
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
File: 18ttHdz5NKH1nk_-SYLwtMUsNfU.mft (raw, json)
Hash identifier: ZbXLb3dDFU14k3OhvuyBP26dR4hxe/tG0QbqPQMbhMI=
Subject key identifier: 1F:24:F5:29:88:B0:E7:E3:36:6F:BD:B0:AD:D0:5B:E7:70:02:60:F6
Authority key identifier: D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5
Certificate issuer: /CN=A914DA2D/serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5
Certificate serial: 0393
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
Manifest number: 037F
Signing time: Tue 04 Nov 2025 16:26:38 +0000
Manifest this update: Tue 04 Nov 2025 16:26:38 +0000
Manifest next update: Tue 11 Nov 2025 16:26:38 +0000
Files and hashes: 1: 18ttHdz5NKH1nk_-SYLwtMUsNfU.crl (hash: 8wzdgd+mVe+1EtCFJ+zCsRujN3gsZfU0z08sZvFDTck=)
2: 6C330F2C7E3711F0BFE28E3AC4F9AE02.roa (hash: rRV3ULmc3s28UHX3IfHIa+Sp5XP4XAzVw9QLu0Fytsg=)
3: 83C2F8EE2F1F11F0AC29D057C4F9AE02.roa (hash: 03Y5aZgZbiR8AXRbH0v7oX9h0nIRsdQvo8UEKJF+mQs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl
rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 915 (0x393)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DA2D, serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5
Validity
Not Before: Nov 4 16:26:38 2025 GMT
Not After : Nov 11 16:26:38 2025 GMT
Subject: CN=690a293e-ff68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2b:3a:af:f3:8a:06:72:c6:4f:9a:7a:e7:0b:
dc:31:ab:1e:93:4e:33:32:57:73:af:c2:49:09:83:
38:81:3d:8d:c8:fa:bd:49:04:98:41:bd:ca:5e:66:
4a:13:fa:e1:89:8a:98:f0:06:f2:6f:7f:73:46:64:
9f:94:df:1f:83:e1:af:e4:bd:f5:94:3e:29:2c:12:
7e:42:15:69:77:f2:53:c0:9d:c0:98:af:90:78:9f:
0d:d2:c1:f8:17:11:aa:d8:4a:72:46:7c:79:4d:f1:
e9:b3:b3:34:a2:47:99:9f:44:cd:c5:28:dc:6a:ce:
92:3a:d6:cd:bf:ac:74:94:ef:50:0b:79:47:fa:4a:
e8:40:af:3e:d9:fc:92:1b:ee:ab:de:72:d9:a4:ad:
c1:19:5d:d7:80:77:87:29:c5:ef:ed:3c:a9:93:25:
cb:6f:2a:c1:c2:e7:fd:e8:07:71:45:cb:d6:63:50:
3b:db:89:5a:57:a4:0b:1b:fe:f9:b9:78:d3:84:3d:
d8:1a:e9:4d:d5:17:52:99:eb:12:a5:a7:67:e4:f3:
dc:7d:c5:ce:6b:64:cc:29:20:48:47:48:6b:26:f8:
7d:14:3d:94:b5:2c:1c:a0:73:4a:96:75:28:97:ab:
0b:c8:f1:c3:3f:e9:f3:06:57:6a:a4:db:e9:a9:23:
54:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:24:F5:29:88:B0:E7:E3:36:6F:BD:B0:AD:D0:5B:E7:70:02:60:F6
X509v3 Authority Key Identifier:
keyid:D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:48:47:90:da:4c:99:5f:39:6e:0c:b1:5f:e7:d4:c5:e1:56:
00:4b:e9:5f:b5:d7:8c:77:b9:f6:d7:ef:4e:12:dd:4d:d0:04:
35:0c:d1:d4:f0:8e:db:43:e5:d3:b7:25:d3:66:4a:c8:80:08:
13:91:54:9b:56:2e:88:46:73:6d:e6:d9:c4:2a:2c:1f:6c:b6:
a2:f2:55:cb:ac:e3:ec:02:cd:df:10:60:79:1e:69:12:ea:bd:
ee:7d:19:05:b0:8c:ce:3c:d7:20:36:28:dd:a4:93:a0:80:8c:
60:f6:c4:aa:65:1c:ab:47:da:f1:bb:6e:e2:34:d7:46:b4:27:
e5:e2:52:ee:aa:a9:56:02:fd:7f:c4:77:cf:0a:f8:4c:6f:72:
f3:b6:92:5e:14:63:bc:57:6c:f5:14:a6:fd:aa:b3:51:ad:a5:
be:4a:7d:2c:56:c0:46:24:e8:e4:68:26:a7:60:17:81:08:2c:
8a:33:b4:61:79:93:3b:fa:75:51:54:12:03:70:4e:53:4b:fd:
cb:59:31:7b:93:77:d0:a2:f7:5e:3e:1b:df:52:4f:00:9d:f0:
c3:bb:39:28:19:66:3a:d8:c8:6a:cc:bc:46:9c:02:8b:b9:1b:
c6:a5:81:a2:6d:3b:54:dc:2e:2d:d0:ce:d7:be:b2:bb:7e:de:
f1:7b:2f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:07:56 2025 by rpki-client