
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
File: Psg0IE1rqvmRQMA712IRRcB7umI.mft (raw, json)
Hash identifier: G6o3VM9abPopGVZF3auHX+tGQmSDt9jPctvHHZblRE8=
Subject key identifier: B3:71:68:90:0C:9E:06:0B:C6:62:A8:82:8F:B8:BE:E9:17:2A:73:EA
Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
Certificate issuer: /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Certificate serial: 34EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
Manifest number: 34DF
Signing time: Tue 04 Nov 2025 15:11:53 +0000
Manifest this update: Tue 04 Nov 2025 15:11:52 +0000
Manifest next update: Tue 11 Nov 2025 15:11:52 +0000
Files and hashes: 1: Psg0IE1rqvmRQMA712IRRcB7umI.crl (hash: +lrI3RFEISgpnJwUFDdKV9VXhCIegd+sJeirJzQrGJ4=)
2: E7DDE5B8682811EB8D635520C4F9AE02.roa (hash: JPpUiaz8as6ncagKgyuUXaP5ZRdmrTGzakjmAvPZHY0=)
3: E73006AA682811EB8D635520C4F9AE02.roa (hash: 3dh9yLLZm2+U6xobWuHKGIC0VGl5iGyZmQBPzOFbKDA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 15:11:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13550 (0x34ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196D24, serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Validity
Not Before: Nov 4 15:11:52 2025 GMT
Not After : Nov 11 15:11:52 2025 GMT
Subject: CN=690a17b9-ca19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:15:0a:9b:48:f8:a3:01:ea:c4:37:a7:db:63:
aa:39:af:c9:5a:13:ad:20:a2:fa:5d:e1:99:1f:a7:
5a:3f:f3:c7:8a:d3:6c:e9:0b:64:e7:e9:2e:41:57:
06:55:c3:71:87:81:8c:bf:97:51:18:55:09:5b:a0:
72:05:5e:d4:86:9d:38:36:3c:6d:cc:f4:41:b9:94:
ba:c1:f6:e3:f4:c3:fe:af:94:22:55:66:7d:ea:db:
fe:1e:0c:29:c7:c7:48:83:cb:5e:dd:e6:68:4e:2c:
b7:89:68:04:77:b2:f7:d3:14:27:6a:77:81:e2:0a:
38:01:1d:1f:39:68:58:f0:a1:51:66:c3:4c:64:28:
f3:cc:df:35:20:44:d9:dd:16:cf:9e:38:6c:a7:17:
00:c7:a2:7c:e6:52:92:e4:44:b1:16:59:6a:ff:a1:
10:5f:93:0e:c8:d8:2b:c9:04:23:45:9b:0c:a0:a2:
d3:f2:55:8d:16:67:52:9a:d8:f1:33:3a:2e:8e:36:
b3:40:e9:ca:eb:86:32:49:3b:56:c5:fa:6c:58:f4:
52:51:a3:b7:2a:e1:e7:d6:49:8b:bf:ad:61:98:8a:
c8:da:00:bc:89:04:fb:24:7b:b9:51:54:1b:5c:33:
b1:0b:db:22:4a:de:59:9f:47:69:c9:25:7c:b7:bc:
b8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:71:68:90:0C:9E:06:0B:C6:62:A8:82:8F:B8:BE:E9:17:2A:73:EA
X509v3 Authority Key Identifier:
keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:f5:70:9e:c1:9f:95:d4:b8:05:50:5c:71:ec:53:55:7d:9d:
02:d8:74:b0:e7:5b:75:da:85:35:6c:04:28:c8:50:de:d6:e3:
32:28:bb:06:98:56:1c:4c:b3:14:c9:97:90:c3:e1:5a:64:aa:
2e:2d:a9:1f:c2:96:61:bb:ef:a4:61:95:a0:74:0a:a2:26:dd:
de:ed:63:03:2a:69:e6:cf:06:3d:9d:5d:e1:84:e2:12:0d:ca:
f6:5c:4f:70:15:18:73:d3:34:27:04:73:ee:3b:22:bd:fb:9b:
43:7e:97:a2:49:54:24:1c:b6:b9:8c:30:00:16:13:67:33:be:
ca:61:bf:e2:30:23:46:1a:69:af:2b:53:03:97:cc:57:6d:aa:
62:48:57:0c:4c:72:60:ab:c3:9d:54:b0:ce:57:83:f1:54:42:
40:53:31:0c:33:e8:c6:6a:55:2f:b4:09:26:d6:98:dc:e7:51:
70:0f:9a:f5:27:f7:3c:4c:8f:59:d3:b5:70:e8:fb:61:3d:e0:
b1:bf:af:7c:a3:91:3e:cf:6b:65:96:b5:c7:34:04:a7:46:cb:
fc:79:7d:94:55:8a:fd:25:98:d3:2d:59:a9:2c:87:89:9a:1f:
43:3b:c9:4b:dd:a8:cf:a3:69:bb:f7:96:29:9f:bc:fa:3e:cf:
f8:fd:12:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:28:58 2025 by rpki-client