
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
File: n0mgwprfTYMDB3M9LGCp2TEQogg.mft (raw, json)
Hash identifier: SuFDggV1SVCv7xKUALin2J2EZ2vXtk8T5sfVvxT3lyg=
Subject key identifier: E3:DD:4F:29:CE:A5:E7:9D:8C:BF:26:CF:36:7D:F1:A8:92:FE:79:8E
Authority key identifier: 9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08
Certificate issuer: /CN=A919B393/serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208
Certificate serial: 026B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
Manifest number: 0268
Signing time: Wed 05 Nov 2025 01:45:56 +0000
Manifest this update: Wed 05 Nov 2025 01:45:55 +0000
Manifest next update: Wed 12 Nov 2025 01:45:55 +0000
Files and hashes: 1: n0mgwprfTYMDB3M9LGCp2TEQogg.crl (hash: ARe33h8cNFaWFBqYYWmbA6IJ1fr8we7Uvqk02+mAlsA=)
2: 38F69014325B11ED8403A325C4F9AE02.roa (hash: xPxOBcWiHSTAw3zQ7FKJslNCxgd0Xv3rmMHCdbL8JBE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl
rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:45:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 619 (0x26b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B393, serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208
Validity
Not Before: Nov 5 01:45:55 2025 GMT
Not After : Nov 12 01:45:55 2025 GMT
Subject: CN=690aac54-e506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:6b:51:d8:06:95:e8:77:d0:a0:1e:7f:10:
73:4d:21:38:b6:81:2b:81:67:4d:96:2d:7c:e7:bc:
21:d9:9b:7b:c6:3c:f8:5f:1b:a6:6b:95:45:99:b7:
f1:bc:e6:fd:b7:e8:3d:4d:a4:03:8d:cb:96:21:d6:
70:fb:f3:cb:e2:5a:ab:e0:ed:d7:97:34:68:be:6d:
39:4c:6d:49:b2:65:76:a8:53:03:63:42:d1:83:37:
14:d9:e1:40:34:d9:5c:fa:d6:0b:d0:5a:8e:59:a5:
6b:02:5c:d6:62:64:bb:9f:4e:34:6f:b0:b0:c5:b3:
7f:2e:49:10:f5:54:7c:ac:9f:e4:44:01:21:4c:a2:
75:9f:4b:9a:43:36:ce:f0:af:9a:bf:06:ae:28:6e:
e5:f0:08:0a:98:53:04:92:71:96:c9:23:2b:b4:0b:
c0:6f:35:72:90:4f:33:b5:8a:69:f1:84:7d:cb:fe:
28:31:bb:85:6d:a5:35:7b:fa:28:d9:a8:25:75:7a:
25:3a:01:98:d6:7e:e7:bc:68:e0:ce:a6:6c:6d:52:
fa:8d:09:47:e4:a9:de:eb:74:77:60:13:87:73:0a:
c2:de:88:e5:73:8c:dd:ec:36:29:e9:db:f8:34:01:
6c:79:ab:27:07:ba:54:f9:f8:e7:92:5b:a7:91:28:
2e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DD:4F:29:CE:A5:E7:9D:8C:BF:26:CF:36:7D:F1:A8:92:FE:79:8E
X509v3 Authority Key Identifier:
keyid:9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:47:2d:f7:9a:83:0f:e4:07:35:87:80:9c:b3:27:3a:e9:fb:
10:ea:97:9f:41:59:47:74:59:c0:47:6b:07:d3:dd:92:e7:f7:
a7:82:a6:c8:37:3a:a9:68:b5:67:55:77:84:5e:d6:d8:d9:fd:
e9:e2:49:0c:32:e0:38:16:c5:91:a5:0a:60:b5:0e:73:de:3d:
33:1c:55:fc:a5:5d:00:70:d5:ef:39:ab:b3:39:93:1d:dc:ab:
0d:78:b6:35:f1:34:e6:65:75:00:60:f7:0e:39:ef:ed:61:c0:
91:6c:91:6f:1f:83:ac:aa:91:a1:b6:d4:b9:7b:31:5a:24:b2:
11:e1:1b:8e:cc:d5:8d:41:4e:d7:d0:df:0e:66:86:63:41:95:
a4:dc:6d:ab:26:13:23:09:25:a4:91:d0:e6:4a:63:85:c5:d3:
67:0d:ba:ac:20:1c:e1:c8:f3:a6:cb:46:07:20:dd:15:7d:39:
31:91:7e:5a:b5:51:c2:2d:ec:ef:e2:3d:65:0a:b7:ed:0b:91:
b6:f5:62:e5:b8:9e:49:63:94:64:4b:ba:df:66:23:9f:c7:7b:
ed:69:ca:d8:18:cb:05:ff:4e:1e:03:27:fd:87:5b:7d:56:5a:
86:63:9a:85:57:15:08:5a:e9:1c:e3:79:1c:0e:5d:23:0b:91:
21:3c:22:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:29:45 2025 by rpki-client