
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft
File: 7MBefFuSR4uMxDst35ql9slCnyE.mft (raw, json)
Hash identifier: HkQgHA0g2Utoun7Auay658S8MCAvbc1ufBwgJNlqs7E=
Subject key identifier: EB:52:AD:F5:08:8C:E5:64:3F:03:C7:B6:E6:4F:E8:F2:EE:DA:DA:7F
Authority key identifier: EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21
Certificate issuer: /CN=A9190D0D/serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21
Certificate serial: 0B44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft
Manifest number: 0B3B
Signing time: Sun 26 Oct 2025 19:44:35 +0000
Manifest this update: Sun 26 Oct 2025 19:44:34 +0000
Manifest next update: Sun 02 Nov 2025 19:44:34 +0000
Files and hashes: 1: 7MBefFuSR4uMxDst35ql9slCnyE.crl (hash: TotUKepil9z4WRo54mzWLLDaAjA5m1HOnKTKKSKgkiI=)
2: FB7E5618A05711F08606974BC4F9AE02.roa (hash: pPbrb2O/8aVVKZS9ZCfK/8lR2aBJ6SwFf4IQqxIGaoo=)
3: 2B601BDCA05811F0BE7DD54BC4F9AE02.roa (hash: rcoAf/XSP+JMK9+dzb4AOtxnapjuQECNQvM4hbbxzDo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl
rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Nov 2025 19:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2884 (0xb44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190D0D, serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21
Validity
Not Before: Oct 26 19:44:34 2025 GMT
Not After : Nov 2 19:44:34 2025 GMT
Subject: CN=68fe7a22-58b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:23:9e:00:06:f4:90:68:04:8b:a5:c8:b9:16:
17:c8:4f:e2:d5:67:09:35:f2:a1:8a:49:22:ae:31:
f1:e8:5a:b4:a1:e1:8b:be:7e:0f:29:01:de:2b:e0:
b6:a9:f0:c8:11:f2:53:04:e3:4c:c4:00:13:3f:b8:
d4:b8:1c:f9:48:c2:f3:6e:d8:dc:78:94:93:04:00:
6a:53:55:b9:4d:86:04:88:d8:e3:db:f3:4b:7b:13:
43:c6:4b:e1:39:a6:b4:c0:58:6f:80:b7:2b:af:47:
31:41:7e:19:d9:ed:f8:93:43:ea:0f:a9:c1:64:ef:
4f:38:13:51:a8:c8:c0:ad:8e:11:72:c9:1b:91:4e:
07:da:d0:31:e9:7e:53:bd:d0:4c:49:81:41:4f:b1:
29:5d:42:84:b2:5b:54:01:d6:06:8c:f0:d4:38:c7:
d9:fe:a4:f4:2d:c2:71:e8:a1:c6:ee:fe:dc:99:fb:
b5:6b:23:26:2e:68:03:0f:15:1a:bf:51:00:c9:f3:
a1:17:77:2d:a1:86:bd:94:e4:ad:5f:38:64:ae:a3:
ca:f8:ea:1e:aa:25:97:09:87:9f:54:83:36:3a:05:
51:98:be:e5:cd:7b:5e:6c:5b:6e:3d:9a:7a:01:c1:
97:c8:50:bb:06:a7:a1:ce:58:6e:ea:59:eb:c8:35:
45:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:52:AD:F5:08:8C:E5:64:3F:03:C7:B6:E6:4F:E8:F2:EE:DA:DA:7F
X509v3 Authority Key Identifier:
keyid:EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:39:a6:dc:91:9a:8b:51:2b:1b:71:2f:38:17:bf:e3:27:6b:
31:eb:71:52:6c:9c:88:18:b1:4e:15:32:05:94:3f:12:48:4c:
ae:80:99:99:1f:e9:67:8d:8a:15:f3:bd:f0:30:67:b1:af:2b:
78:f9:30:80:76:72:6a:bb:c5:95:87:90:10:da:41:fd:d6:c4:
7a:42:d5:23:9c:8c:bd:f7:77:e8:c5:a3:cb:d3:1a:dd:fb:75:
27:3e:ae:28:c5:e1:62:26:d4:19:5a:17:4d:6a:89:8a:0c:38:
96:6c:e5:2a:2d:50:cc:03:9d:1d:c7:52:0c:e8:64:f4:21:f6:
7f:64:f4:cc:5d:9e:b2:97:7b:c8:86:02:5a:7e:e9:cf:04:f8:
1b:a0:9a:57:7c:ba:09:45:d1:aa:59:55:c6:dc:90:8b:39:f5:
87:ca:de:69:5e:76:91:84:05:5e:a3:70:5b:6a:e7:5f:10:f4:
d4:a3:1c:09:56:98:98:a4:82:6a:f5:2d:94:1d:fd:b7:da:0c:
15:44:7c:e5:c6:3a:80:84:a2:75:e4:2d:b5:25:31:67:26:69:
23:ac:a4:50:d9:ff:da:9c:eb:aa:e2:3a:ef:1f:e8:79:f0:71:
64:65:cd:cc:a1:06:23:1f:1f:2a:4e:df:91:7a:0d:aa:3d:77:
32:76:c7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:20:57 2025 by rpki-client