
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft
File: d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft (raw, json)
Hash identifier: xXRFRiJHFhqSjMW8WdquRHz5gCGcCUGdwMWWlrdKKMQ=
Subject key identifier: B3:DF:F9:24:8F:3B:0C:24:6F:BF:57:C9:3C:0A:28:14:4D:9C:A6:84
Authority key identifier: 77:EA:6F:E0:16:65:1C:FB:16:93:41:67:45:E9:A5:BE:A4:74:53:46
Certificate issuer: /CN=A913A69E/serialNumber=77EA6FE016651CFB1693416745E9A5BEA4745346
Certificate serial: 0BE3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft
Manifest number: 0BD8
Signing time: Tue 04 Nov 2025 19:00:04 +0000
Manifest this update: Tue 04 Nov 2025 19:00:03 +0000
Manifest next update: Tue 11 Nov 2025 19:00:03 +0000
Files and hashes: 1: d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl (hash: AA2PH5wLo7frugzFLSW5XBlkCj5Rg72IGFyJQLlDNFk=)
2: AB60C088B6E111EDB3BAC26CC4F9AE02.roa (hash: wE6z56gItRRwWH8NQGesjQ0xX5sSLBqbBFe4JVJ50FU=)
3: 951CA536C1B511EF87BCEA11C4F9AE02.roa (hash: GqSqhnn63EZ4p4JuVF5u2QSaZSQqUmP27m/tmKbsSUg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl
rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 19:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3043 (0xbe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A69E, serialNumber=77EA6FE016651CFB1693416745E9A5BEA4745346
Validity
Not Before: Nov 4 19:00:03 2025 GMT
Not After : Nov 11 19:00:03 2025 GMT
Subject: CN=690a4d33-af75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:30:b2:34:9a:9a:03:b0:4d:a4:df:2e:67:79:
ae:2a:32:24:38:1a:0e:f7:25:7e:8a:2c:9e:5e:b9:
4a:a5:19:cf:75:0a:53:70:c0:12:57:36:fb:9d:d7:
eb:c3:e6:33:ee:3b:65:83:0c:dc:64:f5:0d:3c:93:
9d:24:b0:55:5f:b2:01:ba:05:da:32:2d:cb:cf:a5:
68:c0:84:59:f9:06:d8:61:49:e4:e9:80:8e:89:5b:
07:63:e8:aa:2c:1e:17:e3:36:62:15:3b:f4:a6:b7:
46:d4:24:d3:4c:10:45:ff:fc:30:29:86:6d:06:27:
a2:98:35:2d:36:2a:08:44:39:09:86:38:08:bc:14:
20:d5:c1:13:7a:a4:35:dd:21:97:fc:3a:e2:d7:f2:
3b:e6:86:ab:6e:d4:11:12:f8:c1:95:f6:d4:f2:67:
95:c4:a1:a4:58:8f:98:88:c5:01:4c:a1:58:f2:82:
de:bd:62:31:5a:0e:0c:99:44:af:6d:f7:2f:3f:e1:
21:4d:9c:fa:6b:fe:8a:05:ea:1f:02:8c:b1:c7:34:
e2:85:c9:28:61:8f:5a:20:5b:56:cc:0e:b0:81:84:
a5:5a:8a:c7:07:44:c9:31:f4:17:4a:0e:29:2a:94:
f7:93:a0:18:dd:bf:c6:93:0c:79:16:44:cf:e6:3a:
86:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DF:F9:24:8F:3B:0C:24:6F:BF:57:C9:3C:0A:28:14:4D:9C:A6:84
X509v3 Authority Key Identifier:
keyid:77:EA:6F:E0:16:65:1C:FB:16:93:41:67:45:E9:A5:BE:A4:74:53:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ba:c6:36:72:71:82:a0:58:ab:f6:2f:98:05:18:5c:9e:4c:
29:ef:ba:e1:0c:4e:ad:72:26:17:e4:04:97:80:c6:13:6d:0f:
94:06:e0:19:dc:dc:a2:0f:bd:87:39:c6:fb:93:81:ab:0d:b2:
e7:60:11:3e:b9:52:f9:23:a6:3b:bc:06:4f:c2:30:21:ff:d4:
50:c9:fb:cc:6b:50:5d:af:a9:88:58:70:4f:3e:a8:dd:aa:81:
e8:0a:13:bb:96:7c:09:cc:49:94:09:e6:37:2c:39:75:8b:9f:
c4:d4:db:81:6d:1a:2e:89:3f:f9:ef:ad:28:85:01:2f:61:00:
21:0f:df:d3:48:51:fa:11:f8:c4:23:a1:ec:ff:fb:d8:e2:2a:
c1:c8:47:37:77:f0:bc:cc:ad:2f:69:91:6b:1e:35:34:64:54:
5f:42:49:40:0a:ea:53:27:0a:85:aa:df:e3:a1:30:2f:30:ba:
88:27:3f:54:7c:c9:2c:da:8a:45:e0:94:a5:65:42:4e:77:f7:
13:47:f2:f3:be:db:ec:92:00:af:c1:ee:2e:19:13:d6:71:3b:
7f:f6:64:89:da:a1:6d:7b:88:68:45:fa:23:4a:01:e4:88:96:
ca:2e:24:46:ba:4a:29:94:0a:81:89:b5:37:f0:7e:20:cc:67:
71:d4:a8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:17:18 2025 by rpki-client