
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
File: luWqcIJLjRPdz-YfzJogytZeYME.mft (raw, json)
Hash identifier: MjvJlthX40xlRxjRPEYCY8WCfsmCyPvbDsaZgKWZYH8=
Subject key identifier: 9B:70:84:C8:3D:4A:89:A5:CC:65:E1:44:78:F8:33:F2:6A:7E:63:D8
Authority key identifier: 96:E5:AA:70:82:4B:8D:13:DD:CF:E6:1F:CC:9A:20:CA:D6:5E:60:C1
Certificate issuer: /CN=A9155688/serialNumber=96E5AA70824B8D13DDCFE61FCC9A20CAD65E60C1
Certificate serial: 06BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
Manifest number: 06B6
Signing time: Sun 02 Nov 2025 22:11:48 +0000
Manifest this update: Sun 02 Nov 2025 22:11:48 +0000
Manifest next update: Sun 09 Nov 2025 22:11:48 +0000
Files and hashes: 1: luWqcIJLjRPdz-YfzJogytZeYME.crl (hash: keOpRU9zsqQgV+DKWUUz9Ri/yn/XvjKwDVqURPy6Y3c=)
2: 6656B366814C11EB913AEC78C4F9AE02.roa (hash: hWmIjVl3wq2WAFI85MCQWSOZgmGgPc2bb2Ktcia7bs0=)
3: 69FB4E726DC511F08948D952C4F9AE02.roa (hash: 7THfaaI2xr5bkDyTmWI45Sy1DSF1UxvdqjKUDobmspg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.crl
rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 22:11:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1727 (0x6bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155688, serialNumber=96E5AA70824B8D13DDCFE61FCC9A20CAD65E60C1
Validity
Not Before: Nov 2 22:11:48 2025 GMT
Not After : Nov 9 22:11:48 2025 GMT
Subject: CN=6907d724-a566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8e:e6:0c:ed:83:80:65:37:55:79:31:6d:e0:
d9:aa:49:50:ec:f6:6c:e3:fd:da:40:46:c3:2b:e0:
41:21:bd:be:9f:6b:bb:a3:ad:5d:3b:91:ad:68:d9:
78:a8:28:ce:49:fa:34:73:ee:d9:34:13:d4:09:19:
7c:9e:07:27:fb:83:aa:de:3b:ba:62:07:f9:66:c5:
53:b6:d4:c5:7e:cc:bf:13:0e:18:3f:f0:61:61:4e:
f2:b1:28:7b:d5:44:d2:ab:19:72:8f:28:b9:e0:1b:
f8:bf:eb:29:75:df:bd:95:62:78:a9:a2:b3:e2:30:
5a:0d:b4:c0:0b:fa:e9:1a:db:3d:41:2f:5c:6a:eb:
15:b8:f5:ac:9e:10:81:d9:24:96:c1:bd:93:72:8e:
03:56:81:9b:34:21:61:96:56:3f:fe:38:33:32:d2:
b0:7f:b8:3d:46:81:f0:1e:f7:9c:e7:2e:ba:df:31:
29:93:38:8c:1d:7f:32:47:58:93:fe:87:73:6e:63:
35:e2:6e:c4:bc:c9:ef:ec:6a:51:c6:88:69:7a:39:
c1:7e:94:56:1d:34:65:4e:5c:12:03:84:27:4e:87:
80:94:89:9f:ac:34:3a:68:ef:9b:89:bb:d1:81:df:
7a:0c:aa:18:31:9a:e1:93:3a:30:e2:04:35:95:0d:
39:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:70:84:C8:3D:4A:89:A5:CC:65:E1:44:78:F8:33:F2:6A:7E:63:D8
X509v3 Authority Key Identifier:
keyid:96:E5:AA:70:82:4B:8D:13:DD:CF:E6:1F:CC:9A:20:CA:D6:5E:60:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:42:d3:24:73:cc:62:7a:55:38:60:4e:82:f9:c6:aa:0b:93:
63:e3:13:6b:86:7e:41:d3:2e:7d:18:db:6d:cb:a4:8c:ff:98:
3a:66:0a:ee:b9:8a:c7:2f:33:d3:35:2e:55:ec:33:28:90:8a:
a8:99:9d:6f:6b:45:fd:fd:8d:05:6a:34:35:ab:2f:75:b6:99:
cb:3f:65:4e:c8:64:4d:c8:3c:b9:97:7f:4e:39:e3:2b:b6:aa:
8c:c9:10:51:8c:3b:06:a7:f6:71:78:a2:57:7a:52:0e:6d:6f:
48:36:33:12:94:4e:30:cd:b0:b3:a8:57:a5:cb:22:fc:03:e5:
2e:f7:31:d5:29:bb:00:1f:80:60:14:99:2a:18:b3:bb:84:86:
52:5e:d3:4b:ae:06:f4:89:aa:85:c6:fd:88:96:8e:a4:ec:5e:
3c:5c:30:46:ec:9e:8e:a5:85:6b:97:e3:bd:c5:26:5d:09:88:
ae:ec:c6:91:30:83:66:65:81:67:9e:d7:f6:d5:59:49:6f:90:
32:7b:1e:df:4c:8c:a7:54:81:a9:52:83:76:9a:ec:40:49:95:
9f:97:72:75:8a:e5:bc:60:49:12:0c:93:80:de:8d:5a:64:cf:
a0:43:6e:63:2b:51:82:35:48:d2:f9:3e:81:d0:cc:71:7b:8a:
cd:f5:8b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:35:11 2025 by rpki-client