
$ rpki-client -vvf krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
File: DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft (raw, json)
Hash identifier: OGP0Hd80LERWJUaAxmTmA4RZ7eD9BLTTvOh9JC54ERU=
Subject key identifier: 7B:62:0A:91:2C:36:92:9F:B7:C6:88:C1:15:AD:D6:EB:3B:65:D9:42
Authority key identifier: DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C
Certificate issuer: /CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C
Certificate serial: 7D778B9869478959C27008B514B037F58461CAB9
Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer
Subject info access: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
Manifest number: A2
Signing time: Thu 16 Apr 2026 22:11:47 +0000
Manifest this update: Thu 16 Apr 2026 22:06:47 +0000
Manifest next update: Fri 17 Apr 2026 23:12:47 +0000
Files and hashes: 1: AS24381.asa (hash: 1boloodfS0nsEQoFQKonidrDaGC7VyTJt9gACgpRBfs=)
2: 323430313a323036303a623030333a3a2f34382d3438203d3e203234333831.roa (hash: J0di9kPzuSxqtVKjyk3HKPng7QlOXjQ5p66cPtKaTQg=)
3: DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl (hash: 6M96LlldBUwpEWDdvac+Ueoav3oHiEbAxVxKGHs0Ub8=)
4: 323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa (hash: VmIkUnZdOEjdRj9sOfiNi5GekVaoRBas6LxAq9Y6qTU=)
5: 323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa (hash: xLbTWGSR0HvTnUdYp2nr/La6L8Rr5k/ezhkiW+Q3tmM=)
6: 323430313a323036303a623030323a3a2f34382d3438203d3e203234333831.roa (hash: lXc0eV4FfLxr7QyLKNsbJLXUNMB04fs7kpQDovC34FM=)
Validation: OK
Signature path: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl
rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 23:12:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:77:8b:98:69:47:89:59:c2:70:08:b5:14:b0:37:f5:84:61:ca:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C
Validity
Not Before: Apr 16 22:06:47 2026 GMT
Not After : Apr 17 23:12:47 2026 GMT
Subject: CN=7B620A912C36929FB7C688C115ADD6EB3B65D942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:83:4b:bf:b9:4d:13:14:84:71:e4:54:52:53:
05:7a:ef:d5:56:7f:43:a4:53:50:c5:23:25:6f:1d:
b9:e2:fd:d1:c5:91:94:d5:f8:a3:a2:48:88:9a:3c:
00:42:12:7f:3d:51:c8:ea:45:b2:b1:95:9b:71:07:
db:6a:7c:95:3b:b1:22:85:29:e9:a5:9e:63:52:d5:
52:30:6e:f2:08:1d:2b:22:3e:ef:d7:46:5d:5e:a0:
2b:a1:08:11:67:63:46:45:57:c8:b2:af:72:ff:8f:
f3:97:19:e9:68:73:b7:8e:b5:cb:55:92:94:15:0d:
1c:4c:fe:d7:c1:8e:85:ab:59:1b:01:3b:04:86:74:
0b:2d:1f:b7:0d:b0:50:b6:fe:ab:49:ef:57:8d:6c:
88:8f:20:c7:0b:59:73:c6:23:02:34:e3:3a:62:c0:
b7:99:49:95:3d:45:0b:8c:27:9c:ee:30:15:1d:8a:
97:b9:d4:91:e0:ef:5b:7d:77:98:7f:ee:f6:18:bd:
64:2e:48:53:0f:2c:fd:8f:ed:a8:77:f3:6e:6a:25:
76:9a:42:28:d0:ed:e6:b6:cb:bf:59:0c:1f:6f:72:
8f:34:97:b2:18:b9:bb:41:27:6f:d2:c3:04:b4:75:
eb:1b:a6:49:16:b2:cd:b3:aa:30:60:5a:82:b8:ec:
b9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:62:0A:91:2C:36:92:9F:B7:C6:88:C1:15:AD:D6:EB:3B:65:D9:42
X509v3 Authority Key Identifier:
keyid:DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer
Subject Information Access:
Signed Object - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3a:38:40:fb:c3:8d:64:d1:fc:e6:60:c8:35:4d:b2:10:e3:
43:f4:06:fc:e1:06:79:61:b9:96:37:27:4c:34:49:c7:1b:89:
c0:5b:99:10:9f:52:59:ee:a2:3a:ca:31:6d:63:bf:7b:47:c1:
44:fc:1c:5f:43:a2:17:eb:2c:08:ea:38:97:40:ed:5a:37:78:
a3:09:02:ac:33:bd:d1:0e:71:bb:bc:ac:a8:4f:0b:c0:bd:81:
35:0f:19:8a:20:a8:7e:12:1f:c3:71:02:0f:2e:19:31:a2:7e:
d9:48:ea:19:c1:f0:b1:35:71:b9:fa:7c:96:c4:e2:24:4e:93:
36:f1:bd:c2:c9:ff:23:28:9f:0a:f3:c9:7e:20:df:d4:93:d8:
da:68:10:f6:54:1d:9b:a4:f3:97:c5:e8:46:a7:94:8d:67:d0:
53:e2:bd:2c:06:13:1e:f6:8c:55:8c:64:33:e8:44:35:a9:3c:
e3:08:f7:67:6d:56:4e:36:7f:55:c6:0f:ec:df:0f:65:c2:21:
d5:84:68:fb:27:b4:c2:f4:c4:83:30:7c:cb:b9:97:03:4b:bd:
60:77:db:17:b2:8e:44:cb:2b:42:d1:32:7e:33:10:39:7d:ea:
77:0c:3b:5a:16:b3:82:79:c8:3c:da:12:61:32:16:4e:41:d0:
86:ca:c3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:54:59 2026 by rpki-client