
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft
File: sZKtRE3h8t51vroe79Ei7s99d8w.mft (raw, json)
Hash identifier: hRhq6UPBe9d4K2ZQIVwEZ4XipSn9fMBUK1umcQlGac0=
Subject key identifier: 69:50:55:8E:2F:60:88:4F:92:9F:6C:98:35:9B:D9:73:CA:43:97:15
Authority key identifier: B1:92:AD:44:4D:E1:F2:DE:75:BE:BA:1E:EF:D1:22:EE:CF:7D:77:CC
Certificate issuer: /CN=A913DEDF/serialNumber=B192AD444DE1F2DE75BEBA1EEFD122EECF7D77CC
Certificate serial: 01AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft
Manifest number: 01A9
Signing time: Sun 19 Oct 2025 05:47:27 +0000
Manifest this update: Sun 19 Oct 2025 05:47:26 +0000
Manifest next update: Sun 26 Oct 2025 05:47:26 +0000
Files and hashes: 1: sZKtRE3h8t51vroe79Ei7s99d8w.crl (hash: vUnlM/pSyjmeT8aQU+wlyIAE9T6x5DB7purJorZj35Y=)
2: DC5F1826D1BD11EF8CC80268C4F9AE02.roa (hash: VV3QbY98T8cb80NX/RFpfxfPD5C9MXZ3lJNc+A+FSOc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.crl
rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 05:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431 (0x1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DEDF, serialNumber=B192AD444DE1F2DE75BEBA1EEFD122EECF7D77CC
Validity
Not Before: Oct 19 05:47:26 2025 GMT
Not After : Oct 26 05:47:26 2025 GMT
Subject: CN=68f47b6e-b312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:53:1d:53:80:8a:8c:ad:c1:61:f3:ed:cc:34:
bf:f0:e6:ec:fc:e1:4e:17:83:57:0c:04:02:e5:00:
61:ef:23:f6:64:99:2f:be:23:c6:df:ff:01:1f:39:
58:8e:7b:2d:11:df:36:dd:9b:93:03:a3:8b:77:56:
94:31:4e:61:d1:c6:99:4a:30:f8:61:bc:f3:d2:98:
07:a7:47:72:c0:68:98:8e:fc:92:84:35:be:bf:3f:
50:27:2a:3e:ea:4e:93:4c:31:a2:47:b6:70:15:10:
6a:03:3d:40:0b:f2:18:4b:d5:51:4c:9a:79:46:e0:
5f:43:eb:1c:45:2b:8e:ad:ac:8d:03:08:25:b9:1e:
b9:ed:e0:9d:70:a6:be:9e:c5:b3:58:a0:ab:0a:5a:
6f:cf:73:c3:58:27:64:9d:14:b7:0f:04:ed:8a:7f:
8c:83:f1:55:a8:49:8d:5e:ca:1b:c6:d2:bf:83:3d:
26:44:70:af:15:5d:fa:80:1f:7b:c9:3f:b8:9c:ad:
30:e3:ef:ed:67:9a:3a:30:0b:d9:71:0f:c2:98:fc:
8a:5c:f6:a0:fb:c3:ac:17:6e:0f:cc:c2:19:b8:e6:
3c:5e:d0:c7:17:72:97:0d:7a:09:ba:f8:a5:cf:7b:
49:9f:cc:ae:7b:04:65:91:53:ea:a9:5c:f5:f7:f2:
99:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:50:55:8E:2F:60:88:4F:92:9F:6C:98:35:9B:D9:73:CA:43:97:15
X509v3 Authority Key Identifier:
keyid:B1:92:AD:44:4D:E1:F2:DE:75:BE:BA:1E:EF:D1:22:EE:CF:7D:77:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e6:18:73:a3:8a:05:4f:cc:dc:08:72:a3:54:a4:01:1d:8a:
14:70:6b:24:32:93:c4:84:c4:df:b3:b4:1e:b6:70:e7:85:c3:
9e:b2:43:31:2f:47:67:d3:75:40:af:dc:b2:34:e8:ac:f6:16:
e7:cf:f7:ac:59:c7:1e:9a:7e:3b:d0:f4:75:cf:05:a4:a2:94:
5d:ec:f4:b3:91:e5:a2:56:ba:eb:b8:f1:47:be:6b:21:ea:e5:
fe:18:c7:3d:14:28:80:64:dc:98:03:c8:ab:7d:15:53:27:2f:
90:79:b4:83:53:ca:11:33:7b:33:f3:53:68:b8:be:1e:ae:3b:
ee:6b:17:9b:7e:e5:79:70:2c:79:2f:16:27:8f:a9:18:33:ac:
55:5f:c9:83:dd:84:4b:14:ee:71:fa:04:e6:65:dc:85:1e:63:
f7:ef:7f:f3:bf:4e:f0:5a:00:f4:eb:64:4e:7e:59:69:15:61:
04:0f:4b:fe:6a:2e:7e:cf:61:8f:ac:f1:61:27:35:cb:dd:75:
99:bf:6b:f3:ea:2a:4c:51:4d:7f:df:e2:38:43:a1:7a:f0:54:
99:43:a1:82:0c:d4:f3:ec:88:50:93:2d:6a:8a:c3:44:39:d5:
10:65:3f:46:84:27:6d:fd:f6:19:13:2e:ed:39:5e:a1:0f:34:
5a:e9:e5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:12:51 2025 by rpki-client