
$ rpki-client -vvf rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft
File: irlFgrAuqoOihfHJH8hZoOLBE1M.mft (raw, json)
Hash identifier: Le2CvuNtmh0qUwtLMzTDxVQvxfsHHs6A33MM95kioVs=
Subject key identifier: 03:E7:05:05:E4:D8:81:FA:15:AC:DE:AF:EF:F2:74:CB:18:F1:0F:6A
Authority key identifier: 8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53
Certificate issuer: /CN=A911049F/serialNumber=8AB94582B02EAA83A285F1C91FC859A0E2C11353
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft
Manifest number: 83
Signing time: Wed 05 Nov 2025 06:54:38 +0000
Manifest this update: Wed 05 Nov 2025 06:54:38 +0000
Manifest next update: Wed 12 Nov 2025 06:54:38 +0000
Files and hashes: 1: irlFgrAuqoOihfHJH8hZoOLBE1M.crl (hash: nXBDyXeFmUa6yOoXAB350we1d7kwKuaIBGZIJirIims=)
2: 347B37060B7011F0BED04B49C4F9AE02.roa (hash: pQpuCZn5VYJdmwXjLqjs5m3xSfcDbn3JK2oThkiWP20=)
3: 0431DDEEF8E611EFB9269C71C4F9AE02.roa (hash: onFwvD3ByPLzXVJ67F8/gNczv45XsvNKrHEcWpbgNvk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl
rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:54:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911049F, serialNumber=8AB94582B02EAA83A285F1C91FC859A0E2C11353
Validity
Not Before: Nov 5 06:54:38 2025 GMT
Not After : Nov 12 06:54:38 2025 GMT
Subject: CN=690af4ae-3349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d6:8d:44:fc:f5:b9:f8:37:12:84:df:ef:6b:
81:f2:65:b3:1a:50:07:a8:a3:56:7c:f9:91:4a:16:
df:fb:e9:df:6c:cc:f8:98:be:63:70:97:b1:eb:4f:
b3:76:51:79:a1:e2:10:93:12:3d:d3:b8:05:f6:05:
aa:e7:3c:d3:50:14:23:6a:6f:ef:37:39:db:84:c5:
db:e4:50:49:93:5f:b1:dc:be:a6:09:11:07:a8:12:
4d:41:4f:bb:ff:3f:0a:05:a2:f3:2d:ce:03:1f:a8:
18:3c:5e:ae:4a:46:b1:53:7a:05:a3:b0:fb:1d:68:
c1:25:a7:ba:44:a5:cf:cf:d2:b8:cb:7e:7e:18:d4:
72:92:97:64:54:7d:36:37:36:3e:cb:5b:36:9d:ff:
ac:ff:2b:93:94:8f:22:32:6d:97:d5:d6:82:9a:57:
41:67:af:21:19:ce:38:b4:b3:eb:88:ec:e7:25:84:
87:1b:1b:b5:22:18:7d:dd:c9:9b:3d:f5:83:ce:7a:
b2:45:02:67:f4:70:6d:ed:9f:5d:32:7e:50:27:7d:
85:15:9b:2c:8a:da:b1:41:78:13:61:70:bb:ea:5e:
50:7f:ea:2a:ff:de:9f:e7:f2:ad:fa:07:53:aa:c5:
1c:50:8f:ea:5a:d9:54:23:89:28:31:c9:fa:e2:c3:
a0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E7:05:05:E4:D8:81:FA:15:AC:DE:AF:EF:F2:74:CB:18:F1:0F:6A
X509v3 Authority Key Identifier:
keyid:8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:70:9a:0f:8d:a5:9b:60:ed:ca:65:12:62:bd:e1:b9:dc:cc:
96:bf:64:ec:3c:b6:6f:dd:81:f3:57:03:60:eb:b0:73:5e:3d:
ab:47:7d:50:46:7a:e6:b2:eb:48:57:82:c7:b4:9b:d0:73:33:
43:9d:49:26:fe:c4:38:55:69:df:bf:47:d0:c9:5b:af:e4:00:
31:37:e6:53:98:c4:34:f6:4a:d7:6a:31:29:4f:4a:15:ef:70:
2b:02:94:41:53:e5:a5:0a:5c:f8:bc:3b:5a:b5:5c:a0:86:19:
57:76:02:c3:ce:74:b3:7d:93:90:02:f6:4c:c4:2d:49:ac:24:
16:64:d1:91:01:69:47:9b:c4:42:46:1d:3e:94:62:0d:93:00:
c8:04:d8:e5:97:e9:60:cc:1e:d0:92:eb:f9:b5:b1:a2:c6:0d:
7b:75:d8:88:09:1b:3c:11:0a:7e:de:42:4e:28:37:43:50:2e:
66:ff:5d:45:70:8b:2b:3a:3d:99:a0:37:2c:69:83:18:21:e3:
c8:a0:0d:72:bc:4c:e8:1c:57:5a:b7:55:0c:06:eb:4f:1a:fc:
c1:c1:0b:27:fb:7b:00:46:b7:40:df:3c:c2:9b:4b:57:84:b2:
e1:1a:23:dc:61:e3:df:0a:10:72:f4:45:10:aa:3c:e8:c1:49:
68:a7:27:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:25:34 2025 by rpki-client