
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
File: 2nNptJciuhObe2DznIi0m9uzXz0.mft (raw, json)
Hash identifier: MYi60sOTUJiUzWhunViuoRLYY150jSsJ05FdOa1R5Mw=
Subject key identifier: DC:B6:56:D1:15:03:A9:84:8F:57:9B:0F:FE:99:7B:28:2D:BC:D8:84
Authority key identifier: DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D
Certificate issuer: /CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
Certificate serial: 01AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
Manifest number: 019C
Signing time: Mon 03 Nov 2025 03:26:10 +0000
Manifest this update: Mon 03 Nov 2025 03:26:09 +0000
Manifest next update: Mon 10 Nov 2025 03:26:09 +0000
Files and hashes: 1: 2nNptJciuhObe2DznIi0m9uzXz0.crl (hash: xNQMEc7kVMM9BXQygLvsi9f+WGdJt9R95nMEZ7qP0Do=)
2: C12ACE6AC17E11EE95D6821CC4F9AE02.roa (hash: 0VizvwlSvt2Typg26qLoIMnU5PdKIxjIiPdXQB++0ps=)
3: BBBEDEF46C8211EE866F5A78C4F9AE02.roa (hash: rX9KVe2qszOUPjT1pbGC+LrjEbspt/xxl2Uq6dePAdc=)
4: B7FD006A50F411EEB2008729C4F9AE02.roa (hash: HsYr8OmdjYIdRArCv8NBd7tL5J9ojAyKHb00KhjW28U=)
5: 585745526BC111EEA163E774C4F9AE02.roa (hash: Ks2Urn2far+/DcyQBS8MOk0s9n2RR8VYAIzSipmPvMk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl
rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 03:26:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426 (0x1aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E623, serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
Validity
Not Before: Nov 3 03:26:09 2025 GMT
Not After : Nov 10 03:26:09 2025 GMT
Subject: CN=690820d2-8dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d3:93:13:0c:ba:20:94:91:31:54:a0:11:7d:
67:30:06:53:ee:47:8b:3d:2f:82:72:52:ff:52:ba:
9f:77:9e:f0:7f:9c:ea:b4:17:2e:af:a8:2f:a2:b2:
ca:84:3a:7e:9e:37:43:0d:dd:72:53:10:4e:5f:3f:
3a:95:f4:90:92:98:55:31:e3:df:80:a1:fb:72:0e:
b4:d6:9a:69:32:0b:d8:f2:ab:53:a6:cb:78:9d:f8:
ac:fa:fb:bc:63:18:9b:45:76:4d:8b:3a:d1:2c:a1:
3b:27:3a:bc:df:01:3c:bc:37:5c:71:17:1a:b2:94:
89:8f:f0:ff:5e:2e:bd:00:35:a7:f3:6f:0f:a2:90:
26:9a:c9:16:f5:c4:45:c5:a3:12:b0:e0:13:3c:af:
b2:9b:b2:0a:ad:d1:78:a7:de:c0:1d:26:f9:36:a0:
09:30:2c:6c:83:fc:91:09:63:12:80:a2:bb:2e:38:
31:1e:77:6c:9b:b3:19:12:8b:d3:17:66:d7:1a:36:
7d:14:a9:92:f0:4d:51:3d:2d:b5:b1:88:d1:83:7e:
d9:09:5c:94:38:11:cc:d8:cc:e9:c7:aa:25:94:d1:
e9:bb:9b:52:99:a4:bf:bb:b4:bf:a1:af:21:8e:95:
d0:92:48:c0:54:67:47:25:58:75:f9:16:91:e5:e4:
34:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B6:56:D1:15:03:A9:84:8F:57:9B:0F:FE:99:7B:28:2D:BC:D8:84
X509v3 Authority Key Identifier:
keyid:DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:69:b4:7f:65:c5:8c:19:08:8b:02:fe:94:7d:14:ab:2a:5d:
a2:b6:60:50:a7:4a:83:2c:34:10:56:ac:3b:f9:3d:fe:fe:75:
90:f2:d4:8a:4b:46:95:ac:2d:c4:a1:97:22:b2:e8:f6:a2:d4:
8d:80:ad:ac:fa:c2:81:ee:94:80:59:3b:53:41:4c:ae:57:84:
e0:68:e0:1e:67:2c:d4:55:a7:88:fa:6a:1e:3d:dc:2c:20:99:
df:05:e9:fc:eb:01:c0:76:92:5a:26:14:c2:07:b3:4d:80:66:
ed:4d:fa:73:60:39:9a:90:26:6c:f6:d2:80:2b:c1:33:68:4a:
54:79:45:91:92:2a:ad:d3:54:0e:45:0c:59:0f:0b:41:36:b3:
ee:ef:5a:76:e5:09:1b:78:79:29:09:f6:c0:be:7a:98:70:cf:
07:3b:ff:3a:bf:7d:ff:c9:07:94:31:be:f0:ff:4c:44:a7:38:
88:b6:6a:f9:40:f0:4e:dc:68:47:ca:c1:f1:4c:66:b4:b4:89:
23:ba:23:89:1c:f7:5c:c8:e4:5d:29:9b:e2:9a:e1:70:06:36:
21:15:90:e4:3f:97:49:cb:d0:a8:2b:64:88:1d:2a:86:8d:0b:
d7:21:b5:c0:7f:1c:8a:3f:ad:83:25:80:03:02:88:7d:3f:d0:
48:c5:a3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 12:34:53 2025 by rpki-client