
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
File: PdeY67rvfndLLyx3rvsipM171oY.mft (raw, json)
Hash identifier: TxhEOXJFAQFAXs7YAdQ71MqWcmGK0l4CSgcV1iL/71o=
Subject key identifier: 8C:2A:81:2E:79:27:E8:C5:CE:70:B7:A3:16:F3:BE:69:AA:CD:3F:86
Authority key identifier: 3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86
Certificate issuer: /CN=A918C0AE/serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686
Certificate serial: 074E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
Manifest number: 0742
Signing time: Tue 04 Nov 2025 21:49:15 +0000
Manifest this update: Tue 04 Nov 2025 21:49:15 +0000
Manifest next update: Tue 11 Nov 2025 21:49:15 +0000
Files and hashes: 1: PdeY67rvfndLLyx3rvsipM171oY.crl (hash: W0DrCfpfIgP1JTPCC1VcQv+v/MsB/UtK8VQBrNBy62M=)
2: 23D40B5049BC11EB98F78F66C4F9AE02.roa (hash: bE6+fF3Z2aJLcDObD8suz2TxAd7cotS0UZ/nrStzxDQ=)
3: 246D53F049BC11EB98F78F66C4F9AE02.roa (hash: EjFNRenEr22lcCVrIFxeoH925N5NhrGgL+Mz7mHjB8Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl
rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1870 (0x74e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C0AE, serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686
Validity
Not Before: Nov 4 21:49:15 2025 GMT
Not After : Nov 11 21:49:15 2025 GMT
Subject: CN=690a74db-8acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:99:39:f6:17:b7:db:95:a3:39:9d:c9:7e:5d:
0e:b5:4b:b7:c1:39:db:10:c6:95:9f:f6:1f:de:1e:
bc:23:3a:01:23:03:1a:0b:21:7f:1b:52:a9:09:ac:
8f:dc:4c:d9:dc:f2:15:2b:b6:57:0e:47:68:51:6d:
68:78:b5:c6:6d:aa:ac:31:40:bf:f0:2d:3f:cf:2f:
ec:02:58:ed:e9:17:66:02:1d:7d:03:6a:da:2a:f3:
e0:ec:43:03:82:e5:40:bb:f3:ca:8a:c0:e3:24:61:
0d:02:4b:e4:8d:1b:09:de:70:d4:ec:53:56:89:fa:
d6:5a:80:95:9e:ef:0a:16:f3:d4:42:40:cc:bd:86:
86:4e:af:53:76:6c:0f:23:83:d0:5d:ea:5c:cd:b9:
e3:dc:b1:a1:8a:d1:b4:81:99:75:a7:33:24:29:a0:
96:54:64:ea:8b:be:22:ec:65:3e:12:e4:79:50:91:
a7:b0:e0:22:9f:d1:1b:5b:dc:8e:e9:4e:31:d9:21:
f7:e9:d0:ec:af:c3:e2:97:00:fc:c5:20:f4:5a:2d:
ef:ff:06:c5:21:fb:ae:21:22:d4:e1:77:c0:b3:95:
e5:2c:43:b8:21:01:ec:26:a6:d9:6b:3d:00:5e:d3:
82:b1:a6:59:10:04:a3:5e:71:ef:69:d0:03:f6:5f:
2b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2A:81:2E:79:27:E8:C5:CE:70:B7:A3:16:F3:BE:69:AA:CD:3F:86
X509v3 Authority Key Identifier:
keyid:3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:af:0a:2c:0b:b9:84:68:ea:16:36:eb:54:e8:61:ae:b8:cf:
8d:3a:d8:94:2c:26:4c:a2:f6:ab:70:bd:a8:d4:b6:c2:66:80:
c2:89:ab:60:e6:33:0e:b9:85:66:27:6e:55:fa:a7:ad:d8:c0:
3f:27:5d:d1:c2:b1:fd:dc:75:d8:82:5f:20:15:c4:68:81:92:
04:26:02:f9:e8:0d:63:63:c2:b6:70:d0:26:b8:54:13:25:c6:
30:0a:ef:85:b6:4e:4e:c4:6a:9c:f3:03:2e:d7:19:e9:4c:ba:
cb:bf:4c:30:30:3f:37:26:fd:dc:3d:c1:d5:e7:62:26:a4:42:
58:75:f6:9e:1d:80:dc:6d:d5:08:d9:e4:d2:09:d8:8d:9e:19:
c8:80:25:a1:d2:51:b7:a6:0f:91:18:ef:2e:e8:59:39:dd:76:
94:77:86:bd:b8:76:cd:b2:c2:a3:28:f9:be:5a:99:5c:19:dc:
6b:7d:96:1a:ee:9d:06:99:58:79:a9:ec:b7:fe:ef:14:b2:e4:
d7:e7:9e:37:ec:21:1d:98:35:1b:dd:10:84:0a:5e:5a:9c:01:
19:07:fe:ae:94:05:f0:33:52:b9:41:4c:dd:a9:b3:13:65:62:
b2:58:69:6b:88:29:40:66:c7:95:15:d6:c5:bc:c4:62:0f:03:
8b:53:58:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:35:30 2025 by rpki-client