
$ rpki-client -vvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
File: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft (raw, json)
Hash identifier: dwfGRYIYWe69p9EeMImBIf85WHLRtGAXcEkqUEbgu2w=
Subject key identifier: B6:9F:5C:1A:FE:92:84:93:D0:40:27:75:AE:31:35:34:50:11:AE:11
Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
Certificate issuer: /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Certificate serial: 01E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
Manifest number: 01CE
Signing time: Sun 19 Oct 2025 05:29:14 +0000
Manifest this update: Sun 19 Oct 2025 05:29:14 +0000
Manifest next update: Sun 26 Oct 2025 05:29:14 +0000
Files and hashes: 1: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl (hash: HYlH9v9cYvW/0eBG2rMl4LJmSPMjlAHQNwa87LVk6V4=)
2: C2C37E56153A11EF9E378A14C4F9AE02.roa (hash: yjaZ99oQRgWTeZ7xT1aV5GOpJg30nNhsZqbegZgAfi8=)
3: 9EF724BE2A4911EE81BCF50FC4F9AE02.roa (hash: p1hx0JAvoUZNCyNLxkGOZobDFPFcvMCBUo+ATzPH1eI=)
4: 309A0AEC073D11EE94A9410CC4F9AE02.roa (hash: +M2JBKtW+roKuZ/jpD/VQtCPQT7ODj2M3CQ12tFkNNA=)
5: 282CA82C023F11EEB716134FC4F9AE02.roa (hash: EZKiMh/sF6QW/YuQ9Jj6CurdVfECSg1QmQNC9QvCJbw=)
6: A90DA1C0C71611EE9465BF5EC4F9AE02.roa (hash: z2r7wPyO35kHvr0Idk1WJbUtXEqg34/eESnybLJ0qdg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 05:29:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 481 (0x1e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911710E, serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Validity
Not Before: Oct 19 05:29:14 2025 GMT
Not After : Oct 26 05:29:14 2025 GMT
Subject: CN=68f4772a-6136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a1:b9:9f:2c:c2:79:e8:04:02:17:a0:b5:15:
e5:cd:13:66:6d:8c:a6:50:22:b6:9f:53:57:cc:64:
b9:57:f2:02:33:6a:13:ad:6f:44:6b:3a:05:d2:5e:
22:a6:e6:2b:1b:64:f9:cd:de:23:54:49:25:34:d2:
7e:69:79:27:53:ed:46:b7:99:df:07:c6:8f:43:bf:
3e:0c:cf:66:c4:4a:f4:55:30:a3:3b:31:e0:77:bc:
d8:81:3c:ed:ac:d2:bd:42:14:a4:1f:52:f1:6b:22:
ad:1b:d6:a7:5e:66:84:ed:66:05:fb:35:9a:7f:ed:
1d:52:20:60:f1:e6:49:c5:ab:6e:85:0e:bb:af:8b:
af:87:9d:d8:4e:5b:a3:93:e8:34:ee:3d:99:9b:39:
79:93:01:70:2e:a0:35:7c:89:a4:fa:92:cd:14:c2:
75:bc:5d:c9:00:7b:1b:b9:6c:ce:80:af:98:fc:3d:
f4:36:30:80:ee:ef:89:9b:10:7d:ed:71:80:58:a4:
11:77:92:6b:b1:d5:d5:a2:60:fe:d2:c5:fe:29:55:
56:d5:9f:bb:fc:7a:32:30:d7:f3:b8:be:8e:5d:8e:
e2:03:a7:3c:5b:4f:8d:2b:26:bc:66:ac:49:f1:a2:
27:b8:58:3f:e8:65:66:91:e6:1e:77:cf:94:79:be:
9b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9F:5C:1A:FE:92:84:93:D0:40:27:75:AE:31:35:34:50:11:AE:11
X509v3 Authority Key Identifier:
keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:75:b4:28:32:7c:f6:3d:8b:8d:a0:b1:0a:5e:8d:16:2e:ba:
19:68:df:53:32:67:d9:02:fb:c0:cc:07:d4:93:0c:84:7c:36:
9e:de:3c:64:09:9b:08:1e:34:5c:be:35:13:e2:17:9e:09:df:
21:cc:3b:b5:14:86:b7:9f:5b:df:11:db:12:78:39:a8:e0:25:
6a:19:a0:d0:c0:e6:6a:6d:28:de:e7:06:9c:3f:13:01:67:71:
70:3c:f6:cf:2d:c8:8f:7e:b1:45:c4:e2:b4:04:89:ad:41:a5:
09:d1:c0:e8:5f:a1:dd:65:a9:21:35:8e:64:e3:1e:22:1c:f5:
d6:35:1d:be:d8:c9:f1:67:7a:b1:c0:fa:54:bc:99:fe:a4:5a:
8f:bb:62:05:ad:46:fb:a8:b9:3c:71:f9:bc:2f:fd:61:f2:10:
10:76:db:5e:18:38:99:88:10:8c:f0:a0:b9:61:c7:d4:59:3d:
d8:14:24:6e:b3:0c:13:3d:1b:74:35:f7:69:c5:86:b6:c8:c0:
71:f7:0b:cb:30:0f:1c:7d:f5:32:50:83:2c:0d:cf:db:2a:20:
02:44:c7:07:eb:5a:df:50:b4:c6:14:04:fb:3f:69:75:74:eb:
d9:64:21:97:b6:18:9b:3e:be:4d:4b:3d:96:2f:15:b0:b6:3a:
40:de:41:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:27:20 2025 by rpki-client