
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
File: aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft (raw, json)
Hash identifier: V1ujybgLLi0oIEgm1Sji8EEUiiVAk73dwvXyMb6joVk=
Subject key identifier: CC:45:17:B5:74:72:5B:A3:32:5E:96:E6:52:85:BA:2E:06:3E:6F:59
Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
Certificate issuer: /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Certificate serial: 08F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
Manifest number: 0897
Signing time: Tue 04 Nov 2025 20:56:14 +0000
Manifest this update: Tue 04 Nov 2025 20:56:14 +0000
Manifest next update: Tue 11 Nov 2025 20:56:14 +0000
Files and hashes: 1: aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl (hash: K3HGDHREvpaz5SWEqfipsLEz2ALZpOJaU0zykbMFGMg=)
2: 70F51BEE4B0D11EF94975151C4F9AE02.roa (hash: 5OJq3TQL6UcD1e0FTm6+f4tFRojNv3dxN2hOmwh/XMU=)
3: 18F343922A5711EBB59D6526C4F9AE02.roa (hash: 67FA0fogoOEO8ZhRY0Z7X/jNdUDR2kpHHHAZ7zc0DNU=)
4: 14C388C2114311F0B3944E67C4F9AE02.roa (hash: mTf8cQmCDCOr2IAAbGwT5DT/HAjoFjlHGakTn87Xya0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 20:56:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2296 (0x8f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199197, serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Validity
Not Before: Nov 4 20:56:14 2025 GMT
Not After : Nov 11 20:56:14 2025 GMT
Subject: CN=690a686e-9efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:54:52:45:5f:2e:89:8e:3c:73:d9:93:86:2b:
15:9e:2e:9c:59:66:12:4d:e9:04:bc:15:50:ba:e4:
4c:5a:c7:e9:71:80:35:53:4d:84:92:60:6d:e1:82:
1a:8c:12:5f:3c:9b:14:8f:c7:5a:71:53:f6:7a:55:
a9:ec:49:68:5c:3a:9b:04:9b:2f:45:da:a6:78:70:
cf:8f:1a:77:10:76:1d:65:49:97:4f:62:14:c4:4e:
3f:37:0d:e0:85:2e:2e:27:ec:5b:6c:2a:12:83:e5:
30:71:6b:4e:6d:a7:67:15:28:14:d4:fe:8a:4e:aa:
44:8e:42:0e:ff:04:78:6b:ae:9d:0f:23:07:86:58:
87:07:6c:3c:ed:dc:61:8c:eb:54:a1:47:11:87:a1:
c2:f3:db:38:00:52:49:fe:40:b8:10:7f:52:30:1f:
20:2c:67:90:9c:18:2b:2c:30:02:8b:5a:db:f0:ec:
fa:f9:bb:38:49:a7:b7:05:12:26:cd:14:9e:d6:a8:
2d:2a:53:bb:7b:4c:56:cc:65:56:9d:ed:0a:a0:df:
80:25:7f:2e:60:bf:79:45:97:ee:24:7a:e4:1c:fc:
95:8c:ef:ac:f5:29:ff:ce:37:44:8c:4a:44:be:e8:
08:40:67:34:12:4b:b6:d7:1a:f1:ab:f2:f3:38:bc:
be:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:45:17:B5:74:72:5B:A3:32:5E:96:E6:52:85:BA:2E:06:3E:6F:59
X509v3 Authority Key Identifier:
keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:8e:4d:2b:3d:f4:58:f3:a6:4c:cd:98:88:a1:42:34:79:f7:
06:7b:41:50:d0:31:44:3b:17:df:82:f3:da:d1:01:c6:2b:c3:
38:0b:b9:e7:ea:e3:5b:95:aa:47:35:dc:80:0c:f5:3b:ed:e5:
07:da:68:2f:c0:85:31:23:ae:07:cc:63:d1:4e:a5:95:34:f9:
c6:55:9c:76:35:d8:8d:91:7d:5f:5a:6e:01:24:25:30:62:21:
8f:72:89:50:c4:c3:8a:13:bc:96:c7:a1:21:30:75:2b:1f:53:
c7:80:23:fe:8a:58:7d:20:78:04:96:39:34:48:10:58:64:b3:
01:49:58:dc:67:7d:35:b3:df:ae:57:fd:3c:db:1b:49:8b:c3:
3a:6a:73:eb:f2:e7:02:6e:f8:3f:d9:01:10:d1:49:e8:b1:cf:
da:97:7a:65:cd:4a:25:1b:bc:f7:92:ae:fe:c1:1c:1d:e0:f9:
2a:12:09:43:8f:1e:76:5e:70:6a:ee:42:f3:db:91:47:d2:10:
a8:a4:bb:d1:96:87:b1:c7:3f:78:99:ab:37:d0:82:ae:63:14:
09:b2:0e:89:14:3e:28:c2:a1:e1:80:65:de:34:44:84:4e:2c:
0c:e8:86:f3:89:4c:91:65:6e:54:be:48:e1:42:94:e3:bf:35:
be:83:ce:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:42:41 2025 by rpki-client