
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
File: diAma5iRohjA5fLvKI94LVcX8rw.mft (raw, json)
Hash identifier: 94F11nzX1INsxpEPgqTTtW+ylgtQh6qUvp2SBFCtCjA=
Subject key identifier: AC:2D:AE:94:D9:E4:BA:F5:4A:0C:EC:37:DD:01:E4:6E:06:6D:30:E3
Authority key identifier: 76:20:26:6B:98:91:A2:18:C0:E5:F2:EF:28:8F:78:2D:57:17:F2:BC
Certificate issuer: /CN=A911E660/serialNumber=7620266B9891A218C0E5F2EF288F782D5717F2BC
Certificate serial: 98
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
Manifest number: 97
Signing time: Mon 03 Nov 2025 06:26:24 +0000
Manifest this update: Mon 03 Nov 2025 06:26:23 +0000
Manifest next update: Mon 10 Nov 2025 06:26:23 +0000
Files and hashes: 1: diAma5iRohjA5fLvKI94LVcX8rw.crl (hash: 4V3xtiU2So/4FH2UvTymFb7jglCwi690ipi8ek7IWUw=)
2: 4ECE44B0D24311EF919B6D12C4F9AE02.roa (hash: HTX8AzlBVBkYFaGVRN5GWHgC9HxdFLqil4uBj/GLN6g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.crl
rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:26:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E660, serialNumber=7620266B9891A218C0E5F2EF288F782D5717F2BC
Validity
Not Before: Nov 3 06:26:23 2025 GMT
Not After : Nov 10 06:26:23 2025 GMT
Subject: CN=69084b0f-dfb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ea:03:39:df:e0:8a:6d:c3:d7:13:86:0e:4b:
55:9f:c4:22:46:52:a3:6b:f0:0f:37:5b:20:2a:09:
f1:91:ad:e7:e0:7f:2a:d5:20:72:31:e8:74:ae:28:
05:4c:ab:c6:61:7e:44:6a:38:21:7d:7e:91:eb:74:
b5:08:11:f7:f9:3a:d7:7e:e5:71:ee:1f:ea:f7:00:
9f:20:c7:e0:4c:d1:27:b3:5f:e3:12:47:2a:7b:5b:
c6:a9:3c:1a:07:83:c6:c1:2f:37:f2:16:9d:3b:1c:
2d:b1:7a:d5:bf:da:6b:08:5b:97:1c:e9:48:69:c2:
4a:1d:2b:d8:7f:5c:18:ed:11:41:33:71:2a:1e:94:
cc:e5:35:0f:6d:7d:88:c0:fd:78:6e:18:22:f7:e4:
4d:d0:6f:0a:11:5a:4c:0b:5b:ca:6d:fe:1c:c0:b0:
1e:f0:49:68:fd:01:32:9f:67:ed:91:d6:de:6c:e5:
1c:79:ab:4e:47:7e:77:92:18:e8:9a:da:d1:c4:59:
6e:79:82:3a:ab:43:46:ab:57:ed:92:e3:2e:7f:e8:
0e:09:04:1f:e0:9e:84:fb:32:7b:60:a1:a9:ef:93:
eb:dc:b3:73:23:58:75:c8:d6:5a:9c:c6:02:c7:ab:
9b:2e:4d:b9:93:a5:91:f9:9d:f9:c3:59:1c:52:11:
99:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2D:AE:94:D9:E4:BA:F5:4A:0C:EC:37:DD:01:E4:6E:06:6D:30:E3
X509v3 Authority Key Identifier:
keyid:76:20:26:6B:98:91:A2:18:C0:E5:F2:EF:28:8F:78:2D:57:17:F2:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:82:34:1c:2b:01:24:30:e4:df:79:91:11:e2:a1:2e:44:a3:
0b:0f:cf:da:3a:48:67:bd:46:95:8b:00:58:b5:64:db:d2:72:
0a:83:ec:e3:d7:57:ff:9e:06:8e:23:f4:9a:51:03:d4:f7:7e:
83:84:9f:9c:f0:0b:b9:f1:fd:fb:44:a7:57:bb:ff:cb:f0:fd:
08:1c:d1:51:83:89:be:55:b4:cd:58:5c:b3:66:ba:f3:03:85:
f8:de:3d:9d:03:0f:96:9e:aa:13:17:74:2e:08:51:eb:d3:80:
5f:59:d2:77:04:a3:34:a9:fe:ba:ff:2d:cc:47:e6:d8:26:ce:
c2:61:3b:5d:63:3e:c8:2e:8a:7f:9c:e0:6b:9f:78:8c:db:85:
ed:27:68:2e:64:0d:78:09:1c:d4:d4:5d:6d:d5:91:73:48:b1:
a3:22:16:62:bb:7e:c5:c3:2a:5b:6c:ab:7b:6e:3f:a5:ff:fb:
76:e4:27:5b:e8:41:26:cc:ae:68:15:62:a8:2a:e3:4c:f2:24:
1a:b6:53:97:bf:2d:16:73:4b:19:be:5d:04:04:78:82:65:71:
0d:f4:e5:67:85:3f:a2:00:cb:1a:2f:fd:d3:bb:d6:30:b2:18:
a1:75:13:45:11:bc:63:17:6d:1b:02:4d:17:52:b7:2e:ec:81:
ce:c6:ad:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:18:16 2025 by rpki-client