
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
File: OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft (raw, json)
Hash identifier: HivkuQpvRza36U6uTYRmvFpLLCUbtYyLMc8Dgoq7Z9g=
Subject key identifier: 51:78:2D:94:7C:E8:8C:39:04:75:B6:85:7C:C1:E6:7E:BB:DA:89:A5
Authority key identifier: 3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36
Certificate issuer: /CN=A9186C66/serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736
Certificate serial: 266F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
Manifest number: 265E
Signing time: Tue 04 Nov 2025 15:45:47 +0000
Manifest this update: Tue 04 Nov 2025 15:45:46 +0000
Manifest next update: Tue 11 Nov 2025 15:45:46 +0000
Files and hashes: 1: OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl (hash: tjZSfs4a6woERzWwnHeasO6YIKCSTVGEiWZpmbQyCw4=)
2: 02DB5704B0F211E58974874FC4F9AE02.roa (hash: 80axerWiZ6cd/ywlGklwH07eZfaJzXVmfhf4nrdmoFQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl
rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 15:45:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9839 (0x266f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186C66, serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736
Validity
Not Before: Nov 4 15:45:46 2025 GMT
Not After : Nov 11 15:45:46 2025 GMT
Subject: CN=690a1fab-d226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d2:f0:47:9b:50:7c:51:74:14:b5:df:aa:d3:
70:65:88:09:e2:76:bb:3c:85:da:1f:2d:29:4b:fe:
7e:ba:12:2c:f1:12:44:e8:a2:0a:ba:4c:b3:70:25:
33:61:5f:77:53:d7:63:37:4e:cf:3f:c8:8d:cd:27:
07:b6:40:ee:d0:3c:12:9a:67:d4:05:c9:0e:f1:b6:
21:c7:aa:ce:78:d8:7c:95:38:22:3d:1e:c8:7c:c1:
1d:45:53:24:39:06:47:1c:f3:b5:15:a8:b7:d8:b0:
8a:6d:31:cc:a9:c0:cd:03:3b:27:3f:af:55:89:3c:
46:ad:47:39:28:07:87:1e:2f:92:80:88:71:30:e8:
7a:ae:22:56:d6:fe:6b:0a:08:9d:d6:47:2a:fa:01:
b2:8a:52:bc:cb:45:95:7c:db:78:2f:08:25:44:6c:
28:ef:70:5e:bd:40:99:3c:7d:95:71:d8:1e:a3:06:
59:53:1b:90:63:90:e8:59:fa:97:60:1b:f9:a2:cf:
ea:c0:b2:6e:a9:07:7c:71:4e:a9:64:c5:f1:11:ae:
c3:44:ea:28:7f:dc:d2:c1:19:3e:90:4c:92:1e:57:
df:03:92:80:f1:33:6c:a7:53:5d:5b:82:c8:d8:74:
97:e5:38:e0:c5:02:ee:9e:d9:84:20:a9:c9:54:f3:
df:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:78:2D:94:7C:E8:8C:39:04:75:B6:85:7C:C1:E6:7E:BB:DA:89:A5
X509v3 Authority Key Identifier:
keyid:3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:1b:d4:66:5f:43:53:62:00:8f:ca:14:6e:30:a2:eb:76:e7:
73:46:c2:ea:f5:24:05:ee:bd:cb:6a:eb:cb:55:53:ce:56:99:
04:ae:47:9f:8f:11:a2:2e:e2:44:55:8c:3d:00:0c:37:83:9b:
fd:a2:a9:ae:3b:41:1e:18:e9:33:f2:43:42:44:01:d9:2e:cc:
85:06:21:e0:fb:6a:e7:08:6b:ed:6c:81:a3:cd:b5:f0:15:02:
4a:25:59:67:40:2f:5a:a1:05:1e:d1:d7:60:14:e6:e7:a3:0b:
04:3f:d3:7d:9b:53:90:dd:72:df:02:58:22:5f:19:df:51:b3:
98:0e:4a:8b:83:5c:31:87:61:f7:2a:80:1a:66:da:4a:7f:a1:
21:37:be:48:d2:03:7b:61:17:95:95:23:be:47:f8:28:8b:bd:
31:87:ac:b4:52:ee:19:9b:ce:2a:84:98:0c:43:7c:e7:67:1c:
d7:c6:bf:12:f7:1f:82:ea:fd:0f:71:c4:25:c4:46:93:53:9f:
b6:b5:1f:74:e4:aa:3c:e1:2f:82:16:b4:71:38:8f:d7:3c:83:
ad:bb:d6:c4:b3:66:f2:cc:02:86:94:66:87:73:d3:d6:b4:cd:
2f:74:1b:9d:0c:e2:9e:c6:e9:38:0a:7a:2c:63:be:51:29:bc:
8d:20:07:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:12:55 2025 by rpki-client