
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
File: OIgNuTaszJvXTT2434iHsyjleI0.mft (raw, json)
Hash identifier: Bwe4xdY1+gFmf1a0XtZQpSo3u2q1oLbe88503w3EBxE=
Subject key identifier: BE:A8:45:C1:DA:67:B4:D3:9F:26:A2:FE:73:5A:5A:F6:AC:1F:74:9F
Authority key identifier: 38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D
Certificate issuer: /CN=A912E411/serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D
Certificate serial: 08E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
Manifest number: 1501
Signing time: Tue 04 Nov 2025 18:47:34 +0000
Manifest this update: Tue 04 Nov 2025 18:47:34 +0000
Manifest next update: Tue 11 Nov 2025 18:47:34 +0000
Files and hashes: 1: OIgNuTaszJvXTT2434iHsyjleI0.crl (hash: 970RIkhaRRWJF+3B52nvZHAObwwS93u+v2PFumsj/YY=)
2: F6EC251224E711F087B2F571C4F9AE02.roa (hash: ixwNvaFcfk2na9cvy/T/P4B71LV0FaS6LsHWYtDlPXs=)
3: C766E398C0EE11EA94A1F146C4F9AE02.roa (hash: 4Kv7xQwln4PVRYcYiLH9p6kQ8sftutG3ICgl5f6YZnI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl
rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 18:47:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2277 (0x8e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E411, serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D
Validity
Not Before: Nov 4 18:47:34 2025 GMT
Not After : Nov 11 18:47:34 2025 GMT
Subject: CN=690a4a46-a26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8a:cf:09:83:f4:95:32:98:10:7d:59:3d:a2:
fb:bc:4f:79:16:35:35:23:77:8b:82:ec:af:56:cd:
ef:4e:7e:e5:bf:d7:07:94:24:a0:1f:7a:ef:2a:f4:
54:d7:58:6d:70:a4:66:ba:9f:70:07:d5:25:fa:d9:
ad:79:bb:a6:2e:28:5d:31:19:b4:0f:48:b3:60:d2:
c7:5a:11:cd:a3:55:fb:c0:55:23:b1:8a:53:66:b7:
b9:68:d3:62:12:96:ac:05:0a:bb:43:c4:c1:9a:17:
a1:55:02:74:1c:1b:c6:70:40:c3:1f:3b:c3:55:aa:
5d:85:97:c5:40:e5:34:b9:17:b2:a4:4f:2d:3f:6a:
d5:08:3d:36:09:ba:8d:de:13:a3:8b:1a:ba:a3:91:
c6:55:ce:66:23:fd:49:74:c8:14:9b:81:59:13:0c:
f9:c6:98:c2:dd:15:c8:8a:75:de:ee:ae:90:6e:e3:
33:54:62:8e:7a:54:0e:9b:6c:75:5a:c6:b3:78:6e:
02:5c:a6:1a:fb:a7:8c:d1:5a:fb:c0:3f:e4:28:36:
b3:d8:7a:48:6d:0c:5a:ef:ba:8a:70:8c:5c:5d:1e:
b3:34:43:90:58:2b:ab:b5:6c:33:f9:9a:06:8a:39:
6f:a1:aa:84:35:91:52:5c:24:1a:ff:1d:ed:81:10:
c1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A8:45:C1:DA:67:B4:D3:9F:26:A2:FE:73:5A:5A:F6:AC:1F:74:9F
X509v3 Authority Key Identifier:
keyid:38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:e9:65:24:56:58:fd:cf:9c:e0:5e:ee:60:64:46:e2:b2:d3:
58:48:84:30:18:ac:da:cb:97:56:4d:25:b3:9d:72:d7:94:0b:
65:8f:7b:89:c4:fb:72:2b:5f:87:35:a9:2a:b8:de:95:42:9e:
83:9d:73:0c:64:ce:24:0a:a4:a7:61:6a:b2:16:b4:6f:29:a3:
1e:23:5e:ee:39:af:dc:eb:5e:7e:63:82:bf:52:6e:be:ef:c5:
48:6f:c1:bc:83:67:72:f0:77:ed:2b:66:d7:e1:f9:a8:42:bd:
43:df:e7:6d:e6:c4:dd:1d:17:e8:fe:e9:59:74:15:f5:23:01:
ae:82:3e:f7:23:b1:ee:4a:8f:4b:ca:49:70:fa:6d:5f:5a:6c:
df:27:eb:56:1e:d2:d9:6a:41:ea:13:18:f2:66:e0:0d:5a:43:
a5:9f:4f:7a:e5:3d:a3:21:43:7d:ac:27:07:9c:5d:18:b9:a2:
3e:1d:1a:ab:1d:55:86:9e:3c:81:4e:3a:e0:b6:b6:b3:a9:31:
64:65:f2:4c:09:15:20:7f:b2:2c:a1:2b:3c:ef:0c:55:22:8e:
a2:dd:20:2a:3b:c8:80:65:c2:87:4e:64:82:81:1f:37:68:3c:
56:27:b8:c6:5b:e9:1d:ce:04:56:ac:70:02:7f:d9:c6:07:23:
e9:1b:1f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:26:45 2025 by rpki-client