
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
File: pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft (raw, json)
Hash identifier: L6tx8dVzRiftLvVRLVBE5ikVu+w5NNrI9JQmuHIaNo4=
Subject key identifier: 23:5E:F6:C3:8D:33:99:D1:62:81:BF:A3:25:C5:0A:1D:BF:51:4D:B7
Authority key identifier: A5:54:DF:3D:47:02:7F:FA:F7:CB:8A:16:6F:3E:0A:10:E3:17:78:67
Certificate issuer: /CN=A919AD11/serialNumber=A554DF3D47027FFAF7CB8A166F3E0A10E3177867
Certificate serial: F7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
Manifest number: F4
Signing time: Sun 19 Oct 2025 08:13:00 +0000
Manifest this update: Sun 19 Oct 2025 08:12:59 +0000
Manifest next update: Sun 26 Oct 2025 08:12:59 +0000
Files and hashes: 1: pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl (hash: GCnfTNHmh5BUEFPQURimzNUKWAHEZfmbmx6AREJUEGY=)
2: FB29FEA06C1F11EFA8C5694EC4F9AE02.roa (hash: lcZB3z1c/RDD2H75d40NX0zmlgKhDSF1Om3/hMjJ4tA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl
rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 08:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247 (0xf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AD11, serialNumber=A554DF3D47027FFAF7CB8A166F3E0A10E3177867
Validity
Not Before: Oct 19 08:12:59 2025 GMT
Not After : Oct 26 08:12:59 2025 GMT
Subject: CN=68f49d8c-27b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:c1:67:3e:be:3b:ab:35:6d:7e:bd:bb:db:96:
b1:1e:ce:ea:d8:29:08:1d:28:07:87:9c:aa:30:df:
f0:81:67:96:82:13:cd:2b:d7:c5:93:8b:f9:6b:4a:
d7:4f:01:94:1d:54:74:73:37:33:23:a1:30:69:44:
b6:82:79:ab:69:4b:9a:d5:60:a3:7a:62:e7:e3:be:
a9:fe:b8:00:19:89:8c:e7:52:ec:25:94:c4:2f:3e:
19:3d:c4:8c:21:0a:90:40:2c:a5:5b:1c:7b:28:98:
2a:00:31:f9:7a:43:00:91:fa:32:3f:47:67:89:86:
15:3a:3d:c5:3b:16:e6:a3:19:79:f0:6b:85:db:59:
a1:ac:0b:85:ea:a2:56:e8:cf:73:e1:98:28:3b:f2:
df:6e:6d:db:03:73:d2:ec:82:50:27:37:56:93:aa:
0b:0d:1c:2c:33:64:5d:6e:31:fd:2b:90:15:5b:31:
fe:da:3a:a5:60:9a:5b:80:c2:6c:8c:23:f9:99:93:
8a:a9:ae:3a:3d:b3:60:6b:1e:73:95:6a:f9:c9:65:
46:95:8c:d5:38:95:47:70:6c:47:b7:c9:8b:30:63:
d0:27:89:f8:ce:79:1f:81:17:66:2c:95:11:b0:d2:
21:32:06:a9:af:19:bb:18:ca:b6:b7:f6:66:13:66:
4c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5E:F6:C3:8D:33:99:D1:62:81:BF:A3:25:C5:0A:1D:BF:51:4D:B7
X509v3 Authority Key Identifier:
keyid:A5:54:DF:3D:47:02:7F:FA:F7:CB:8A:16:6F:3E:0A:10:E3:17:78:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:0b:4c:3e:f5:d8:84:27:02:70:65:d5:9a:69:65:f0:3b:03:
06:17:27:95:92:8a:e2:50:39:00:f8:9f:e2:55:0b:66:b3:c1:
41:e8:cd:e2:02:d6:58:9d:08:d1:c8:25:e6:b7:73:30:82:bf:
a3:7e:a1:bd:20:64:1c:b0:67:6a:d0:84:91:0f:47:c1:b9:45:
fa:8a:46:54:97:8f:23:93:01:6c:a2:d2:59:3f:1c:37:90:1d:
ea:e1:db:a9:03:ea:61:6e:19:41:f8:04:67:71:dd:f2:9b:d2:
87:c6:73:b7:84:39:48:a9:eb:8a:22:56:f5:11:9f:d7:cd:c1:
ed:cd:67:91:8f:1c:cc:c9:e8:31:fe:15:10:be:8a:8d:20:00:
10:6e:2c:0a:93:88:18:94:95:e6:7c:50:a4:27:ae:3f:20:e0:
a2:01:ce:e7:77:0a:2c:38:1a:d7:5b:a9:c7:c4:fd:2b:c1:40:
69:10:de:ef:cf:d5:a5:45:11:74:53:15:83:12:8c:8d:2c:6b:
98:07:8f:03:49:70:b5:2e:80:9e:24:50:d4:9b:60:fb:86:db:
98:f8:be:69:54:e2:ba:ed:e3:59:2a:a6:27:b2:9d:89:88:b3:
12:8a:8d:a6:76:98:ff:70:74:d0:3d:a2:a0:84:92:93:55:23:
6a:c5:99:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:44:25 2025 by rpki-client