
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft
File: 9VqsRorxZKWTnXLq_dOkczp5lgk.mft (raw, json)
Hash identifier: 4CqTQgQ4QpexD5hlYzYd83rtlqFHpLRZcG4c1IjEyMs=
Subject key identifier: 69:C6:EF:39:56:52:9A:B1:76:EE:DD:C3:50:3A:E5:BE:2E:1E:10:6E
Authority key identifier: F5:5A:AC:46:8A:F1:64:A5:93:9D:72:EA:FD:D3:A4:73:3A:79:96:09
Certificate issuer: /CN=A915CF83/serialNumber=F55AAC468AF164A5939D72EAFDD3A4733A799609
Certificate serial: 0686
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft
Manifest number: 0684
Signing time: Tue 04 Nov 2025 22:29:49 +0000
Manifest this update: Tue 04 Nov 2025 22:29:49 +0000
Manifest next update: Tue 11 Nov 2025 22:29:49 +0000
Files and hashes: 1: 9VqsRorxZKWTnXLq_dOkczp5lgk.crl (hash: oOgc8aseYOLMVsvqgsZpokmPG3dQsr563XIktJ0xqkE=)
2: 3F3A8E86912511EBB0270738C4F9AE02.roa (hash: zJD2DUaHYLIs6MFcD7dM939RjwobVqjAJWT+0osciMA=)
3: 3E6BCA6A912511EBB0270738C4F9AE02.roa (hash: A9rThl3FoOc3UI4pEM8sFZ4EouFKASPqDt9/k6x5psA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.crl
rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1670 (0x686)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CF83, serialNumber=F55AAC468AF164A5939D72EAFDD3A4733A799609
Validity
Not Before: Nov 4 22:29:49 2025 GMT
Not After : Nov 11 22:29:49 2025 GMT
Subject: CN=690a7e5d-a8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:97:33:12:ad:35:ac:70:50:46:9a:c9:46:b2:
a9:47:12:14:b1:99:09:18:2f:e6:84:dc:40:9f:43:
81:63:eb:fe:88:48:70:64:0f:77:5b:7d:f4:20:71:
1e:bf:9b:61:2a:a5:12:84:00:64:49:6c:c5:6d:8d:
02:05:c3:e0:9c:d2:9e:1a:68:e5:13:a5:da:d0:48:
37:e5:4b:cc:5a:4d:9a:95:26:48:53:af:49:c8:c9:
fe:e2:6a:ea:3b:37:18:ce:7c:ee:a6:ab:a8:30:e1:
74:16:b3:94:2a:57:df:95:53:01:8c:c0:2c:37:1c:
23:83:e7:28:a8:1a:e0:fe:be:86:00:3b:ba:06:0e:
d7:4a:9a:0e:49:75:e2:6d:a6:77:b5:1f:09:72:40:
1d:61:4d:b8:62:9b:ac:db:d0:62:43:74:82:69:e9:
e4:bc:8c:60:87:90:20:12:36:09:7d:4e:0e:20:9f:
07:4f:9b:a6:de:45:4a:b7:72:4b:41:26:37:ad:69:
42:52:47:c2:6c:05:a2:77:4e:dc:58:3c:71:47:ff:
e0:10:44:24:05:2e:fb:ad:df:79:89:94:a1:18:d7:
c6:4f:00:7e:bc:4f:0f:72:c4:43:e9:95:be:9b:48:
bb:63:31:4b:68:75:28:e4:05:61:47:8c:4b:d7:b5:
09:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C6:EF:39:56:52:9A:B1:76:EE:DD:C3:50:3A:E5:BE:2E:1E:10:6E
X509v3 Authority Key Identifier:
keyid:F5:5A:AC:46:8A:F1:64:A5:93:9D:72:EA:FD:D3:A4:73:3A:79:96:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:b1:76:e7:a3:1d:fa:33:8a:9e:29:9d:9c:cd:6f:89:b5:9e:
26:52:72:8d:75:41:fb:21:46:b1:f6:a8:9c:6f:ff:6e:0a:25:
91:db:45:60:4c:1c:2d:a7:f1:ff:2a:c0:2b:c8:27:bb:44:c3:
0c:0f:66:6f:2a:d2:3f:d8:c1:40:ec:1f:1d:18:46:4d:90:ec:
cf:f5:06:1a:e1:cc:ad:84:29:39:2f:dc:58:1d:42:9c:fe:6d:
a4:e0:8a:4a:78:29:60:4e:81:9d:8c:e3:9a:fe:5c:2b:ae:fd:
db:af:96:61:92:49:23:64:f8:cb:a8:5e:58:93:0b:ef:3a:90:
c6:55:84:fe:8b:27:a9:4a:9c:6c:36:a2:51:92:87:31:ad:44:
cf:5c:02:fd:b1:44:33:82:73:8d:15:2f:23:cb:4f:03:d5:94:
70:4a:1f:e3:91:84:49:24:38:15:eb:80:e1:73:25:fa:ef:62:
5d:60:6e:07:0a:24:c5:6c:dd:9d:e1:2f:d8:06:5f:33:d3:c9:
11:3f:50:d4:f9:a9:5b:95:cd:73:da:f6:d7:b8:eb:b6:fb:fe:
12:dc:31:bd:08:c5:e0:88:67:94:4c:9e:47:f6:0f:5f:77:d2:
e5:31:a7:d7:3f:cd:eb:12:9a:53:ac:df:d8:57:92:f7:14:5c:
cc:f3:06:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:43:56 2025 by rpki-client