
$ rpki-client -vvf rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
File: DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft (raw, json)
Hash identifier: bflUt8K0vO0pT1ujT2ESqC5zCfdtzQk5ZybUy54+LFc=
Subject key identifier: 83:B1:51:F7:24:FB:EE:31:20:AF:2D:39:7B:9E:8F:59:6F:F8:26:58
Authority key identifier: 0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
Certificate issuer: /CN=A911418D/serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Certificate serial: 05E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
Manifest number: 05D0
Signing time: Sun 02 Nov 2025 23:05:01 +0000
Manifest this update: Sun 02 Nov 2025 23:05:00 +0000
Manifest next update: Sun 09 Nov 2025 23:05:00 +0000
Files and hashes: 1: DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl (hash: JO+3SiIijAy23jFpZt3fDd4azIkajUCbVnGHE15ERT8=)
2: 700C6B5CB26C11F090EFFC69C4F9AE02.roa (hash: JvuZWhBPO64mUK65lgsciVa96c1rAJu0pjA+AFyIAC8=)
3: CB7909B4B26C11F08ED1666AC4F9AE02.roa (hash: 1gL4I2egnCSqsLf7l6tXcfDd5pBtB+GKyBssuG680/k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl
rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 23:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1505 (0x5e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911418D, serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Validity
Not Before: Nov 2 23:05:00 2025 GMT
Not After : Nov 9 23:05:00 2025 GMT
Subject: CN=6907e39d-e55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:92:12:6e:9b:f3:f5:26:72:6f:3e:a4:cf:c1:
dd:96:2b:27:22:6e:af:15:9b:25:8c:ea:db:ca:cd:
ce:51:22:77:c8:66:25:6e:15:a6:08:10:2f:f1:95:
f1:0d:9b:79:31:66:6f:6c:48:5d:a1:db:0a:02:07:
ea:90:0d:c2:27:13:f3:4e:13:4d:1e:c0:e6:2c:17:
d5:aa:73:14:6f:4f:af:d4:20:8d:d5:52:1a:3c:d9:
44:00:c3:b4:a3:e4:5c:15:7a:e1:e3:d6:fd:97:59:
17:c5:b5:25:b9:c5:2a:a9:81:26:4d:93:a3:3a:83:
fa:ef:42:74:d1:24:3f:fb:15:cc:18:45:df:f2:25:
77:7b:c3:3a:10:ad:44:c1:0e:5d:38:da:73:36:49:
02:93:a7:1e:e0:13:25:64:b7:46:f6:ae:80:0f:17:
72:39:de:48:8e:be:5c:e6:7a:cc:2e:69:a1:fd:e7:
63:eb:b9:26:74:d0:e6:2d:43:d2:e8:06:27:97:de:
8e:d6:35:8b:20:2c:ac:d5:14:cb:0b:07:2b:1e:78:
45:b0:30:15:4b:90:11:b4:61:0b:0d:44:cb:94:96:
7e:32:00:72:3c:a4:c2:17:1a:1c:b0:4b:8e:d2:fc:
87:87:1c:c2:5d:97:03:0c:32:b6:b5:51:b7:00:6d:
38:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B1:51:F7:24:FB:EE:31:20:AF:2D:39:7B:9E:8F:59:6F:F8:26:58
X509v3 Authority Key Identifier:
keyid:0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:9d:e5:66:7c:63:41:2f:7a:00:25:6d:51:73:23:02:89:17:
63:61:e1:d5:99:fc:32:27:6c:61:3d:1b:88:0a:6b:b4:b0:f5:
f1:6e:86:bb:6a:fc:da:c6:70:f4:a5:96:46:0c:9d:ae:b8:c4:
f5:c4:06:ad:d2:26:2d:f8:15:fe:97:75:92:d1:ec:ad:79:9d:
2e:72:b7:54:6d:e8:ba:24:16:15:e6:a2:38:67:f8:5d:35:a9:
fa:ad:37:af:26:86:44:8c:d6:12:40:1c:c4:d1:2c:b4:9b:2d:
d2:b8:99:c2:95:dd:78:89:e1:da:af:21:1c:5a:25:db:d9:3a:
16:a4:c4:11:c0:ee:e3:d3:08:a7:5f:d5:56:91:dc:ed:bd:bd:
0a:67:27:8a:62:f1:8e:df:59:1b:dc:7f:7a:01:9a:7d:4a:03:
c2:9e:2a:c8:32:67:e9:76:a0:eb:f5:3e:78:5c:52:e1:33:3d:
ec:71:ae:84:37:73:97:55:67:80:69:0e:41:68:d6:a6:92:8d:
99:e2:06:86:15:00:56:e8:2f:6f:dd:89:65:62:ea:56:51:29:
32:72:05:0d:b3:e5:33:28:0d:22:b0:ce:19:45:65:67:4a:88:
82:5b:8e:7e:66:96:43:97:be:29:35:1d:da:4c:e8:82:13:91:
42:d9:a4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:36:52 2025 by rpki-client