
$ rpki-client -vvf krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
File: DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft (raw, json)
Hash identifier: 7EGYK7UUuyPJfYtw3DBvC0po2lIUKeLJBlJHNbbzLl4=
Subject key identifier: A9:2A:4F:D3:2D:87:E9:4B:80:63:C6:E7:7E:18:91:50:71:08:32:02
Authority key identifier: DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C
Certificate issuer: /CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C
Certificate serial: 676F85A4A8681A545F8A2088D5431247F6F6E12A
Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer
Subject info access: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
Manifest number: 64
Signing time: Sun 01 Mar 2026 10:51:47 +0000
Manifest this update: Sun 01 Mar 2026 10:46:47 +0000
Manifest next update: Mon 02 Mar 2026 14:37:47 +0000
Files and hashes: 1: 323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa (hash: xLbTWGSR0HvTnUdYp2nr/La6L8Rr5k/ezhkiW+Q3tmM=)
2: DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl (hash: Ok8Y6pXTWb43ZPLKXt+VJazuYtGVG7abjqaVu9cemjk=)
3: 323430313a323036303a623030323a3a2f34382d3438203d3e203234333831.roa (hash: lXc0eV4FfLxr7QyLKNsbJLXUNMB04fs7kpQDovC34FM=)
4: 323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa (hash: VmIkUnZdOEjdRj9sOfiNi5GekVaoRBas6LxAq9Y6qTU=)
5: AS24381.asa (hash: 1boloodfS0nsEQoFQKonidrDaGC7VyTJt9gACgpRBfs=)
6: 323430313a323036303a623030333a3a2f34382d3438203d3e203234333831.roa (hash: J0di9kPzuSxqtVKjyk3HKPng7QlOXjQ5p66cPtKaTQg=)
Validation: OK
Signature path: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl
rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 04:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:6f:85:a4:a8:68:1a:54:5f:8a:20:88:d5:43:12:47:f6:f6:e1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C
Validity
Not Before: Mar 1 10:46:47 2026 GMT
Not After : Mar 2 14:37:47 2026 GMT
Subject: CN=A92A4FD32D87E94B8063C6E77E18915071083202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a8:16:56:11:6b:52:9d:a3:e0:9f:76:40:de:
e7:63:47:a3:ba:de:14:fa:5c:ed:ac:3d:38:f4:d1:
09:97:18:8e:2f:2c:81:99:e5:f1:83:53:f4:64:d5:
e5:a0:ef:30:bb:fc:51:d0:58:e0:8f:b7:cd:7d:17:
bd:c1:31:31:bc:9e:d6:96:53:01:d0:d3:2b:98:08:
72:2d:0b:09:25:18:2e:1b:6e:09:1e:1a:3c:d0:33:
d0:1c:5a:d4:12:c3:78:21:d5:c7:25:53:52:c4:4c:
6b:fc:cd:40:86:60:e0:00:c0:2a:60:7a:53:f4:e3:
fe:3f:45:fa:3b:6f:dd:d2:47:13:df:37:db:d3:9c:
fa:3c:e2:21:af:12:05:94:b6:b0:89:cd:ca:ff:60:
e9:4c:5f:8e:7f:c4:f7:d2:7c:7e:4f:95:43:64:9a:
d0:91:2b:df:ab:1a:c9:56:d9:50:ae:c7:30:35:50:
8b:23:e9:f3:f8:89:84:9e:20:16:d2:33:16:0f:2e:
62:f4:21:fb:16:ba:69:f1:d9:08:86:53:68:b1:3d:
ba:cf:5a:18:44:f1:f1:c5:d9:d5:d3:27:69:96:a5:
ba:da:a0:ca:7e:84:fd:f8:2c:51:b8:a6:a9:7f:9b:
03:f8:df:b7:c8:15:49:ef:04:32:09:75:6c:d6:2b:
07:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2A:4F:D3:2D:87:E9:4B:80:63:C6:E7:7E:18:91:50:71:08:32:02
X509v3 Authority Key Identifier:
keyid:DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer
Subject Information Access:
Signed Object - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1e:05:91:71:86:3a:f9:f7:01:e3:81:07:6e:92:60:59:c0:
92:a9:cb:6e:ce:e5:f1:bc:ba:9f:3e:e3:88:6d:a1:4d:7e:ae:
e1:60:1f:6a:6b:6f:43:e0:40:80:6f:ff:bf:bb:3d:0c:ef:47:
7a:8f:9c:c8:29:b3:51:ba:25:77:ec:41:3b:55:57:eb:65:df:
01:9a:82:2a:a8:4b:1c:e4:16:bf:c5:0c:75:d5:8c:b3:00:ba:
eb:44:0c:97:01:3b:19:5f:5c:c9:9e:05:fc:0d:0a:14:f4:7f:
5b:6c:45:ef:e0:f7:83:e4:6e:9d:c0:1a:76:37:b2:da:0c:a2:
4a:43:3a:ae:33:60:01:ef:fb:92:16:55:37:05:90:dc:11:55:
d7:17:50:80:d4:ba:f7:7b:5f:58:99:e8:2e:c0:7f:35:b8:e6:
b3:fd:e2:00:58:28:73:01:a2:03:6a:c5:8c:e5:c5:04:53:13:
b5:57:47:64:13:b0:e3:3d:3f:aa:8f:b8:1d:97:09:fd:48:04:
ca:97:8a:b0:3c:83:3c:28:91:6d:98:23:ea:89:55:c9:51:7a:
84:84:fa:e5:b9:b3:88:69:8d:12:aa:c1:21:e9:14:47:ac:05:
fd:cf:1c:31:c4:ad:9f:fb:e2:b1:6c:90:7f:3e:3e:86:d0:e8:
2b:80:6d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:43 2026 by rpki-client