
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft
File: DprNgHEUtY9xipwrhZUmJebbK9E.mft (raw, json)
Hash identifier: f8Ln85TJz+iuE7Dxp48W+2pVfnvpqsROAJUbiUP3TsI=
Subject key identifier: 07:F8:A8:C9:A1:5D:55:D6:61:72:3C:28:19:B7:D2:64:42:63:46:B5
Authority key identifier: 0E:9A:CD:80:71:14:B5:8F:71:8A:9C:2B:85:95:26:25:E6:DB:2B:D1
Certificate issuer: /CN=A9146D7A/serialNumber=0E9ACD807114B58F718A9C2B85952625E6DB2BD1
Certificate serial: 0156
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft
Manifest number: 0153
Signing time: Mon 03 Nov 2025 04:12:29 +0000
Manifest this update: Mon 03 Nov 2025 04:12:28 +0000
Manifest next update: Mon 10 Nov 2025 04:12:28 +0000
Files and hashes: 1: DprNgHEUtY9xipwrhZUmJebbK9E.crl (hash: 7Qt8ZbNlhMSbzPA+/rRkpf/290ixNdxHCfnLyAilM04=)
2: E3AB124AB5C811EE8795EB6FC4F9AE02.roa (hash: aM0ebxOeAp/0tw2kKItKBwN7ixtJh2EMTHdvNuXJzzw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.crl
rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 04:12:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146D7A, serialNumber=0E9ACD807114B58F718A9C2B85952625E6DB2BD1
Validity
Not Before: Nov 3 04:12:28 2025 GMT
Not After : Nov 10 04:12:28 2025 GMT
Subject: CN=69082bac-ce3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fe:4a:15:7c:69:90:58:1e:3d:aa:37:2b:ef:
69:4c:d6:72:7f:07:46:fb:79:41:71:68:23:3a:78:
7a:e4:15:bc:94:5c:7e:83:a0:2e:bf:78:2f:b1:46:
5c:9d:5e:53:26:70:5a:21:f6:96:9a:7c:20:97:17:
37:67:e5:72:6c:fd:12:71:3a:7e:ea:1b:24:08:77:
c4:c9:55:c4:ad:0f:8b:0a:90:47:59:83:ae:79:e1:
a6:9f:42:29:01:28:41:53:0e:09:59:6e:33:9a:00:
ea:0f:50:6e:52:a4:91:2a:ac:00:0e:d3:3d:1d:10:
df:ff:90:22:7e:55:cd:62:87:d8:9d:20:6a:ff:59:
a3:82:09:f3:14:d8:52:19:93:6c:e9:a0:11:8f:1d:
e0:1b:b8:74:9b:aa:20:d5:f3:5d:8c:8d:82:da:b1:
e2:1b:6a:86:3a:e9:f3:b8:69:03:40:65:23:58:10:
e3:02:ff:a1:67:cc:89:8b:6b:da:7c:06:38:f2:1a:
f3:87:1a:14:97:23:e0:a4:24:96:a1:ca:fd:a9:8c:
31:be:58:ef:5d:54:2c:4d:58:cc:f3:bf:b0:5d:09:
1d:7d:cc:e5:7d:67:ad:02:b8:4e:00:a1:5a:94:68:
20:77:1e:0c:ae:e3:96:5a:a3:ab:e6:33:a1:f1:b9:
2b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F8:A8:C9:A1:5D:55:D6:61:72:3C:28:19:B7:D2:64:42:63:46:B5
X509v3 Authority Key Identifier:
keyid:0E:9A:CD:80:71:14:B5:8F:71:8A:9C:2B:85:95:26:25:E6:DB:2B:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:16:fb:99:78:c5:fc:28:75:9f:41:59:23:b9:56:61:ab:c0:
cf:72:83:ec:6c:5c:28:ee:0b:c2:b8:b6:34:01:1a:34:e9:d6:
bd:b2:89:db:5c:41:5a:fd:06:17:41:1f:8a:a6:41:97:7f:5d:
92:e0:1d:1e:cf:75:fb:67:80:1a:ea:c9:3e:2d:8f:f5:ca:4e:
81:d7:7f:5c:7c:76:1d:76:da:b2:59:db:8c:18:e3:9a:b6:36:
49:98:6f:40:7a:bc:99:36:8b:85:c8:2b:f4:3f:5b:46:e6:b0:
de:37:5d:a4:cd:8e:98:a9:a1:c7:b0:be:ff:53:72:58:37:98:
30:77:2f:22:a4:2b:0d:43:d4:ea:f7:00:92:9b:80:aa:1f:79:
76:9f:2b:28:27:56:64:86:bc:fe:02:97:36:eb:52:3b:10:77:
f4:82:af:1e:a8:ea:43:a2:8a:ae:fc:eb:be:c9:2a:90:5d:40:
55:0e:8e:5f:fd:35:89:5e:c4:94:22:87:02:42:80:da:d9:35:
56:82:54:c9:e6:fa:65:7d:f4:c0:8f:15:2e:d6:9e:56:5a:32:
16:4a:07:5c:a7:f6:cb:1b:f4:7c:36:16:04:bc:2d:87:a3:64:
8e:79:22:1c:ce:cd:ca:be:57:62:83:f6:d9:ff:04:f1:e0:6e:
de:37:80:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:04:58 2025 by rpki-client