
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
File: M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft (raw, json)
Hash identifier: asPlvV01+8P3j6AWSapBqZbqao4NCgR2DCUl4ZREQ9g=
Subject key identifier: 23:91:C1:06:9D:8B:14:A8:3B:A1:44:79:03:45:85:ED:EA:EF:78:1C
Authority key identifier: 33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B
Certificate issuer: /CN=A9154961/serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B
Certificate serial: 02AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
Manifest number: 02A6
Signing time: Wed 05 Nov 2025 01:37:22 +0000
Manifest this update: Wed 05 Nov 2025 01:37:21 +0000
Manifest next update: Wed 12 Nov 2025 01:37:21 +0000
Files and hashes: 1: M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl (hash: ywKUuXty5tWRY+GYmwLWzRxx1rDcvfwOyiqzo5yrdC4=)
2: 7359F5C43A4A11ED9B8FF35AC4F9AE02.roa (hash: ExbEkd7oCoyYXXiOdOycDgRHQS6NdbUqsudnvKbSXwU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl
rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:37:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 685 (0x2ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154961, serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B
Validity
Not Before: Nov 5 01:37:21 2025 GMT
Not After : Nov 12 01:37:21 2025 GMT
Subject: CN=690aaa51-adb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:57:da:8a:93:b4:d9:f3:b7:ac:a9:c4:b6:2d:
81:74:ad:8f:34:09:24:ee:e7:af:f9:0c:8d:23:36:
f8:3c:a3:4d:22:81:5c:15:63:91:e1:aa:67:d6:2b:
ce:30:81:e3:ff:57:9c:99:50:28:13:69:4e:62:19:
39:5d:d2:81:07:a3:65:04:4e:3f:08:9b:db:6f:39:
ad:a3:5a:b8:28:96:da:95:07:ef:2f:6c:f0:37:5b:
7b:92:c6:81:91:82:db:61:21:ad:08:cd:63:df:22:
f5:fc:2c:d1:bd:9a:5a:1d:d3:51:5c:a5:88:15:47:
3f:50:df:2d:0a:00:cb:a3:c0:f0:e3:be:a0:2a:7e:
16:9c:c8:98:02:73:87:b1:27:fe:c0:e4:db:6b:9c:
8c:b5:2a:1d:0c:75:15:0d:46:0b:bc:20:8f:9b:a3:
0c:44:16:6b:60:cb:84:c6:29:60:80:04:78:53:b7:
10:71:bb:84:ae:62:a1:45:92:0f:53:ae:fc:7b:63:
f6:a8:9c:52:ec:e2:ca:70:6d:f3:b2:45:cd:76:77:
68:9c:d6:7d:0c:b0:91:1c:bf:a2:3e:4b:3b:68:3e:
57:74:c6:53:80:eb:a5:d8:3f:5b:e7:c5:41:e6:e4:
40:a3:75:b1:5f:d6:50:bf:f5:74:0e:75:e0:00:f9:
73:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:91:C1:06:9D:8B:14:A8:3B:A1:44:79:03:45:85:ED:EA:EF:78:1C
X509v3 Authority Key Identifier:
keyid:33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:28:ec:19:16:50:22:da:25:3f:7a:49:38:ec:f0:f7:7c:36:
38:01:62:b2:a5:36:48:c7:04:95:80:1a:ca:73:5e:72:e2:a0:
87:e5:f8:bb:51:9c:7e:94:66:6a:f4:e1:b6:01:ee:3f:e4:a0:
bb:bd:52:4b:4a:3b:00:4d:4c:46:6f:a0:f1:06:06:d2:68:f8:
2d:d7:a3:18:51:9d:db:d8:59:a8:dd:01:5b:e5:3b:12:a9:25:
47:7c:93:75:e3:3b:38:09:be:9b:20:07:48:e6:fd:c0:63:a4:
a0:a5:1e:09:55:5c:b6:b5:86:89:69:a4:bb:5e:74:f2:8c:91:
8a:7d:a4:76:26:6d:87:18:38:0e:8c:64:65:66:36:37:10:a6:
d4:f8:46:3b:b7:b5:a1:88:a9:4c:af:4b:fe:88:b8:bd:cb:e7:
f9:9b:99:38:81:d4:78:61:57:f9:58:06:49:7a:a9:92:ee:2d:
0e:85:55:c9:41:22:8f:43:60:29:e0:43:76:ce:bc:20:a6:6d:
62:71:96:dd:f7:bc:c5:d0:94:b6:1f:b5:69:6f:76:1f:c9:9c:
30:78:7e:7d:6f:6b:de:5d:f5:72:0e:fe:87:1a:64:1a:9b:f1:
f7:e6:f5:f1:1c:26:31:bb:60:fa:fc:45:49:15:f9:4d:e8:85:
29:ff:ed:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:49 2025 by rpki-client