
$ rpki-client -vvf rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft
File: 9o4033GQZ5Iit29wPgM3yhu5bz4.mft (raw, json)
Hash identifier: F4Vpxk7GHBNkEjoj9NKLTq3UbUg+iJtEb2SS1ccw/dw=
Subject key identifier: AA:A0:A5:BA:4A:62:CF:95:F6:07:0C:03:6B:70:6D:17:0F:7F:DB:7A
Authority key identifier: F6:8E:34:DF:71:90:67:92:22:B7:6F:70:3E:03:37:CA:1B:B9:6F:3E
Certificate issuer: /CN=A911606A/serialNumber=F68E34DF7190679222B76F703E0337CA1BB96F3E
Certificate serial: 014A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft
Manifest number: 014A
Signing time: Mon 03 Nov 2025 04:15:33 +0000
Manifest this update: Mon 03 Nov 2025 04:15:33 +0000
Manifest next update: Mon 10 Nov 2025 04:15:33 +0000
Files and hashes: 1: 9o4033GQZ5Iit29wPgM3yhu5bz4.crl (hash: oUWxll1OzznRtH5g6pd/kyXK21a6IiPKUpCXhud8AoQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.crl
rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 04:15:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330 (0x14a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911606A, serialNumber=F68E34DF7190679222B76F703E0337CA1BB96F3E
Validity
Not Before: Nov 3 04:15:33 2025 GMT
Not After : Nov 10 04:15:33 2025 GMT
Subject: CN=69082c65-e029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:42:a4:b6:0e:c1:08:95:e8:2e:61:56:75:8c:
e9:4a:b7:79:03:b4:c7:44:72:1e:b6:fd:c1:73:f6:
49:25:36:25:fa:75:1e:b2:f2:4c:ad:38:37:7e:99:
5c:96:52:1e:db:84:38:a0:aa:84:44:9c:7b:a3:58:
2e:97:60:30:a3:9f:74:1b:8c:f2:d8:a2:06:65:1b:
4c:8f:1a:da:b8:cc:66:12:71:87:00:bb:e6:e7:b2:
cb:5e:65:35:f6:b4:bb:50:d1:34:02:99:c1:a2:e3:
5d:ce:09:68:5e:a8:7a:2c:8b:22:0f:55:eb:53:7a:
b6:e4:70:0e:bf:20:55:d6:ae:c7:63:8f:7d:e6:31:
d9:18:b5:0f:65:b5:96:c7:ec:ca:5e:ad:a1:c5:33:
7b:76:e2:70:1e:0b:86:c3:31:b1:60:3e:d4:01:8f:
5a:c6:e9:e2:08:80:3e:d5:d6:00:cf:9d:b8:25:c8:
e5:20:3d:21:d2:65:aa:2c:de:76:bd:67:b3:28:7c:
a2:b5:4c:ea:6c:67:b4:68:44:cb:3f:29:a8:0c:46:
b2:46:15:58:aa:c7:7b:17:e3:c0:24:2f:f4:0e:be:
ba:c6:d7:3e:68:8b:4e:a1:92:8e:fe:e6:48:93:b9:
b4:9f:25:f6:b3:72:30:c7:91:7d:b0:6b:7f:3a:50:
c5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A0:A5:BA:4A:62:CF:95:F6:07:0C:03:6B:70:6D:17:0F:7F:DB:7A
X509v3 Authority Key Identifier:
keyid:F6:8E:34:DF:71:90:67:92:22:B7:6F:70:3E:03:37:CA:1B:B9:6F:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:54:2f:ff:0d:df:df:5b:2c:27:63:a6:4a:1f:8b:4f:7b:3b:
4e:80:04:84:3a:34:41:a0:84:53:aa:6f:21:f5:a6:ab:c8:61:
8b:26:3f:83:65:ab:98:0d:3a:96:24:b7:bf:3c:8a:ff:ad:2f:
6b:b6:5d:29:ec:05:02:67:e1:a8:c6:dd:8f:12:1a:2b:03:c0:
b1:6a:8e:44:95:a3:59:86:51:89:8f:95:a1:53:f4:c8:41:56:
97:51:c4:95:65:cc:3f:9d:cf:07:b6:86:df:f0:fd:94:ac:1a:
d2:b4:be:21:73:95:b5:ff:e7:ce:59:86:1b:91:5d:ee:df:19:
40:dd:4c:e1:9a:b8:97:fd:23:02:22:b5:3d:ee:5e:b2:f4:19:
ea:22:54:2d:ac:38:73:d1:e9:0c:a5:c6:64:0d:18:25:c3:6e:
af:b8:6f:79:31:ad:1f:63:c7:51:78:72:b1:d6:77:44:1f:17:
04:95:43:33:40:c4:0b:86:d3:a7:e8:1e:85:7a:d8:00:44:7b:
c6:62:fc:8b:72:a7:20:11:0d:51:ac:bf:91:80:06:3f:19:0c:
ca:70:f2:f4:1c:81:dd:ee:03:04:2d:c7:71:d7:e1:ad:f6:6e:
46:bb:9a:5a:2c:a8:a4:13:f6:a1:3b:19:cb:69:04:31:8f:24:
d7:dc:99:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:04:41 2025 by rpki-client