
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft
File: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft (raw, json)
Hash identifier: 1794Q4jMvadrjsOWIw1MEwp5pz1QyaKr4B8eENyoZ4w=
Subject key identifier: 40:95:5A:77:62:6D:7B:EF:F0:88:D4:09:7B:29:A4:7A:EC:C6:F6:94
Authority key identifier: ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC
Certificate issuer: /CN=A91A02D8/serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC
Certificate serial: 0110
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft
Manifest number: 0109
Signing time: Mon 03 Nov 2025 05:01:34 +0000
Manifest this update: Mon 03 Nov 2025 05:01:34 +0000
Manifest next update: Mon 10 Nov 2025 05:01:34 +0000
Files and hashes: 1: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl (hash: B1LOJ1P8rxFh4CdOksrRuOzSeqRMFFx6qo8Ua/uSTgI=)
2: 86F9CBCC2AB711EF996EC819C4F9AE02.roa (hash: YJwOvl48MytuGc6I1DEuIiMXD3Gk+mKKkditJ1faO0o=)
3: 2C7C9DD2258E11F0B42E1529C4F9AE02.roa (hash: KCTQ3tbaoeUAbY8WbJ6K6Z4PRHlUfgdv71MIHaYTETs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl
rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 05:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A02D8, serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC
Validity
Not Before: Nov 3 05:01:34 2025 GMT
Not After : Nov 10 05:01:34 2025 GMT
Subject: CN=6908372e-6229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fd:c7:1e:29:1c:4e:03:5e:39:be:93:a2:d1:
c1:3a:82:c5:e8:12:fb:01:19:55:4e:06:30:10:b3:
b2:34:de:6f:54:a0:b3:f2:ee:e1:5b:16:52:f6:a4:
94:4e:d0:5c:50:4e:2e:6a:cd:77:2f:45:2f:4a:20:
09:c3:fe:b4:83:b6:33:7e:64:d6:6f:12:54:ad:35:
28:5d:a8:da:f8:25:37:da:93:b7:4c:0a:ce:c8:c2:
d0:40:30:4b:b9:59:a0:73:e1:6b:85:fb:59:d5:96:
fa:fc:a5:31:05:c4:0c:1e:b6:17:76:66:6d:87:4e:
09:b9:f1:26:90:60:c4:42:40:54:03:78:7b:bc:ba:
aa:4a:ad:4c:d7:6d:25:6a:a7:e8:58:cc:c7:fd:3d:
fa:b0:de:c4:88:6c:7e:3f:ba:b2:fa:98:04:cc:9a:
c7:42:cc:b4:85:4e:5f:47:1a:ea:d5:d3:b6:6e:32:
d2:27:fb:2e:fa:a6:f1:6f:b5:81:87:45:54:95:3d:
dd:90:81:3a:01:01:d1:ad:d4:a1:04:15:6b:61:e9:
c9:bf:6b:59:5a:25:b4:a1:42:05:ff:6b:a1:71:be:
af:98:0a:03:c2:18:49:61:2d:fc:c3:e5:39:b9:be:
6a:3b:f4:e0:4b:f6:42:11:61:99:45:54:17:0c:ce:
16:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:95:5A:77:62:6D:7B:EF:F0:88:D4:09:7B:29:A4:7A:EC:C6:F6:94
X509v3 Authority Key Identifier:
keyid:ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b3:6d:80:a3:35:9c:61:2a:57:38:94:44:f8:af:63:34:d4:
11:ea:8f:89:5d:88:7e:79:dd:7b:8e:35:d2:81:86:39:59:85:
94:0a:fc:e9:c8:95:45:71:3a:c3:4c:ba:e4:0c:3c:1a:af:01:
56:d8:6a:b0:e3:40:d9:65:d7:08:14:47:bd:04:86:2b:c5:2e:
24:ab:30:66:1d:e0:80:e2:14:f1:c1:7d:8c:42:4c:3c:58:c8:
ea:f1:9c:2d:ca:ac:34:61:7e:4d:5f:41:1b:f0:19:7c:f2:40:
4a:46:49:b1:dd:86:bc:db:69:d2:11:ae:e5:30:f1:f0:c7:49:
a8:21:42:32:07:66:92:06:e7:8b:b0:a8:20:8d:e4:19:48:e3:
36:6e:61:5a:9b:dc:21:f2:4a:44:ec:18:2c:71:4a:21:dc:e3:
07:08:68:2e:0a:96:c2:7a:52:22:a7:a7:40:81:bd:e2:d0:1d:
36:cc:fb:bc:c3:8c:88:28:a9:10:98:4d:60:d8:e1:b1:88:71:
ee:c6:f3:d3:3e:7d:cb:59:bc:88:31:38:0d:18:f8:8d:a7:83:
70:4a:20:55:ed:7b:8d:3e:53:81:4c:83:4a:b8:35:16:b6:27:
90:e5:9d:b8:f5:73:9a:59:a9:1f:40:9c:c2:5c:df:c8:64:7f:
3a:c7:3d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:26:17 2025 by rpki-client