
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
File: dCF08y5sxujR-WW_odQKENbj58k.mft (raw, json)
Hash identifier: 1vHZSAUt/ga9DMcAIhmh/Z950bAszgQJpQe/Dxr4SvY=
Subject key identifier: 97:0C:79:FC:14:41:7E:E4:A8:AB:AB:06:B9:8C:86:38:7B:56:BB:55
Authority key identifier: 74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9
Certificate issuer: /CN=A911D1A9/serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
Certificate serial: 01B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
Manifest number: 01AF
Signing time: Wed 05 Nov 2025 03:22:29 +0000
Manifest this update: Wed 05 Nov 2025 03:22:28 +0000
Manifest next update: Wed 12 Nov 2025 03:22:28 +0000
Files and hashes: 1: dCF08y5sxujR-WW_odQKENbj58k.crl (hash: OCh9X3yi/aZZDiIfawaJhBIbYrfYwHqcjkPIvwkP2bo=)
2: 637BE5B0407C11EFBB872A45C4F9AE02.roa (hash: w1yfyWSTFZ2T3mamuS/YlpEjcUFBj5Vw4U9ZO7o84Xw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl
rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:22:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440 (0x1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D1A9, serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
Validity
Not Before: Nov 5 03:22:28 2025 GMT
Not After : Nov 12 03:22:28 2025 GMT
Subject: CN=690ac2f4-dc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5a:4a:b0:7a:8d:9e:fa:87:2f:81:04:60:7b:
7d:91:79:2c:1c:14:64:fe:16:a1:8e:9f:31:7f:12:
1f:ed:a5:93:18:2b:30:2d:e1:1c:39:ac:59:3d:87:
1a:6a:37:bd:2b:93:19:2c:34:c7:ed:9c:07:16:a9:
7b:64:92:02:d0:b5:56:e7:3a:4e:09:87:d1:2a:d6:
b0:9f:ba:17:9f:9d:8b:01:25:2d:b2:b2:4e:52:bb:
47:f8:28:4c:ae:ef:71:cf:4e:62:77:de:95:e9:b3:
60:4a:aa:11:29:6d:36:ef:14:e3:d4:0b:0e:2b:c3:
bf:ed:71:cd:2b:80:bc:00:71:5f:57:b5:d5:17:ed:
16:7c:40:3e:47:68:e6:96:b3:33:0b:ce:40:f7:9a:
68:d1:29:f8:b2:fe:66:be:d9:d0:92:2f:07:14:67:
f3:85:16:a6:d2:dd:58:6c:30:b3:bc:e1:f7:20:57:
e9:37:99:ac:73:48:6b:75:01:d7:08:4f:ba:92:f3:
11:c2:3b:21:d3:76:5a:bf:c1:b8:26:d2:8f:0e:57:
f6:dc:47:31:08:f4:37:1c:bb:96:56:ff:64:0b:f5:
b5:58:e3:6c:83:d1:ec:1a:f4:32:41:c4:43:c9:94:
4a:e5:68:89:f4:ba:6d:96:a1:4e:c5:cf:f2:1f:03:
20:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0C:79:FC:14:41:7E:E4:A8:AB:AB:06:B9:8C:86:38:7B:56:BB:55
X509v3 Authority Key Identifier:
keyid:74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:a9:3f:45:f6:6e:69:39:0a:83:fc:46:e4:0e:d1:69:08:a6:
5b:7c:d3:92:65:ff:35:a0:61:8e:71:7c:d6:14:72:7a:df:72:
c0:a1:3b:a8:71:b0:b6:27:4a:6d:10:49:a4:95:39:56:4f:a5:
cc:06:47:4d:59:90:a8:84:e6:8e:0a:74:b2:a5:4a:26:19:8c:
9e:70:9f:b8:2b:5f:e7:45:a3:09:15:2b:28:af:fc:dc:64:8c:
ba:9e:89:c3:55:71:a2:02:7e:11:85:df:69:c6:92:c7:e6:0e:
f6:e6:3b:96:5b:07:9a:67:b7:a0:17:89:a1:e0:f0:80:42:f2:
9d:ca:aa:8d:47:b5:69:a8:05:81:bf:a8:36:33:9a:80:f8:a3:
d7:4c:a6:4f:f1:6f:83:21:1e:a6:c1:db:62:3a:21:47:cc:cf:
c1:8f:50:97:10:7f:4b:77:88:e6:07:5b:0d:b4:bd:cb:cb:d6:
be:34:44:e1:85:2a:f7:c1:1c:f6:c9:bb:49:42:26:63:9b:37:
f5:57:81:51:3c:50:00:7d:50:00:0c:07:7a:da:1d:f9:d5:8e:
8c:75:0a:9e:3e:2f:75:e3:5b:1c:d2:cf:1f:2d:60:d9:00:ce:
41:63:1c:8d:0a:54:e1:e1:78:57:78:fc:05:35:7c:25:7c:a9:
1c:09:c8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:35:07 2025 by rpki-client