
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
File: 4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft (raw, json)
Hash identifier: T6x8hikMn6w0r6zxe/TvtY82swgnPUWZiHugoIs64B8=
Subject key identifier: 6D:E7:98:88:7C:65:AB:DC:50:BD:A4:37:8A:27:E4:F0:F2:90:FE:60
Authority key identifier: E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32
Certificate issuer: /CN=A914D0E3/serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932
Certificate serial: C9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
Manifest number: C7
Signing time: Mon 03 Nov 2025 05:51:04 +0000
Manifest this update: Mon 03 Nov 2025 05:51:04 +0000
Manifest next update: Mon 10 Nov 2025 05:51:03 +0000
Files and hashes: 1: 4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl (hash: D9yaREAvJ9lirruQZqDG0xwtyGJJRXtvDIwkoV2YmMM=)
2: 793E79A68D1811EF92E90C51C4F9AE02.roa (hash: omrZAUzqP7gMHmT5OJsVyadDZTS200Mcd28sOHG7NiM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl
rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 05:51:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D0E3, serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932
Validity
Not Before: Nov 3 05:51:04 2025 GMT
Not After : Nov 10 05:51:03 2025 GMT
Subject: CN=690842c8-aee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:56:90:f2:3b:56:e9:00:bd:c5:c7:c2:3c:
02:33:58:80:8b:54:71:16:7a:8a:c6:ee:e1:7f:2c:
1b:2e:3d:f2:f0:59:14:89:23:ee:ff:0d:d3:d0:87:
63:fc:5e:b6:4d:0f:5f:f1:76:bf:c5:dd:a9:af:f9:
09:4b:75:8c:03:58:12:53:3f:30:d1:05:c4:b6:8e:
23:a9:18:c9:fd:ea:0f:33:8a:0a:ca:0e:33:ab:d2:
e4:2f:02:87:05:22:b6:2e:f9:73:b1:bb:0a:f1:48:
89:2c:1b:d6:a0:8a:38:2f:62:79:90:4c:ec:1f:e3:
7f:5a:03:d8:ec:c9:72:bd:74:58:af:ce:46:27:3e:
f2:2c:41:1a:c8:37:3b:b4:69:c6:40:11:10:1f:26:
39:4b:f1:a6:50:27:00:97:d1:18:64:4f:bc:b4:36:
f2:42:a9:1c:19:df:ab:56:64:35:dc:65:05:97:82:
3a:c3:c8:f2:3f:32:34:cf:8e:04:1d:25:42:bb:9f:
03:3d:28:9e:01:a0:a0:80:35:8d:08:5a:d8:65:0c:
b4:1f:a0:b1:46:1f:0e:71:7f:5b:f9:05:6b:79:40:
95:d6:6b:b1:b1:47:33:a4:10:12:e1:3d:c4:7e:26:
ca:c6:a6:c7:94:d9:fa:0c:e8:7e:d2:2d:f1:9d:1c:
b8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E7:98:88:7C:65:AB:DC:50:BD:A4:37:8A:27:E4:F0:F2:90:FE:60
X509v3 Authority Key Identifier:
keyid:E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:81:47:ca:e3:ed:dc:b1:15:ec:f2:7d:d0:1d:34:bf:09:c3:
62:51:a4:af:6f:f1:07:0f:94:3b:3c:b0:3f:19:92:41:05:81:
09:66:7c:a4:e1:81:06:ed:ae:19:ff:40:5b:01:ae:31:81:d3:
1d:8d:02:90:25:f3:b7:dc:9d:8a:98:e0:9b:87:fc:4d:76:94:
3b:1b:73:8e:2b:0e:ee:9e:4d:9f:ce:8e:b1:a5:27:3c:13:e1:
78:6f:87:95:b7:61:37:d9:49:55:19:2c:a2:cd:be:32:fd:69:
e1:75:ef:fc:52:73:46:7d:0c:28:f5:62:d9:c6:ff:6f:42:d5:
8a:72:d8:d8:a2:58:cf:61:42:a8:01:7c:ff:68:20:6f:99:00:
8f:f0:0d:00:64:d9:b5:30:d8:9b:55:8a:d5:e7:2c:cd:81:90:
8e:0b:a1:23:91:9d:b8:b3:8a:76:ee:11:a6:7b:b8:41:56:dd:
c0:f6:49:9c:fa:fb:8c:7f:d8:8d:36:3f:65:d7:ab:7b:fe:d4:
a4:1a:f5:c4:78:c1:c9:75:88:36:76:23:3b:b7:9d:44:db:f3:
c3:09:6b:74:ea:30:aa:f2:b4:0e:25:29:73:47:75:08:b2:b5:
12:9e:06:20:04:f5:00:9d:ef:da:49:dc:79:59:6d:a3:eb:ec:
f7:ca:c5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:13:21 2025 by rpki-client