
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/R8cEZQRKLhQBRUf6ebt6VP42674.mft
File: R8cEZQRKLhQBRUf6ebt6VP42674.mft (raw, json)
Hash identifier: AV395azlVJau+CT672dVLsF9JorlYJNc0RFUOVK0YAs=
Subject key identifier: D6:06:2D:C6:D8:22:B4:FC:37:E6:FB:AF:95:9A:36:22:44:88:CC:0D
Authority key identifier: 47:C7:04:65:04:4A:2E:14:01:45:47:FA:79:BB:7A:54:FE:36:EB:BE
Certificate issuer: /CN=A919B80A/serialNumber=47C70465044A2E14014547FA79BB7A54FE36EBBE
Certificate serial: 06EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8cEZQRKLhQBRUf6ebt6VP42674.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/R8cEZQRKLhQBRUf6ebt6VP42674.mft
Manifest number: 06E6
Signing time: Tue 04 Nov 2025 22:04:14 +0000
Manifest this update: Tue 04 Nov 2025 22:04:14 +0000
Manifest next update: Tue 11 Nov 2025 22:04:14 +0000
Files and hashes: 1: R8cEZQRKLhQBRUf6ebt6VP42674.crl (hash: 9lUV1ua40eGijSbC3eu4Qim8uEFJ8wW8FZUTCABpPTU=)
2: 858F093E6D6C11EBA3CFBD21C4F9AE02.roa (hash: bRtjBGYS/QbRw/iqaVSzb9XF2vNOvi7n10101duqilA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/R8cEZQRKLhQBRUf6ebt6VP42674.crl
rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/R8cEZQRKLhQBRUf6ebt6VP42674.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8cEZQRKLhQBRUf6ebt6VP42674.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:04:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1771 (0x6eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B80A, serialNumber=47C70465044A2E14014547FA79BB7A54FE36EBBE
Validity
Not Before: Nov 4 22:04:14 2025 GMT
Not After : Nov 11 22:04:14 2025 GMT
Subject: CN=690a785e-33cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:39:01:e9:f4:68:e2:ec:82:56:15:ea:4e:79:
b8:86:77:00:d4:8b:5f:ae:7d:28:99:ed:61:c8:da:
09:59:a9:cb:82:61:ed:f6:d7:c8:2c:ca:17:5a:27:
7e:1f:61:36:d5:39:c6:d7:d4:cd:56:fb:dd:35:f2:
83:ab:c5:c1:d4:7a:2e:a4:0c:9b:55:e8:8a:4d:40:
b3:41:f8:42:e2:44:ec:d5:a7:74:7d:d1:5d:fd:89:
48:44:05:09:0e:84:c6:5e:2b:50:fe:d0:3f:6d:17:
8d:4c:55:49:ca:ba:7e:dc:02:7a:fe:c7:2f:75:fb:
78:9f:33:23:26:49:53:3b:47:2a:df:f7:58:9f:04:
b3:61:93:c3:6d:9e:9c:f0:be:42:bf:a3:88:ee:cc:
a9:52:cb:e8:85:31:b2:6b:26:c5:a7:c4:61:33:90:
39:7e:bf:5f:4a:e9:31:6c:5c:da:d4:ca:a9:8f:fc:
cc:57:0e:cf:aa:af:80:74:92:11:e5:3b:ab:51:1f:
69:19:4a:b4:4c:69:63:ed:64:f9:e1:52:43:ef:f1:
6e:ad:72:68:8e:b1:92:ba:3f:be:77:4f:c3:ef:f4:
cf:ff:8f:d5:c7:57:87:70:1d:2b:de:86:06:2a:a4:
bf:45:18:65:06:84:66:4c:d3:40:e3:cf:17:ba:19:
7e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:06:2D:C6:D8:22:B4:FC:37:E6:FB:AF:95:9A:36:22:44:88:CC:0D
X509v3 Authority Key Identifier:
keyid:47:C7:04:65:04:4A:2E:14:01:45:47:FA:79:BB:7A:54:FE:36:EB:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/R8cEZQRKLhQBRUf6ebt6VP42674.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8cEZQRKLhQBRUf6ebt6VP42674.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/R8cEZQRKLhQBRUf6ebt6VP42674.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:00:ea:95:47:94:4f:f0:17:6a:5c:66:ff:48:ad:1b:34:b5:
91:04:f2:72:56:ee:54:92:b8:d1:07:7f:d3:02:e9:e1:d5:d6:
82:19:13:d7:22:8c:dc:8a:19:e2:5e:87:1f:4b:af:e4:60:ac:
1d:c4:92:1a:42:7c:bd:bf:c2:00:cd:c4:5e:37:84:31:7e:d4:
f3:a7:64:cf:d2:9a:b9:cf:85:f7:e7:c7:d1:ed:43:13:a7:f5:
bd:48:20:44:9b:86:52:7a:c7:b6:70:9d:ca:4b:11:78:a4:d0:
91:35:57:4a:36:44:5e:f2:22:5d:47:b1:58:34:e2:c3:93:25:
b4:2b:5e:d2:bb:11:ec:da:31:a4:0c:6d:43:55:88:ea:de:cc:
ef:e0:0f:9e:9e:14:c2:ea:79:e0:ae:fe:11:c4:e4:fe:cb:8e:
9f:39:fe:ce:f6:e3:d6:de:d5:41:6e:f4:e7:2b:c6:bd:0c:06:
72:9f:6a:9b:25:4e:65:15:e3:2f:2f:f0:43:dd:9b:95:6c:9d:
fe:15:a8:9e:a1:f5:43:72:4a:da:1d:29:a6:12:6c:3c:a7:e2:
bd:3a:4a:4f:f3:01:85:11:d1:02:8c:fc:29:50:1f:f1:6c:76:
97:4e:f8:78:74:c3:cd:db:30:73:62:e5:fe:1d:d0:70:4b:74:
b0:13:5d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:35:18 2025 by rpki-client