
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft
File: byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft (raw, json)
Hash identifier: uibmlLL3SMHP063UzDhL1lssYeu1ZXUGgIw7pXxd5tI=
Subject key identifier: BA:E7:52:2C:0E:B5:6B:20:C6:1C:7A:2D:E3:AD:A0:60:9E:49:05:EE
Authority key identifier: 6F:23:BB:4B:E8:2F:34:B0:E7:46:12:79:52:0C:73:97:7A:B1:D2:3C
Certificate issuer: /CN=A9111926/serialNumber=6F23BB4BE82F34B0E7461279520C73977AB1D23C
Certificate serial: 0C29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft
Manifest number: 0C15
Signing time: Tue 04 Nov 2025 18:55:29 +0000
Manifest this update: Tue 04 Nov 2025 18:55:28 +0000
Manifest next update: Tue 11 Nov 2025 18:55:28 +0000
Files and hashes: 1: byO7S-gvNLDnRhJ5Ugxzl3qx0jw.crl (hash: WDX/wWclhYEkppu5B69ef9BryGWW0cAdVJeyvGnRWbY=)
2: 54B32544D84711EF81BD1E0BC4F9AE02.roa (hash: n/Sc1HZXxr+QB2+UH8INg78Itmv5yzjeOuf4NXzLeAU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.crl
rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 18:55:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3113 (0xc29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111926, serialNumber=6F23BB4BE82F34B0E7461279520C73977AB1D23C
Validity
Not Before: Nov 4 18:55:28 2025 GMT
Not After : Nov 11 18:55:28 2025 GMT
Subject: CN=690a4c20-68df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:e1:44:fc:65:db:d3:f7:8d:35:63:0b:43:
ae:4b:3b:7e:72:3e:15:b0:07:34:e2:68:34:3a:30:
9a:22:86:56:62:7a:b5:ea:0e:65:c2:e4:20:7e:4e:
59:cb:f7:00:75:1e:37:e7:cf:7d:47:52:da:86:b9:
39:90:7c:c4:26:b4:d9:ad:e0:6b:ed:4d:2e:7d:c0:
d1:a1:ec:24:af:e1:f6:40:21:0e:09:8c:30:ea:a9:
1b:01:4b:68:c0:a7:5e:a9:b7:86:9a:f5:87:87:24:
83:6b:cc:c6:ae:93:2c:15:14:99:02:19:06:99:66:
af:b0:26:d2:0b:fc:93:9c:ad:d9:92:79:fc:e1:bc:
b7:8a:53:05:b4:e1:6f:f6:af:13:0f:ec:69:52:78:
0b:6e:03:e4:bb:6b:e1:cd:72:74:53:08:93:d9:38:
ad:a9:e8:74:de:a0:eb:f3:f5:63:6f:5b:67:fd:dc:
13:c0:88:74:94:92:20:57:2e:62:bc:14:5a:9c:24:
1c:63:fe:fa:82:78:05:40:9d:cf:d4:b2:b0:ae:65:
dc:98:46:29:1b:fa:fc:9e:61:b2:e2:b1:c6:ed:3d:
9a:ea:da:46:fe:88:f3:75:e3:b9:c7:8e:0f:4f:90:
0d:c4:f5:c5:46:29:75:72:20:06:29:ff:b4:a7:dd:
a1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E7:52:2C:0E:B5:6B:20:C6:1C:7A:2D:E3:AD:A0:60:9E:49:05:EE
X509v3 Authority Key Identifier:
keyid:6F:23:BB:4B:E8:2F:34:B0:E7:46:12:79:52:0C:73:97:7A:B1:D2:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:81:e1:1a:6b:66:ab:ac:95:39:f7:f3:0e:ed:1d:99:a3:ef:
9b:97:e5:23:e5:16:50:f3:e1:12:1a:4d:e2:3c:58:14:bc:47:
91:bc:27:01:09:e4:04:a4:60:f3:b0:87:23:b6:1a:a6:bb:ee:
5f:ac:8f:1f:a4:67:81:59:6a:3d:b1:dd:d3:0e:ab:d5:62:8c:
36:aa:61:20:46:84:65:dc:6e:df:8c:22:a5:c8:fb:7d:3f:d6:
20:b4:c8:86:c0:d0:cb:d6:8c:9a:17:df:97:97:a7:9d:57:f5:
4f:72:db:35:bc:2d:b2:68:bd:c0:d3:c1:08:be:a2:56:45:8b:
d0:92:f3:98:c5:04:58:2d:0b:f6:74:77:7f:08:a3:dc:36:0b:
a6:b2:b1:78:40:55:8b:63:c6:73:42:12:f4:aa:f7:12:88:6e:
67:e6:83:77:38:5b:ee:05:e6:3e:f0:19:6d:11:c7:7d:ee:e5:
46:aa:4e:7b:a6:ea:00:43:16:9e:e0:2f:42:40:d0:e2:86:6d:
30:d2:1a:25:1b:82:cc:4b:fa:18:dc:d7:41:d1:b3:b6:d1:98:
50:91:82:c1:f0:06:38:5d:09:ff:7b:77:99:58:50:43:0a:ba:
89:b6:b0:08:48:c6:03:f5:1a:3d:ab:e7:86:22:ab:ab:f0:7d:
16:4a:b7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:07:57 2025 by rpki-client