
$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
File: rpODqTtsWhNdJhOpfF3slgliM_E.mft (raw, json)
Hash identifier: zMVtfpmmKPlf4GwheKytIHNdXy4OySQBFcwKAaDvfMo=
Subject key identifier: 9B:C6:F4:10:62:25:CA:2D:D9:AE:3E:BE:7C:29:92:0E:0C:FC:D9:B5
Authority key identifier: AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
Certificate issuer: /CN=A917748E/serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Certificate serial: 023A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
Manifest number: 023A
Signing time: Wed 05 Nov 2025 01:57:20 +0000
Manifest this update: Wed 05 Nov 2025 01:57:20 +0000
Manifest next update: Wed 12 Nov 2025 01:57:20 +0000
Files and hashes: 1: rpODqTtsWhNdJhOpfF3slgliM_E.crl (hash: 1KK8p0HpWa6FQ7S0y4TRIA+pyUtwiy0AeZmxLNTCkuY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl
rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:57:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 570 (0x23a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917748E, serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Validity
Not Before: Nov 5 01:57:20 2025 GMT
Not After : Nov 12 01:57:20 2025 GMT
Subject: CN=690aaf00-7ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:78:39:c7:ae:04:3c:49:01:d7:69:5d:b8:a6:
60:60:e0:8f:64:78:3f:06:6d:8d:13:c9:9b:c7:49:
93:43:38:3d:f7:69:aa:8f:a7:08:2b:5e:43:f6:83:
ab:30:64:26:ec:9f:e0:c6:db:4a:3e:a4:f3:27:92:
df:28:ce:15:0c:67:8b:f8:2b:cc:be:5e:a5:0e:e8:
c9:bd:8d:35:04:91:a1:a7:69:e3:b4:84:34:4b:cb:
02:1c:db:0a:99:90:25:28:85:30:d2:c7:66:d1:e8:
1d:86:af:93:7a:4d:1b:4e:07:3f:cf:ea:81:7e:e3:
8d:35:cb:5d:54:c5:64:10:19:d2:39:d5:b0:14:c3:
b3:e4:4e:20:8c:c2:93:37:91:32:9e:1a:30:1e:06:
24:aa:b2:93:d0:c1:8e:c8:3a:c3:29:54:bb:a7:98:
b2:63:14:d9:22:d6:be:c5:da:b3:37:87:24:9d:d9:
be:1e:de:b9:7c:67:f4:64:49:88:ec:86:b6:56:b1:
f8:21:7b:e5:08:79:ae:15:40:c1:37:85:ce:42:06:
ea:ce:9c:1f:25:b0:15:f2:98:b2:6e:da:1d:ff:df:
79:b8:ae:a7:5d:fe:18:a5:58:18:b3:e9:c1:a1:b9:
33:2c:03:07:e5:ff:5b:70:7d:83:0d:51:11:ae:bc:
bc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C6:F4:10:62:25:CA:2D:D9:AE:3E:BE:7C:29:92:0E:0C:FC:D9:B5
X509v3 Authority Key Identifier:
keyid:AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:18:9c:96:75:ec:a6:12:d5:0b:d8:9f:74:e4:f7:85:5e:52:
62:24:9d:f9:d7:cc:6b:52:39:2a:95:f1:44:82:08:2d:18:58:
e1:8c:2f:71:de:67:d5:1f:64:51:e3:29:fc:18:e2:71:8b:07:
9b:70:7f:66:ae:dc:9f:aa:c9:68:e6:2b:06:c7:37:0c:04:4b:
03:6b:29:81:ff:de:55:3a:ba:a1:b0:de:6b:f1:45:37:b0:55:
a7:2b:85:f3:1f:d0:6d:3c:8a:f0:c8:47:e4:f2:88:b3:6a:8c:
c8:de:0b:a5:a5:92:ff:bd:79:6b:42:1e:00:66:e8:57:2b:4e:
3e:88:66:8d:c0:88:83:4b:a8:92:93:cd:7d:2a:a7:65:3a:ac:
a7:75:d9:c6:bb:25:20:8b:e5:02:b5:ca:ca:66:42:b6:3e:a6:
02:5a:ab:a7:eb:91:26:5b:60:0f:b7:81:cc:fc:d4:c3:22:64:
3f:f1:4b:08:e1:03:49:4e:af:f1:04:99:5e:02:0d:19:c3:14:
ad:b3:b6:26:9e:73:8f:a3:07:b8:b6:72:b7:4f:34:69:49:2d:
3e:af:7d:66:3b:ac:92:16:48:cf:f7:27:4e:5c:38:0f:58:8c:
80:59:bf:f8:ee:f1:ff:ad:5e:ce:d2:67:9a:eb:ee:3e:19:47:
c4:a5:53:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:03:12 2025 by rpki-client