
$ rpki-client -vvf rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
File: fn476Ik3CnHlUhVXuwOgDxs5v9g.mft (raw, json)
Hash identifier: ZRbhgdw/Sj2QEnev8VtvPj/71RB6PanWXD1f25eoK6c=
Subject key identifier: 4B:20:C7:9C:6F:3F:2D:11:7E:CE:A4:DC:DB:78:D9:32:69:CC:8F:14
Authority key identifier: 7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8
Certificate issuer: /CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
Certificate serial: 080C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
Manifest number: 0800
Signing time: Sun 02 Nov 2025 20:56:37 +0000
Manifest this update: Sun 02 Nov 2025 20:56:36 +0000
Manifest next update: Sun 09 Nov 2025 20:56:36 +0000
Files and hashes: 1: fn476Ik3CnHlUhVXuwOgDxs5v9g.crl (hash: SqcUwvHrHbjt0F4XOO/z6klfUvwJTihl8KA6E7ce6iw=)
2: 211EA566FEC411EAA6579A78C4F9AE02.roa (hash: gc5rodY7fMSUXMwplo20/FwcMcQwtcPfnanjg3iRFls=)
3: 8AA99B52FEC511EABAAE7814C4F9AE02.roa (hash: y0/7k6ouKuD5b2Rsia/V+SeGipZyoSrwqk1Fd3WmbbM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl
rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 20:56:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2060 (0x80c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911784E, serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
Validity
Not Before: Nov 2 20:56:36 2025 GMT
Not After : Nov 9 20:56:36 2025 GMT
Subject: CN=6907c584-dbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7b:54:e1:de:78:a4:db:01:e1:e1:12:fc:ab:
22:64:13:73:a0:d3:ff:75:eb:4d:c9:19:2a:27:5e:
17:1a:62:2e:ef:3a:74:1d:ed:10:bf:59:8d:55:e8:
8b:3c:55:20:d4:1f:47:d1:b2:19:47:30:b4:2e:85:
fc:77:ab:55:fe:22:71:ac:47:05:ad:20:ff:75:4b:
2d:63:ff:96:9e:26:a9:17:46:a7:49:04:db:9f:03:
19:ab:2a:ca:34:a6:3a:3f:a9:12:5e:d2:3b:cd:d6:
6c:27:22:92:5e:96:00:45:0b:04:60:2c:34:fb:f2:
48:5c:9e:c3:f9:8c:ee:99:ce:ac:8e:8f:c3:8a:d0:
c3:18:56:4a:3f:52:0b:ab:f6:32:dd:52:ae:b8:01:
5f:e9:93:8a:e2:35:dc:ff:c2:96:97:13:49:68:34:
aa:b2:86:3e:58:71:a9:a3:d6:1d:9f:bd:90:c1:5d:
09:93:00:a5:de:2c:26:19:98:0f:f7:be:41:6e:bf:
d5:7b:7e:fc:f5:eb:d8:f4:f3:69:42:5b:ac:7e:73:
5e:4d:18:27:ab:aa:b9:30:11:56:0b:7b:ca:cb:6c:
2d:6e:07:74:fc:0f:a2:cc:4b:f3:a5:12:2d:02:bd:
fc:fa:e9:36:7a:32:22:42:74:34:76:23:ae:e5:a9:
7c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:20:C7:9C:6F:3F:2D:11:7E:CE:A4:DC:DB:78:D9:32:69:CC:8F:14
X509v3 Authority Key Identifier:
keyid:7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f5:aa:4d:e2:b9:bf:6d:ac:5b:12:4c:97:50:24:0d:91:7b:
ed:60:4a:4b:85:87:8f:ea:c7:5a:4b:5c:12:c2:17:b1:6f:d9:
23:14:e3:56:39:9b:b2:4a:1a:e3:c9:a6:d2:0c:67:31:1e:cc:
b2:c9:52:c7:ca:fb:56:ac:26:6f:f8:82:67:bb:91:6d:64:b5:
3c:17:e6:2b:42:bf:e6:27:a3:c3:d9:66:6f:bb:d4:fa:f4:ce:
e3:74:4e:e6:76:b3:ba:8f:2d:bf:6b:83:e6:eb:b5:a4:a1:84:
02:ba:aa:43:10:0a:1d:ea:f0:26:b8:03:a2:a9:79:54:04:7f:
1b:be:8a:a5:00:f9:43:68:94:16:dc:ce:d2:92:e5:f9:e1:11:
24:1c:2b:3c:47:b2:d6:49:0e:36:31:f1:b2:5e:5f:8d:c8:c6:
30:6d:38:6b:2a:c9:d4:79:60:3e:f8:5d:aa:53:c2:ce:22:e0:
85:92:98:a5:64:40:63:db:13:06:44:d8:8e:c1:7a:90:56:d2:
c3:4c:b8:22:d6:45:a6:7c:19:39:5a:c3:10:b9:64:cb:9a:fc:
1e:d1:ad:30:40:4c:09:2a:d7:83:b6:ca:89:4a:22:10:1e:36:
a5:80:05:4c:bb:a0:a2:a1:2d:af:06:4e:d1:7b:7b:94:18:71:
51:60:34:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:19:04 2025 by rpki-client