
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
File: -JdCLlAQBtJgHYWlAXlTJrr-c4g.mft (raw, json)
Hash identifier: E662JDp2sE7CQSNOyfMRzuf57JCLMVHlsdscb1QQKdk=
Subject key identifier: 80:AE:E3:8A:8A:C9:61:27:D2:66:66:E7:33:5A:2E:35:B4:63:7A:BD
Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
Certificate issuer: /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388
Certificate serial: 01A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
Manifest number: 0613
Signing time: Wed 05 Nov 2025 00:13:19 +0000
Manifest this update: Wed 05 Nov 2025 00:13:19 +0000
Manifest next update: Wed 12 Nov 2025 00:13:19 +0000
Files and hashes: 1: -JdCLlAQBtJgHYWlAXlTJrr-c4g.crl (hash: zLosMwFuZWVzy5bvOSW2gUBp3GPYd0F/b0AgcrOktGs=)
2: C5C77866584111EE85E40820C4F9AE02.roa (hash: h7NQdBf7/WACdOSa/nz3xaJMmARVVv7RYZRpaElBghA=)
3: C55784DE584111EE85E40820C4F9AE02.roa (hash: 6joZNeakIUjEpd+YMt0FiTiaFqDSbAMcOBqVVrqw5x4=)
4: C44DEE8E584111EE85E40820C4F9AE02.roa (hash: nlYpAXZDAkP9jxeYqTWJb2nQcc7Mu88sU4gd4loVu3I=)
5: 8F60E314584D11EE90C6141EC4F9AE02.roa (hash: iJ4zqOfhJNhHuoAZdvWWzKmADnr0nYywfMeTT9vEa3M=)
6: C4D7F9DA584111EE85E40820C4F9AE02.roa (hash: iwHI+lWhCkdLiN75C3FH0nP3GqiBf7AEpFh/Xx5uzNo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl
rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170829, serialNumber=F897422E501006D2601D85A501795326BAFE7388
Validity
Not Before: Nov 5 00:13:19 2025 GMT
Not After : Nov 12 00:13:19 2025 GMT
Subject: CN=690a969f-1c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b1:59:26:13:16:c4:13:2b:20:68:bd:99:af:
b3:0c:d4:26:64:80:b3:96:0f:f9:45:a2:4a:54:b1:
19:36:56:7b:7a:4a:80:42:90:27:21:cd:39:fc:a3:
6c:7f:a2:55:be:64:3d:f7:b3:22:a9:d8:82:1d:df:
c3:b0:76:0a:8c:ef:94:d3:79:1f:0a:37:42:8e:8c:
d4:7d:e5:5a:3e:df:47:32:d0:d4:a4:a6:f0:7c:8f:
54:9a:86:68:3e:60:1e:ab:51:6f:48:fe:99:b1:7f:
b7:98:4d:41:9b:eb:fd:a5:91:2e:b1:bb:4b:18:71:
ae:1e:68:ad:1f:ca:df:c9:8c:f6:ed:a9:ef:73:55:
b6:42:05:69:37:79:0c:7b:7f:1a:b4:a3:0e:19:38:
ad:84:cf:e2:38:8e:f5:f0:22:f4:b5:2f:be:28:19:
4d:de:03:3d:de:b1:24:cd:9a:76:4a:d2:5c:df:08:
95:81:22:3c:02:eb:90:8a:12:21:95:1c:9a:eb:d6:
75:0c:b5:6a:07:7e:61:85:3a:b8:f5:45:7d:12:f5:
15:64:2b:23:25:e6:d8:f1:36:1a:ec:27:ff:a3:1e:
54:16:ff:d6:64:2e:6e:4b:21:22:d2:2b:7b:45:e1:
61:7f:5c:96:30:df:da:88:46:58:a9:15:01:a9:cb:
6c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AE:E3:8A:8A:C9:61:27:D2:66:66:E7:33:5A:2E:35:B4:63:7A:BD
X509v3 Authority Key Identifier:
keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:91:4a:e5:ef:73:c5:03:31:73:0d:bd:fb:9e:1b:36:75:23:
68:41:10:51:ea:b5:eb:34:a3:09:d4:04:f4:7d:22:7a:42:ba:
69:5f:d5:b8:17:d3:5f:a0:27:f6:47:b8:3b:a7:a2:8a:1a:6a:
c4:c3:84:64:ce:bf:91:7a:94:9a:51:04:cc:a4:c4:d3:1f:95:
36:0a:91:8f:c4:d0:9c:dc:2a:56:e9:59:78:86:9d:80:9e:00:
3f:86:f9:d0:a0:b4:aa:14:46:ce:88:21:88:df:e7:f8:ac:da:
8c:fc:7e:25:5a:9e:b0:56:74:4a:99:21:7b:71:ba:35:ba:95:
3a:c0:58:79:9b:ac:ac:78:11:e8:3f:01:59:0e:e9:c4:07:7a:
e1:49:b0:83:fe:de:30:93:ec:59:bc:ee:7c:ba:42:4e:fb:23:
be:e5:3f:59:39:8f:16:2d:87:12:6b:28:fb:0a:fa:b6:2a:77:
c7:50:aa:cd:65:ff:88:81:1a:23:a9:f6:9f:74:c3:ed:59:c2:
db:da:0e:18:3d:2a:35:ad:e6:de:55:9d:ac:e5:3b:1f:57:e1:
e3:27:b1:b8:10:e9:75:06:7d:74:5e:59:02:80:22:dd:13:db:
a3:ab:31:a4:44:1a:5a:eb:c0:2f:7e:43:c3:f9:e2:39:73:f2:
ef:e5:1d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:18:51 2025 by rpki-client