja2EuUPdkUxlGQTMi9/ghm0hA=
Subject key identifier: 37:E0:3F:49:FA:27:70:96:EA:12:B6:7C:8F:D3:63:2F:18:F5:EB:FA
Authority key identifier: B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49
Certificate issuer: /CN=A918E293/serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849
Certificate serial: 01BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
Manifest number: 01B7
Signing time: Mon 03 Nov 2025 03:04:08 +0000
Manifest this update: Mon 03 Nov 2025 03:04:07 +0000
Manifest next update: Mon 10 Nov 2025 03:04:07 +0000
Files and hashes: 1: tJhXdJtDHfMjL417C4OVpy_9GEk.crl (hash: FOsAHSY+i7Ptbggv/wEkri6XwnQFGHUJAHlRVAe199s=)
2: D865F69A233111EE813C5D26C4F9AE02.roa (hash: Lb0hJu9MZe6wLWtHrKtqcwpP08rypBWIlAZybLR4Lp0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl
rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 03:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E293, serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849
Validity
Not Before: Nov 3 03:04:07 2025 GMT
Not After : Nov 10 03:04:07 2025 GMT
Subject: CN=69081ba7-eed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:61:5d:9b:2e:b5:83:3d:45:62:54:69:93:a6:
ec:5b:2a:15:b0:e2:19:e7:55:98:7b:27:49:4b:c9:
ba:dc:a6:10:24:70:ad:94:7f:82:fe:42:eb:bb:84:
dc:11:0a:8c:20:f8:ba:80:2d:ff:07:3f:24:87:3e:
b6:44:b2:4c:87:18:54:c0:8e:e6:52:f6:76:3a:c7:
a2:1a:fa:0f:9f:46:3e:94:d0:41:e2:a4:5b:d2:be:
6a:d2:5a:0d:ae:df:79:39:28:fa:37:5a:60:ff:f3:
ad:08:01:88:05:d9:10:58:21:49:53:a1:16:b1:2f:
ba:12:97:71:bc:a5:86:61:da:34:c9:a5:94:bf:59:
22:6e:1d:28:1c:8a:35:bc:99:77:66:b6:2a:f4:aa:
ad:fa:cd:09:d6:7a:b1:41:25:45:dd:0b:f6:ee:b3:
36:1b:88:14:5d:f5:96:c8:2c:40:b1:06:d7:4e:ae:
b0:40:2b:70:85:3f:62:4b:ba:e7:d2:5c:6d:ac:1a:
ea:e2:12:4b:bd:04:00:1d:a6:b1:5e:6f:40:32:4c:
f3:bf:8e:60:56:60:17:e9:c0:b5:0a:14:ca:17:de:
77:63:31:d8:bf:96:c2:ec:4a:ad:d2:fd:08:4e:d4:
e3:05:66:d4:61:12:97:2d:d7:f5:b2:9d:28:e1:50:
2b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E0:3F:49:FA:27:70:96:EA:12:B6:7C:8F:D3:63:2F:18:F5:EB:FA
X509v3 Authority Key Identifier:
keyid:B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:46:71:7a:ad:a4:53:96:fc:40:bf:dc:8a:2a:7a:36:5b:26:
14:b3:98:6c:2e:e8:ea:8e:18:ba:05:1e:4f:87:30:18:38:1f:
d4:80:38:fc:d1:55:ec:ef:81:6e:45:cb:91:75:10:b8:14:37:
b8:c0:02:ba:aa:d6:4b:7e:bf:b4:1d:45:9c:4a:04:62:9d:52:
fe:e0:05:ce:b1:23:4c:73:2a:29:c3:50:ee:c7:a1:d4:23:c1:
b3:d8:82:58:e8:dc:0e:7f:b5:7b:f5:36:dc:70:fe:e7:76:31:
28:39:65:4c:84:d0:99:d8:83:a8:e0:d0:6f:69:a2:bf:27:8c:
0e:42:62:8b:d8:c6:bd:01:72:43:c0:e7:68:61:a7:11:26:87:
c8:1f:50:8c:65:5a:c4:10:8e:30:5b:d8:64:d1:8b:b9:fc:b0:
ab:7f:af:83:69:d0:7d:a3:38:42:4e:07:26:f1:7f:4b:d9:c0:
fe:a5:8f:6c:42:2e:c0:85:77:ed:51:5c:5d:85:8f:be:88:fe:
d3:76:44:68:7c:09:3e:a8:43:e6:10:40:32:58:a0:87:c0:58:
c9:3b:37:dc:b2:c3:e8:35:d0:0d:ed:3d:60:73:b6:03:18:f9:
7d:97:9f:9c:0b:8c:42:d1:49:55:58:c7:c3:bb:89:8b:ab:d5:
26:11:82:11
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEUyOTMxMTAvBgNVBAUTKEI0OTg1Nzc0OUI0MzFERjMyMzJGOEQ3QjBCODM5NUE3
MkZGRDE4NDkwHhcNMjUxMTAzMDMwNDA3WhcNMjUxMTEwMDMwNDA3WjAYMRYwFAYD
VQQDEw02OTA4MWJhNy1lZWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyGFdmy61gz1FYlRpk6bsWyoVsOIZ51WYeydJS8m63KYQJHCtlH+C/kLru4Tc
EQqMIPi6gC3/Bz8khz62RLJMhxhUwI7mUvZ2OseiGvoPn0Y+lNBB4qRb0r5q0loN
rt95OSj6N1pg//OtCAGIBdkQWCFJU6EWsS+6EpdxvKWGYdo0yaWUv1kibh0oHIo1
vJl3ZrYq9Kqt+s0J1nqxQSVF3Qv27rM2G4gUXfWWyCxAsQbXTq6wQCtwhT9iS7rn
0lxtrBrq4hJLvQQAHaaxXm9AMkzzv45gVmAX6cC1ChTKF953YzHYv5bC7Eqt0v0I
TtTjBWbUYRKXLdf1sp0o4VAr9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfgP0n6
J3CW6hK2fI/TYy8Y9ev6MB8GA1UdIwQYMBaAFLSYV3SbQx3zIy+NewuDlacv/RhJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTI5My8yODQxRDkyRTE3
REMxMUVFODg4MDRBNzFDNEY5QUUwMi90SmhYZEp0REhmTWpMNDE3QzRPVnB5XzlH
RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RKaFhkSnRESGZNakw0MTdDNE9WcHlfOUdFay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTI5My8yODQxRDkyRTE3REMxMUVFODg4MDRBNzFDNEY5QUUwMi90SmhYZEp0REhm
TWpMNDE3QzRPVnB5XzlHRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBrRnF6raRTlvxAv9yKKno2WyYUs5hsLujqjhi6BR5PhzAYOB/UgDj8
0VXs74FuRcuRdRC4FDe4wAK6qtZLfr+0HUWcSgRinVL+4AXOsSNMcyopw1Dux6HU
I8Gz2IJY6NwOf7V79TbccP7ndjEoOWVMhNCZ2IOo4NBvaaK/J4wOQmKL2Ma9AXJD
wOdoYacRJofIH1CMZVrEEI4wW9hk0Yu5/LCrf6+DadB9ozhCTgcm8X9L2cD+pY9s
Qi7AhXftUVxdhY++iP7TdkRofAk+qEPmEEAyWKCHwFjJOzfcssPoNdAN7T1gc7YD
GPl9l5+cC4xC0UlVWMfDu4mLq9UmEYIR
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:31 2025 by rpki-client