
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
File: A_TeA6HJhcNNxoJy-ddzWzP6at4.mft (raw, json)
Hash identifier: boJIfzaKFHfMzOBKF4aTguxune6pyr0gYwmBE7KPoqQ=
Subject key identifier: 4D:C1:EF:F0:EC:E0:79:17:A2:9F:9B:6D:0D:42:16:F4:39:2E:1E:76
Authority key identifier: 03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE
Certificate issuer: /CN=A911C7CD/serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
Manifest number: E4
Signing time: Wed 05 Nov 2025 05:37:04 +0000
Manifest this update: Wed 05 Nov 2025 05:37:03 +0000
Manifest next update: Wed 12 Nov 2025 05:37:03 +0000
Files and hashes: 1: A_TeA6HJhcNNxoJy-ddzWzP6at4.crl (hash: SmvkOYCFkRLT0BxwPNLvRgs1TAh1enM+i14OYsi9zTM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl
rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:37:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C7CD, serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE
Validity
Not Before: Nov 5 05:37:03 2025 GMT
Not After : Nov 12 05:37:03 2025 GMT
Subject: CN=690ae27f-9e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6b:bd:92:09:6e:be:29:f5:c7:6e:cb:b5:0f:
67:6b:bc:dd:c9:8e:03:89:cc:69:5a:7e:89:76:c1:
05:ac:65:e9:38:8e:8a:b3:e6:83:e7:6d:0b:c6:42:
d1:17:b6:da:ea:1d:1c:1e:dc:cd:cb:3d:6d:8d:6e:
1e:33:83:7f:d1:4b:6a:e3:aa:32:9c:41:a8:1d:17:
84:06:29:95:5f:ce:02:91:ef:f1:29:70:0e:b0:43:
c7:69:0b:1c:10:24:ee:64:92:c1:57:90:79:20:c2:
ca:68:23:3c:af:ec:92:ce:f1:69:3c:ad:6e:2a:0b:
29:8a:ff:5a:57:3d:93:b5:94:06:11:f3:1d:1b:26:
34:7e:e0:ea:37:2b:d8:90:01:1a:ca:0c:de:86:08:
e3:53:06:41:2d:9f:c8:c7:d2:10:d5:d5:78:32:63:
82:86:84:bd:52:16:a1:91:8d:ca:4f:40:3e:4b:0c:
80:57:f4:84:50:59:97:2c:87:f7:6f:08:9d:10:95:
82:c7:5d:85:33:6a:0b:f0:f9:99:f5:29:a4:44:2e:
d9:58:be:86:15:b5:81:3c:04:d2:5f:30:53:5c:a2:
bf:aa:fe:8f:3e:a9:a4:9a:36:54:51:7f:12:6a:65:
92:9f:18:b9:b4:ba:6a:da:32:86:7a:52:1c:3e:f2:
5a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C1:EF:F0:EC:E0:79:17:A2:9F:9B:6D:0D:42:16:F4:39:2E:1E:76
X509v3 Authority Key Identifier:
keyid:03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:5a:9e:34:77:23:7c:0e:e1:e6:a9:92:8f:3b:e7:99:8a:2b:
74:55:b7:8e:00:fd:5f:f2:45:5e:63:b1:13:30:c8:4e:e6:55:
5c:33:41:65:09:47:cd:36:0f:d9:de:d3:e2:43:a1:30:93:3f:
0e:13:89:d7:17:2d:cd:9e:d9:eb:23:42:87:48:15:ff:d2:86:
db:59:de:bd:61:b4:da:bc:62:7c:76:b2:bc:d9:b2:24:95:0f:
bf:85:9b:39:e9:80:4a:ae:b4:91:12:34:43:bd:94:fb:b2:c5:
a7:18:23:54:e2:93:cb:0a:39:0e:62:1c:4f:c1:b0:40:f5:88:
b0:44:97:27:86:e3:3e:62:db:cc:3b:82:6f:17:85:fa:ea:87:
6a:ce:7f:33:82:bf:60:51:6b:4e:1d:57:f8:86:e7:a8:4c:f4:
38:e0:b6:6f:24:da:98:d3:e7:f9:ef:e4:a8:76:68:ac:15:40:
33:32:3b:af:3c:02:c1:03:05:22:b1:6f:a4:a4:7f:30:0b:c3:
f7:a6:b4:ed:ab:cb:7c:19:61:7e:98:ce:e3:a7:2f:b0:7c:cd:
85:0b:74:97:dd:18:c1:b7:9f:9b:15:1e:94:f6:b4:ea:49:fb:
51:f1:b7:5a:18:cf:e4:16:10:25:8b:07:d8:57:48:df:08:5b:
f7:05:2d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:08:30 2025 by rpki-client