
$ rpki-client -vvf rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft
File: sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft (raw, json)
Hash identifier: vq63R01chNQrFwGbf1H/mldywYkpcHyqTCEG+FJX4eo=
Subject key identifier: DA:00:63:63:1F:EE:AB:B1:EC:AE:98:CE:CB:7B:4C:C0:15:A1:4E:32
Authority key identifier: B0:4B:7F:B2:0E:25:D6:D7:58:7F:26:FD:75:72:74:B9:D3:EE:3E:95
Certificate issuer: /CN=A919456E/serialNumber=B04B7FB20E25D6D7587F26FD757274B9D3EE3E95
Certificate serial: 0379
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft
Manifest number: 0375
Signing time: Wed 05 Nov 2025 00:58:07 +0000
Manifest this update: Wed 05 Nov 2025 00:58:06 +0000
Manifest next update: Wed 12 Nov 2025 00:58:06 +0000
Files and hashes: 1: sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl (hash: mGYCX1XHDyuhXfSHiEH0SsFxQ3ET1/XI/Brrl23gMHc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl
rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:58:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 889 (0x379)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919456E, serialNumber=B04B7FB20E25D6D7587F26FD757274B9D3EE3E95
Validity
Not Before: Nov 5 00:58:06 2025 GMT
Not After : Nov 12 00:58:06 2025 GMT
Subject: CN=690aa11f-44cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:81:c6:d2:36:44:4a:4f:0c:8f:51:4f:d4:
1a:be:9e:e2:5f:8b:f6:91:50:d6:10:9b:43:81:b1:
29:64:77:a3:f7:7a:c9:16:13:eb:45:79:35:37:16:
be:95:89:5e:2a:59:32:58:83:1a:15:e8:50:4a:96:
89:4e:00:1f:b1:95:ca:e6:ae:8d:ea:b5:2b:ec:53:
57:8c:66:df:aa:25:bd:cd:6b:27:1b:9e:88:a0:fd:
64:c4:ba:6f:31:e2:e0:de:b7:fa:c3:91:7f:bd:ed:
6d:97:e7:e0:1a:2c:c8:c2:9f:e8:48:3e:99:8f:c8:
70:2c:f4:b1:9b:a8:4c:e4:b6:36:99:7a:f0:e1:af:
07:ad:45:29:aa:26:b7:57:7c:f0:a8:04:72:3d:cd:
90:a8:c3:3f:ba:0a:cf:c9:66:23:16:1f:29:9c:23:
9d:d6:fc:f6:f4:4a:ce:1e:cc:4a:1c:af:0f:e6:1b:
ea:d4:81:c9:12:04:77:49:ae:f9:55:ca:38:09:95:
12:cf:04:bd:f0:03:fa:95:ce:c2:da:45:63:e7:49:
ac:d6:30:36:61:0c:7b:24:68:77:79:0a:0f:50:6d:
86:77:1a:09:71:67:ca:4e:ad:be:eb:e8:07:99:c9:
8e:79:58:0c:60:ac:1c:fa:22:12:51:e9:26:aa:9e:
b5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:00:63:63:1F:EE:AB:B1:EC:AE:98:CE:CB:7B:4C:C0:15:A1:4E:32
X509v3 Authority Key Identifier:
keyid:B0:4B:7F:B2:0E:25:D6:D7:58:7F:26:FD:75:72:74:B9:D3:EE:3E:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:90:26:2c:44:07:c7:85:92:98:01:5c:0e:f9:3c:19:4e:8d:
6f:8e:39:18:63:71:69:c6:38:17:c2:94:a8:29:6d:65:ff:6d:
5a:b8:e3:0e:79:d6:aa:99:6f:7e:33:5e:a6:d9:e9:48:24:5d:
e7:62:10:5a:1e:65:3a:84:53:1d:4b:4d:a4:5a:ab:db:7a:02:
4a:ac:8b:35:6e:8d:1f:42:e2:56:91:af:e8:43:79:1e:62:a6:
c8:a9:f3:25:7c:89:fd:e9:14:18:ba:c6:10:8c:a0:b4:b2:ad:
b5:39:1e:d1:16:71:94:cd:c2:77:6c:d3:6e:12:c6:e3:c4:6c:
53:4a:39:66:e7:c4:ff:77:46:98:37:6c:6b:4b:68:fe:a8:47:
a5:f1:d0:9b:4b:33:bb:ef:2a:15:7e:6a:5a:67:74:80:b3:f0:
a4:a3:ac:3f:7f:6e:33:4a:df:22:2b:a3:fa:92:1b:55:95:15:
05:0e:e3:c9:2b:64:25:5b:1e:43:49:75:ec:b1:e7:ff:60:30:
a0:0d:3a:50:46:36:db:db:89:cb:39:d1:f7:1e:67:36:e2:2f:
11:8d:42:0b:e9:02:1c:03:91:61:34:82:68:12:31:f5:52:d4:
27:d1:b8:8b:bb:29:05:ae:89:72:68:c3:15:44:e2:c4:58:ae:
e6:e3:62:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:23:30 2025 by rpki-client