
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft
File: d_7bUqwSiVBJ40An4RJqb9FRHu8.mft (raw, json)
Hash identifier: 2QssUAMEHn4NZXmlgrq5IM700eGRGmZZz0LUt9E++Xw=
Subject key identifier: C7:F4:93:2F:31:95:49:45:23:3E:DB:87:66:39:52:3E:07:D4:60:7E
Authority key identifier: 77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF
Certificate issuer: /CN=A9114D23/serialNumber=77FEDB52AC12895049E34027E1126A6FD1511EEF
Certificate serial: 34D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft
Manifest number: 34D2
Signing time: Sun 02 Nov 2025 15:04:31 +0000
Manifest this update: Sun 02 Nov 2025 15:04:31 +0000
Manifest next update: Sun 09 Nov 2025 15:04:31 +0000
Files and hashes: 1: d_7bUqwSiVBJ40An4RJqb9FRHu8.crl (hash: hvhMkLZ8Fl7TLF+SlHP2PC1gKpmOAEaDF7W+0McodHw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.crl
rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 15:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13522 (0x34d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114D23, serialNumber=77FEDB52AC12895049E34027E1126A6FD1511EEF
Validity
Not Before: Nov 2 15:04:31 2025 GMT
Not After : Nov 9 15:04:31 2025 GMT
Subject: CN=690772ff-849e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6c:33:0b:fd:c4:48:89:9a:42:51:ce:f8:78:
24:c9:d2:ba:43:dc:0a:92:25:fa:fd:de:d9:e9:7e:
6e:a9:48:5b:5f:70:c6:bb:36:f8:7d:71:66:ff:af:
48:1a:5e:5c:18:ce:b6:6a:d4:e5:3b:31:8b:35:11:
9d:d0:7a:6e:c1:82:60:54:b7:a4:36:62:67:7c:c7:
86:8d:df:2c:3e:25:8c:0f:ca:95:c5:84:8a:9b:d5:
23:03:c7:0a:21:62:5f:12:af:05:59:62:1d:50:a5:
6d:90:69:c9:ac:51:d1:55:82:ef:d3:80:a8:cb:93:
dd:64:1c:47:e1:ec:ed:0f:da:46:9b:ec:b8:3e:a8:
43:83:57:59:7d:3f:57:60:07:a0:32:17:28:ee:4b:
1b:1b:b8:53:5d:4f:96:14:23:0b:42:f1:ec:1d:8e:
d0:1d:f5:c8:be:a5:ee:3e:b0:cb:4b:58:18:1f:ae:
d2:6e:21:10:2b:8b:44:cc:b0:9d:4a:d6:e2:a6:1a:
58:67:6b:d3:a1:0e:d5:8b:d1:cb:df:9a:4e:46:b7:
0f:eb:98:98:35:02:ec:e7:5a:56:8a:be:f2:37:06:
50:c4:07:50:72:fc:f6:06:88:31:bb:f1:0b:ac:6f:
77:ba:b4:5b:c1:65:86:bd:85:1b:86:29:d4:37:e4:
c4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F4:93:2F:31:95:49:45:23:3E:DB:87:66:39:52:3E:07:D4:60:7E
X509v3 Authority Key Identifier:
keyid:77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:7e:d7:d0:2e:e0:fe:e2:a0:dd:48:aa:75:56:41:c3:99:cc:
2a:42:28:90:ae:6c:cc:f8:26:db:5d:60:89:0b:b5:70:e9:a1:
77:ec:86:6f:3b:83:d0:e4:16:02:7e:08:df:11:6e:b3:1f:e4:
36:24:29:59:79:ee:23:e3:b9:98:b6:8b:87:db:00:76:b8:93:
c5:c6:65:46:e5:a0:ef:16:63:f5:a5:b3:0f:50:6a:d8:97:c3:
c6:07:b6:be:30:b3:04:8e:f7:7a:4d:c8:d2:79:b2:b9:ac:a3:
61:76:46:01:ac:88:33:d1:13:dc:59:b7:d3:d5:fe:4c:46:6d:
18:50:b9:7d:f6:59:9c:4c:66:52:28:1a:68:ce:6e:84:92:cc:
dd:a9:c8:87:bd:7a:5e:7c:95:63:e8:69:19:1d:2a:0c:ed:9e:
10:5b:60:46:4c:3c:3f:8a:45:e0:1a:52:3b:62:ae:76:8e:20:
32:e4:df:c3:81:33:f2:e6:54:f4:b2:05:de:c4:43:0e:db:37:
34:79:60:ca:16:6b:60:29:a8:6e:8e:73:e9:13:0a:f6:9a:a8:
58:1c:ab:db:01:f8:b6:22:8b:91:c8:db:39:b4:a2:d4:72:b5:
7a:ce:9b:9e:fb:b8:75:ae:de:08:20:a7:6a:ab:2e:5f:2d:b8:
a6:c4:c1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:10:05 2025 by rpki-client