
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
File: M3WpYTTFczGvVN1xTtNj2rMba9A.mft (raw, json)
Hash identifier: CzgElMtmqZdAMk4/P0aWi4NlNz0mx5VERQIHKoaDOsA=
Subject key identifier: 1E:52:65:A8:83:F9:90:F6:0D:A4:88:8C:8B:03:FD:0F:8E:1D:C0:8B
Authority key identifier: 33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0
Certificate issuer: /CN=A9115620/serialNumber=3375A96134C57331AF54DD714ED363DAB31B6BD0
Certificate serial: DC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
Manifest number: DA
Signing time: Mon 03 Nov 2025 05:34:27 +0000
Manifest this update: Mon 03 Nov 2025 05:34:26 +0000
Manifest next update: Mon 10 Nov 2025 05:34:26 +0000
Files and hashes: 1: M3WpYTTFczGvVN1xTtNj2rMba9A.crl (hash: lQfhOvEPql8SYorENdDbJS6GrMISFJlxLKS0PwBIZN4=)
2: 8334E4446BA911EFADEBED84C4F9AE02.roa (hash: /b8c3NYiRoYt5VnH0mNcKwqwOmBEVRecdoyF1gyL4+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.crl
rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 05:34:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115620, serialNumber=3375A96134C57331AF54DD714ED363DAB31B6BD0
Validity
Not Before: Nov 3 05:34:26 2025 GMT
Not After : Nov 10 05:34:26 2025 GMT
Subject: CN=69083ee2-89b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0a:50:91:cb:ff:f6:15:d4:f4:79:85:26:27:
08:c8:31:7d:79:9f:03:91:b4:15:08:95:d5:64:f6:
ef:0f:e6:f6:13:f2:bc:fc:ab:a4:fb:b3:a1:57:a3:
7d:4e:25:79:17:78:78:ff:00:56:ab:fb:ba:b5:62:
11:56:69:ba:0c:df:22:d9:b3:ac:bf:9b:bb:c5:4b:
ac:1f:09:e7:75:ab:ba:95:19:97:f1:3b:23:56:cc:
6a:21:94:84:3a:8b:14:d8:f4:67:a1:d7:18:c4:80:
78:49:a3:6d:5b:1e:d1:f8:36:84:b0:14:e6:a3:da:
58:db:86:58:e4:26:c5:ca:b8:79:d6:8b:9e:cb:5f:
b2:1b:50:d9:13:e8:62:eb:33:d2:e2:01:c3:60:59:
9c:5b:1a:fd:83:05:9e:4d:dd:ad:7f:01:28:56:f9:
86:be:d5:0c:78:95:4a:4f:be:49:04:e5:7b:7e:57:
15:7f:0c:87:6d:89:3d:7b:98:84:0a:9b:fb:ac:4c:
95:b9:21:6d:0f:18:13:33:ee:f4:89:39:e4:7b:29:
54:b1:62:1c:b0:8d:16:a8:bd:38:65:e4:d1:dc:cb:
f5:bc:9c:35:0e:eb:69:4a:a0:cb:e5:80:b4:ee:b8:
4c:f2:fe:4e:83:c5:0b:d9:ce:5f:44:64:d0:4c:72:
0e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:52:65:A8:83:F9:90:F6:0D:A4:88:8C:8B:03:FD:0F:8E:1D:C0:8B
X509v3 Authority Key Identifier:
keyid:33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:bd:98:66:f2:45:e3:7d:4d:f4:ae:30:06:3d:b2:3b:83:dd:
5d:e6:a4:30:ed:ae:5e:98:99:6c:72:c4:5b:2c:78:5a:7c:1c:
90:87:db:94:9a:75:3f:44:8c:7a:a5:eb:81:8e:19:04:1e:bf:
76:f7:21:3f:c3:a3:1c:d9:9e:b5:38:fe:78:41:8b:df:3c:82:
07:ba:c1:ba:cd:f7:57:9b:08:64:75:9c:4d:d8:83:b8:b6:36:
9f:b7:57:ec:c5:8c:3b:0c:0c:a8:1f:57:5c:b7:ba:ac:08:cb:
69:75:63:7e:a6:29:fe:2d:b6:bc:8e:5d:ce:71:3a:68:44:15:
1f:ef:e3:b5:1e:45:48:1c:88:f0:d9:dc:39:54:14:e7:4e:5c:
a8:cd:3c:6b:fd:d1:31:b1:bb:d3:7c:20:ca:82:96:7d:cc:44:
c4:82:a3:26:2c:11:f8:46:bd:da:9d:03:c1:fd:18:9f:e0:3d:
64:38:e7:ac:31:53:c3:a8:d9:ef:aa:7e:1e:94:30:25:22:ea:
68:55:ba:d0:eb:bc:02:f7:07:f1:5b:ea:6c:d0:61:bc:35:b5:
42:8a:85:8c:96:f8:ab:07:ce:5e:05:c0:db:d8:6a:02:f3:6a:
28:7a:72:1d:90:09:d3:8d:89:d7:a2:58:1c:f5:6c:03:61:eb:
92:fd:83:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:37:16 2025 by rpki-client