
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
File: N0X7n36iweJS0pvv2GphV3YNiMA.mft (raw, json)
Hash identifier: T0r+9QJ00faV375owo5QSI47ucag5xOTo3awbFLjegk=
Subject key identifier: 27:BC:22:8A:04:3E:52:40:3D:5C:C8:0F:8B:32:C1:E5:D7:70:FB:DD
Authority key identifier: 37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0
Certificate issuer: /CN=A91EEAD3/serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0
Certificate serial: 0112
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
Manifest number: 010F
Signing time: Wed 05 Nov 2025 05:04:49 +0000
Manifest this update: Wed 05 Nov 2025 05:04:49 +0000
Manifest next update: Wed 12 Nov 2025 05:04:49 +0000
Files and hashes: 1: N0X7n36iweJS0pvv2GphV3YNiMA.crl (hash: cR3jee6wmqiZZcY+MQbqapn+neqzQrzzXqR4NJib5mQ=)
2: E989DE0C1E2E11EFB8D12A2BC4F9AE02.roa (hash: PkN1Jtt374CIHLZsHPqXl9liocYOPeAQiQHQB34mvOQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl
rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEAD3, serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0
Validity
Not Before: Nov 5 05:04:49 2025 GMT
Not After : Nov 12 05:04:49 2025 GMT
Subject: CN=690adaf1-c510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:73:b3:25:4e:f9:0e:15:c1:e3:a9:d1:81:85:
54:31:c9:2b:93:e6:44:53:78:66:6f:44:42:06:29:
c3:fd:0e:bd:91:6b:a2:a9:de:e4:5b:42:31:2a:5f:
e6:77:44:39:3b:fc:8b:d0:1b:70:0c:52:3f:20:1b:
ba:6d:bc:fe:9b:a7:61:d1:3f:20:fb:8c:18:3d:a2:
f7:a5:eb:d4:c8:86:25:a7:7a:3b:76:f7:9d:66:1b:
74:1b:67:c6:74:c8:02:60:89:24:86:e5:bd:33:7a:
65:ca:89:6e:cd:4e:9b:4b:83:9a:fc:6f:a1:2f:6b:
72:94:27:0c:88:64:35:f2:16:fa:2b:3b:26:cf:d4:
7f:2a:22:2c:71:c0:cf:c2:bb:0b:9f:92:40:01:71:
b0:d4:2f:13:33:b4:f1:3a:42:ad:4d:d0:d3:23:a1:
f1:9d:55:ae:68:2e:56:82:47:19:3d:54:7b:50:8e:
2c:d8:89:a9:e0:14:23:33:b8:6c:b5:f6:d3:d8:18:
97:c4:d5:91:f8:49:37:49:24:4f:41:fa:4e:44:f9:
70:ce:4f:4e:68:2d:e8:57:90:cf:5a:b4:e9:78:d5:
00:33:1f:9d:67:f1:0d:32:9a:82:6e:f3:3e:bb:43:
c2:40:84:d4:2a:1d:de:8c:41:72:6c:aa:12:99:67:
12:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BC:22:8A:04:3E:52:40:3D:5C:C8:0F:8B:32:C1:E5:D7:70:FB:DD
X509v3 Authority Key Identifier:
keyid:37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:56:d1:8e:bb:f8:f7:e8:4e:d5:d6:ac:ad:9d:14:8e:78:ec:
b4:5e:f0:d8:a9:60:97:95:26:9b:64:71:35:e0:01:ac:a4:01:
38:c8:2b:aa:1c:03:c8:7e:1f:2c:19:59:c5:cc:0f:ba:05:45:
f8:5c:d2:53:bd:c8:5b:43:83:da:2c:83:d5:c1:62:be:f2:28:
76:49:0e:f8:59:5c:e8:ac:d6:df:1b:36:de:90:20:4b:f4:c7:
e1:24:89:be:1f:c9:43:20:1c:74:92:f1:80:21:15:b7:fe:35:
de:e8:fd:cd:47:50:3a:5b:f0:05:3e:d2:ff:d2:c0:e7:5f:79:
4d:02:ae:03:62:e6:7b:5b:1a:d6:0b:d2:f9:4f:30:ec:18:5c:
0d:f0:05:c1:ec:a1:78:2e:eb:bb:9c:91:68:70:1c:ab:55:84:
90:55:86:b7:86:ce:5d:94:5c:ff:4e:20:f8:c0:45:2e:71:83:
59:4f:8b:17:56:70:54:9b:1e:e8:f1:ed:2e:81:32:33:ee:12:
2a:1a:d8:89:82:af:40:78:52:da:2f:c3:6c:c4:a9:bd:92:1f:
6e:e7:74:02:43:aa:0f:0c:a0:2b:65:5e:c8:80:c0:90:41:2b:
20:4c:3d:fe:4e:38:7a:6a:c8:33:84:96:66:af:d7:29:f1:d4:
4c:2a:e8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:26:22 2025 by rpki-client