
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
File: at4O10LYxa-hMzuQNYwGs_6HaIM.mft (raw, json)
Hash identifier: eV5aBFhXdif4LPwZajc6wLcHy/5RlRXfTNxzz0dSW2U=
Subject key identifier: F9:7E:4B:92:8D:D6:3B:F5:02:49:83:ED:25:D6:9C:E9:CA:95:35:FE
Authority key identifier: 6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83
Certificate issuer: /CN=A911C356/serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
Certificate serial: 0767
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
Manifest number: 075A
Signing time: Sun 02 Nov 2025 21:39:19 +0000
Manifest this update: Sun 02 Nov 2025 21:39:18 +0000
Manifest next update: Sun 09 Nov 2025 21:39:18 +0000
Files and hashes: 1: at4O10LYxa-hMzuQNYwGs_6HaIM.crl (hash: nLsqqv6LtQVTlWPpVBWlHNalRWzU9t8+oDDlQwGcIqU=)
2: 68894B22402811EB91B49250C4F9AE02.roa (hash: IQPXsBjrCF2xQwF3Cbjloney1bFO9XCueS1DA232hlU=)
3: 86BED34677F011EB9E69B472C4F9AE02.roa (hash: j7nBCo//segTbSYNY1h0+pWssVZ/bx4SZszp4wl16ww=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl
rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:39:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1895 (0x767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C356, serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
Validity
Not Before: Nov 2 21:39:18 2025 GMT
Not After : Nov 9 21:39:18 2025 GMT
Subject: CN=6907cf87-6f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:53:e0:54:84:ed:f1:bf:e6:40:c1:5d:75:
1a:5a:6f:cd:84:a8:a0:12:4a:7c:52:c1:6d:1d:c4:
7b:d3:8e:9c:bb:ae:77:0c:e7:17:f6:7a:fc:00:88:
db:2b:a6:ab:40:c8:24:3a:e2:50:68:09:95:87:26:
72:a8:98:b6:85:d8:1f:76:55:c9:fa:e6:06:77:a9:
bd:35:89:3a:13:32:fb:35:7d:37:f7:62:27:1f:dc:
8b:93:11:10:fe:29:a0:67:5c:f2:dd:50:eb:3d:74:
b6:13:34:13:e7:44:2f:fc:3e:8e:2c:69:76:db:88:
37:8a:b2:a1:56:44:6c:87:9f:18:3b:a4:b3:3d:c0:
4f:da:a5:ee:f3:c6:91:ff:d9:8c:14:78:e5:af:65:
5d:f0:ad:f3:2e:2c:6a:0d:a7:4b:27:69:b6:1e:c7:
b1:34:01:35:3e:12:a1:76:d0:39:50:88:66:42:21:
fd:fd:a8:27:b5:ae:3b:83:11:a6:17:ad:d9:95:33:
58:60:40:d7:70:69:ab:f3:97:80:b6:db:da:59:00:
e6:f5:30:2a:5d:21:5e:32:52:0c:cb:7b:61:e9:dc:
17:a3:06:6f:8d:99:d7:63:2e:4f:b9:7e:2a:ed:43:
a4:4c:cc:4c:80:23:db:20:3d:d7:37:95:56:89:0d:
a9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7E:4B:92:8D:D6:3B:F5:02:49:83:ED:25:D6:9C:E9:CA:95:35:FE
X509v3 Authority Key Identifier:
keyid:6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:db:c3:db:bf:d4:82:10:af:78:cc:b2:6b:b8:3c:0e:2f:33:
4a:c7:16:a0:10:75:fb:2a:80:0b:52:41:16:6a:a2:60:3e:33:
d6:da:74:2a:2a:d0:d9:7b:e0:5b:7d:25:5a:0c:e2:5d:78:9a:
ff:a8:e1:f3:50:40:17:e4:bd:96:1a:51:97:5f:7f:51:6b:70:
02:20:17:ca:1b:5c:a3:00:aa:39:f2:7a:ae:b0:fb:ff:f5:1d:
30:51:30:5c:ed:78:87:72:d8:c0:d2:e3:11:49:55:5e:ec:dd:
43:f7:8e:79:0a:48:45:ce:a9:46:30:ac:83:25:e0:00:3f:cc:
4e:2b:ff:c6:45:17:81:58:3e:2a:71:34:e9:96:80:a9:5d:2d:
91:74:d1:30:a0:a9:bf:f9:2d:cf:0d:bf:21:84:ae:3f:4e:12:
3b:73:39:1a:36:79:77:c5:d6:bb:31:f1:13:d4:a6:d5:e3:a2:
e0:9a:f0:37:d3:29:f7:5b:b8:20:02:48:f2:71:34:63:48:43:
c7:2c:4b:11:1a:70:8b:30:0c:6e:37:a7:f3:08:79:1f:65:5c:
90:2a:0b:b0:33:69:e7:24:4f:9e:fb:7a:d4:92:24:a6:63:62:
e7:bb:80:4f:2b:02:f7:81:49:1f:e5:39:4e:45:f9:de:18:64:
07:3b:45:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:34:47 2025 by rpki-client