
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
File: kOgVQgZDtd1jkSg9Z3RKOrowctM.mft (raw, json)
Hash identifier: mK4/WkjOijSeTbAO0+9kperW+2Y/yHmrJ2AAt0AtXCs=
Subject key identifier: 36:C1:48:E7:48:86:DD:C8:07:49:C1:89:98:BA:0C:8A:59:98:80:EE
Authority key identifier: 90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3
Certificate issuer: /CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
Certificate serial: 0C4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
Manifest number: 0C40
Signing time: Tue 04 Nov 2025 18:45:13 +0000
Manifest this update: Tue 04 Nov 2025 18:45:13 +0000
Manifest next update: Tue 11 Nov 2025 18:45:13 +0000
Files and hashes: 1: kOgVQgZDtd1jkSg9Z3RKOrowctM.crl (hash: yS7idRPiYiOqLlHmnbar+e3l5RR3LH60W7A+0Hfnd+w=)
2: B52B819E14F411EA96EC5874C4F9AE02.roa (hash: CgIHdazzVOF6QA1a4XIGPV0wyY67xaJD1pxnbNXHCvI=)
3: B49D829014F411EA96EC5874C4F9AE02.roa (hash: V1tC0MfEENnmWJmQHsKngVqk62NvpQbP2E538Q1fAlM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl
rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 18:45:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3148 (0xc4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BB5D, serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
Validity
Not Before: Nov 4 18:45:13 2025 GMT
Not After : Nov 11 18:45:13 2025 GMT
Subject: CN=690a49b9-580e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:35:27:88:75:64:d1:ec:f9:4a:65:8b:62:
0b:2b:4c:36:89:df:de:c4:b1:85:ac:cc:66:71:f7:
af:61:ab:6d:6f:b2:e8:49:db:7b:ee:16:f8:b2:61:
b0:d2:38:dc:ac:b6:cc:41:8d:fa:c2:e3:c8:93:af:
ed:2c:95:0b:93:e6:fc:33:34:c7:6a:4b:c6:f9:55:
64:bc:c4:6d:67:dd:8b:ac:a8:ee:2a:18:5a:8c:53:
ea:af:ce:92:f5:45:2f:b8:01:92:7a:ea:57:61:1c:
5b:b6:5f:bc:7b:d0:03:f9:a1:1f:61:9a:3e:d8:04:
20:b9:be:12:92:87:a6:da:62:60:25:82:93:76:11:
b7:cf:d2:2a:52:6f:e9:1e:fc:cf:1b:7a:41:e6:b2:
02:d6:70:b4:fc:1f:8a:f4:33:4e:fa:2d:3b:c8:53:
0e:3e:a1:5d:a4:14:aa:83:eb:81:51:77:58:f4:b8:
0d:a8:9c:7b:61:1b:2a:0b:37:9c:43:d6:05:7a:03:
bc:04:de:a1:f5:f0:40:23:b9:68:36:72:82:8e:1e:
91:07:28:bc:e9:54:6d:98:d8:93:80:87:ea:25:a6:
ce:a9:95:45:9a:eb:29:00:60:e4:d9:dc:3c:d1:9b:
ea:ba:25:20:58:5b:44:b8:ef:a4:e4:19:62:f4:1a:
7c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C1:48:E7:48:86:DD:C8:07:49:C1:89:98:BA:0C:8A:59:98:80:EE
X509v3 Authority Key Identifier:
keyid:90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:41:4d:f5:3c:e3:f6:08:ca:3c:02:b2:cf:20:d7:d8:8e:59:
c4:39:10:88:90:36:91:17:1d:68:95:17:76:8c:05:63:ef:cd:
83:27:ec:85:1d:63:4a:69:51:6d:3b:01:67:02:97:f0:2d:8c:
6e:1e:c0:88:3a:ae:6d:f0:78:48:6f:0c:22:43:de:83:d3:cc:
6a:75:90:fc:a6:bd:42:c3:51:ba:cf:56:18:3e:05:1b:86:26:
0f:16:6a:97:7c:fa:ff:f3:8a:1a:e4:a6:20:7c:62:0c:9d:f3:
c8:70:57:af:b9:59:fb:74:5f:e7:5a:16:22:4f:e0:6d:5f:c4:
f1:9b:22:8c:69:18:ae:36:16:01:5c:32:63:f8:6f:73:a1:ac:
11:2d:4c:60:d8:54:73:5e:df:95:42:2c:05:59:47:f5:ca:67:
99:ae:db:fc:0f:33:a7:54:3f:3c:3b:7b:e8:2d:37:27:82:79:
b9:13:ce:f2:bf:eb:2d:47:ed:ce:37:6c:11:7c:fd:45:81:ae:
9a:1b:2f:42:a2:ce:94:a2:f8:14:41:ea:8f:49:14:a0:b7:94:
86:18:27:02:b0:09:0b:36:ba:9a:68:4f:3b:f9:13:08:36:5f:
ce:a2:ef:b8:08:f3:c1:d4:f9:25:0b:5c:ba:61:12:19:95:24:
4f:31:44:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:27:17 2025 by rpki-client