
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
File: bP1Wp36tnhWbyxjrbehic1CRtUo.mft (raw, json)
Hash identifier: SabSufWaoXx5UaxRnbj+1AQhv15ax86Eh2ScZwVqbDI=
Subject key identifier: 83:5C:72:2A:C0:F1:DD:B7:07:38:0C:B1:36:42:F2:8F:2B:0A:A2:6D
Authority key identifier: 6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A
Certificate issuer: /CN=A918E319/serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
Certificate serial: 19BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
Manifest number: 196B
Signing time: Sun 02 Nov 2025 16:26:42 +0000
Manifest this update: Sun 02 Nov 2025 16:26:42 +0000
Manifest next update: Sun 09 Nov 2025 16:26:42 +0000
Files and hashes: 1: bP1Wp36tnhWbyxjrbehic1CRtUo.crl (hash: z/MgdrCmpdRBSBOKT42Bx/0BMzF5UFj1mjTJuLk9Ij4=)
2: 7AF2C29C50C811F09EF54B31C4F9AE02.roa (hash: jG3cUbtm554H7AD3dhUJ+NzhtzlcaiTkqkxRj23wG2c=)
3: 682214D6505711F08AA6EA60C4F9AE02.roa (hash: GMifjOan9zjfGsumgJ0TL9VR/xphZ6U6tm6+SoHoHZc=)
4: 4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa (hash: dceLhAn5ElbChEaUwf/DaqfinbRbtnjApELgjG/plvw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl
rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 16:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6591 (0x19bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E319, serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
Validity
Not Before: Nov 2 16:26:42 2025 GMT
Not After : Nov 9 16:26:42 2025 GMT
Subject: CN=69078642-7f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:73:3e:91:9a:b6:f5:50:75:85:b2:67:23:c6:
41:a4:b7:ab:0a:51:e3:7c:a4:d8:27:5c:90:10:c6:
72:ce:cb:60:4d:42:14:1c:ec:5c:85:7a:2f:ba:cf:
e0:3d:9c:4b:95:0a:19:b4:21:a3:eb:46:23:05:3b:
b8:80:25:61:87:ad:d4:4a:4b:34:d9:9d:e3:83:d9:
9f:a8:0a:36:cb:4d:ea:16:44:83:b3:f9:69:f9:c0:
f6:1d:29:62:d2:c2:62:8b:7b:b5:ef:86:ab:c6:28:
cf:36:27:8c:5c:de:1f:73:f3:af:c5:10:27:79:2f:
d6:ea:d1:46:92:72:f1:0e:04:a4:ea:26:f2:ce:d4:
d3:68:29:53:f7:a9:47:f5:88:8a:68:f2:6a:bf:50:
dd:5c:7e:16:c7:55:c8:94:cd:13:09:63:a2:ca:52:
da:28:80:b3:e8:f5:42:e8:3b:66:47:a0:44:69:2f:
66:99:df:e7:c2:79:73:23:ac:69:f9:23:ac:e9:0f:
4a:1c:ba:3e:5d:c8:20:ec:ec:f2:9e:6d:b9:ce:cc:
34:d0:41:55:05:ec:e2:d2:8a:65:9b:83:6e:32:c4:
bb:0c:6a:8d:2c:79:af:e1:c3:00:dc:1b:e0:a6:0d:
f1:82:40:83:d8:ae:5e:04:3f:7d:21:38:62:fd:60:
e9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5C:72:2A:C0:F1:DD:B7:07:38:0C:B1:36:42:F2:8F:2B:0A:A2:6D
X509v3 Authority Key Identifier:
keyid:6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:02:b5:d7:2f:7d:ee:89:10:44:a5:72:19:58:ab:9f:d2:dc:
84:c1:1c:d0:8f:b6:f1:bb:56:7d:4b:ca:ad:e1:73:cb:78:70:
a6:d0:ab:b8:42:df:2b:81:6b:3c:f2:b5:5c:d9:a3:eb:c9:e6:
b5:d8:16:3e:ff:95:d1:b3:90:50:ec:1a:34:35:1a:4d:0e:eb:
23:5e:35:0a:03:27:83:a9:db:47:53:98:c4:3f:97:f8:f7:53:
5b:b9:f8:68:d6:f0:c8:f1:d9:9b:42:c3:58:8c:c8:7b:08:de:
17:27:87:bb:ea:c6:90:d1:4a:cc:f4:b9:3b:c4:d8:d6:08:c1:
a3:b8:1e:b3:95:32:b9:2b:46:63:4b:e0:cd:e3:90:4d:e8:f6:
15:8d:35:39:4d:65:1b:77:06:7e:3a:80:b2:ea:c5:84:58:8a:
84:d0:99:4c:92:47:ac:a2:14:0a:aa:5f:11:55:8e:f6:00:21:
2d:e1:f5:6c:65:f5:d3:b4:21:4a:25:03:b4:05:d7:9f:48:db:
ef:11:76:f1:2a:2b:29:5a:24:cd:47:de:8d:c7:ea:a2:5e:6b:
7d:b2:a7:a6:75:35:d3:4d:5e:33:0f:1f:e0:c5:93:bd:1b:01:
9e:90:aa:af:70:72:0c:12:45:e9:59:37:3a:e1:6d:47:dd:77:
fa:c6:34:b7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEUzMTkxMTAvBgNVBAUTKDZDRkQ1NkE3N0VBRDlFMTU5QkNCMThFQjZERTg2Mjcz
NTA5MUI1NEEwHhcNMjUxMTAyMTYyNjQyWhcNMjUxMTA5MTYyNjQyWjAYMRYwFAYD
VQQDEw02OTA3ODY0Mi03ZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlHM+kZq29VB1hbJnI8ZBpLerClHjfKTYJ1yQEMZyzstgTUIUHOxchXovus/g
PZxLlQoZtCGj60YjBTu4gCVhh63USks02Z3jg9mfqAo2y03qFkSDs/lp+cD2HSli
0sJii3u174arxijPNieMXN4fc/OvxRAneS/W6tFGknLxDgSk6ibyztTTaClT96lH
9YiKaPJqv1DdXH4Wx1XIlM0TCWOiylLaKICz6PVC6DtmR6BEaS9mmd/nwnlzI6xp
+SOs6Q9KHLo+Xcgg7Ozynm25zsw00EFVBezi0oplm4NuMsS7DGqNLHmv4cMA3Bvg
pg3xgkCD2K5eBD99IThi/WDp6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINccirA
8d23BzgMsTZC8o8rCqJtMB8GA1UdIwQYMBaAFGz9Vqd+rZ4Vm8sY623oYnNQkbVK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMxOS84NjhERDY1NjhD
MjYxMUU3QkMwNkM0NEVDNEY5QUUwMi9iUDFXcDM2dG5oV2J5eGpyYmVoaWMxQ1J0
VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JQMVdwMzZ0bmhXYnl4anJiZWhpYzFDUnRVby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTMxOS84NjhERDY1NjhDMjYxMUU3QkMwNkM0NEVDNEY5QUUwMi9iUDFXcDM2dG5o
V2J5eGpyYmVoaWMxQ1J0VW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB6ArXXL33uiRBEpXIZWKuf0tyEwRzQj7bxu1Z9S8qt4XPLeHCm0Ku4
Qt8rgWs88rVc2aPryea12BY+/5XRs5BQ7Bo0NRpNDusjXjUKAyeDqdtHU5jEP5f4
91Nbufho1vDI8dmbQsNYjMh7CN4XJ4e76saQ0UrM9Lk7xNjWCMGjuB6zlTK5K0Zj
S+DN45BN6PYVjTU5TWUbdwZ+OoCy6sWEWIqE0JlMkkesohQKql8RVY72ACEt4fVs
ZfXTtCFKJQO0BdefSNvvEXbxKispWiTNR96Nx+qiXmt9sqemdTXTTV4zDx/gxZO9
GwGekKqvcHIMEkXpWTc64W1H3Xf6xjS3
-----END CERTIFICATE-----
Generated at Sun Nov 2 23:53:44 2025 by rpki-client