
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190587/99A40550621811F0AA22A026C4F9AE02/N8N6C_uGfmiXJdsgnzWRLk6IycU.mft
File: N8N6C_uGfmiXJdsgnzWRLk6IycU.mft (raw, json)
Hash identifier: fnvmVSEpceJYyusXUfB8BHi3Mn0UkniGL+Od6d9ERMg=
Subject key identifier: D6:55:07:8F:47:98:D7:B1:BA:D3:70:F5:16:97:8E:6F:9B:B8:98:1E
Authority key identifier: 37:C3:7A:0B:FB:86:7E:68:97:25:DB:20:9F:35:91:2E:4E:88:C9:C5
Certificate issuer: /CN=A9190587/serialNumber=37C37A0BFB867E689725DB209F35912E4E88C9C5
Certificate serial: 3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N8N6C_uGfmiXJdsgnzWRLk6IycU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190587/99A40550621811F0AA22A026C4F9AE02/N8N6C_uGfmiXJdsgnzWRLk6IycU.mft
Manifest number: 3A
Signing time: Mon 03 Nov 2025 07:31:51 +0000
Manifest this update: Mon 03 Nov 2025 07:31:50 +0000
Manifest next update: Mon 10 Nov 2025 07:31:50 +0000
Files and hashes: 1: N8N6C_uGfmiXJdsgnzWRLk6IycU.crl (hash: RK0LD8jqbRO9u0wVnPIAba8hndvUOxpVRSsGKRoGdGA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190587/99A40550621811F0AA22A026C4F9AE02/N8N6C_uGfmiXJdsgnzWRLk6IycU.crl
rsync://rpki.apnic.net/member_repository/A9190587/99A40550621811F0AA22A026C4F9AE02/N8N6C_uGfmiXJdsgnzWRLk6IycU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N8N6C_uGfmiXJdsgnzWRLk6IycU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 07:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190587, serialNumber=37C37A0BFB867E689725DB209F35912E4E88C9C5
Validity
Not Before: Nov 3 07:31:50 2025 GMT
Not After : Nov 10 07:31:50 2025 GMT
Subject: CN=69085a67-1c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e6:13:8d:9a:da:aa:74:1e:cd:92:fc:88:b6:
3c:66:37:00:fc:0f:c3:0f:fe:14:8e:28:ed:fd:bd:
5d:25:a7:85:e9:62:25:00:8d:23:8e:ef:f0:80:cb:
db:a6:a9:0c:41:19:e1:d9:a7:b4:53:3d:cf:a2:2c:
fe:f4:9c:b2:ae:6b:10:12:7a:78:d0:d5:99:16:09:
e3:54:0e:63:fc:e7:68:d0:7e:03:52:9d:33:69:7f:
84:d1:2e:29:01:2b:0c:7e:86:02:34:6d:1e:6b:c0:
cf:27:23:2b:3c:d0:8d:6d:01:bf:a5:84:52:ff:f7:
c9:ae:f2:d4:2a:48:ef:05:73:a0:d0:d3:2d:62:9b:
bf:56:9d:9f:ae:7d:38:d5:30:0c:6f:26:35:33:51:
c1:0d:fd:4c:c1:7a:d3:c8:67:77:aa:e2:de:dc:eb:
22:21:6a:7e:31:40:99:61:59:d8:52:0a:96:16:42:
78:1c:11:b7:a0:a3:a4:c6:bb:9f:e6:00:a0:5a:c3:
b7:98:d5:3d:15:24:d9:e0:82:fa:e8:01:3a:7b:63:
ba:d8:aa:f7:fd:67:30:02:91:3c:e6:74:bf:f5:23:
4f:5c:c4:74:b2:4e:88:c0:f2:65:37:da:2a:f3:a4:
3e:d7:14:49:93:fb:47:94:77:58:d4:df:08:b4:7a:
dc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:55:07:8F:47:98:D7:B1:BA:D3:70:F5:16:97:8E:6F:9B:B8:98:1E
X509v3 Authority Key Identifier:
keyid:37:C3:7A:0B:FB:86:7E:68:97:25:DB:20:9F:35:91:2E:4E:88:C9:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190587/99A40550621811F0AA22A026C4F9AE02/N8N6C_uGfmiXJdsgnzWRLk6IycU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N8N6C_uGfmiXJdsgnzWRLk6IycU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190587/99A40550621811F0AA22A026C4F9AE02/N8N6C_uGfmiXJdsgnzWRLk6IycU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:ca:6c:ad:6d:70:e0:cf:75:b1:68:83:ca:40:c9:c8:cd:75:
dd:45:3f:2d:12:4c:0b:64:e1:e6:3b:41:b8:b3:b6:86:a7:02:
07:a8:83:03:44:01:6b:50:7a:eb:17:b7:38:ff:60:b4:f9:dd:
15:e7:92:29:a6:30:79:4e:88:70:25:a3:e2:89:1c:bd:4a:9d:
1b:75:e7:53:8b:95:de:ad:ba:77:ed:90:d2:61:a1:4c:c6:2b:
c0:50:e2:77:a1:bc:77:f4:a2:4a:5c:0d:37:f8:3f:46:cb:02:
15:74:3a:91:07:fc:92:9e:b9:78:cd:9a:98:81:47:aa:7d:86:
44:a4:57:3f:c0:68:19:c6:fa:5f:a4:aa:d5:c5:e6:55:95:5a:
f6:b8:8c:86:9b:b0:03:c2:38:74:ef:ec:4e:2f:a9:0d:2a:7e:
8e:1d:55:6e:8c:38:03:b6:7d:8e:bd:bf:38:9b:43:f1:bf:8d:
b4:b3:d7:5e:77:85:a3:23:dd:eb:44:62:dd:cc:1c:b9:63:6d:
39:e7:cb:8b:e8:3d:51:a9:a3:de:42:78:a5:87:56:72:7c:e7:
18:76:cb:8f:f5:ec:b5:31:83:c8:e7:96:c1:41:91:45:de:ae:
80:ef:f6:45:65:a9:9e:69:84:59:fa:ca:ad:f0:ed:61:86:8f:
e7:22:7e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:09:17 2025 by rpki-client