
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.mft
File: dRqLPVti6B9GpMe9RpW_OoBpyj4.mft (raw, json)
Hash identifier: vjA1V0P+Lx/MRTK1+lPQLdE949b6MhJ+/bo+kgBQbGs=
Subject key identifier: 6B:4F:EA:25:63:44:79:BB:23:96:28:DF:C7:26:F3:D6:D9:61:79:29
Authority key identifier: 75:1A:8B:3D:5B:62:E8:1F:46:A4:C7:BD:46:95:BF:3A:80:69:CA:3E
Certificate issuer: /CN=A9119010/serialNumber=751A8B3D5B62E81F46A4C7BD4695BF3A8069CA3E
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRqLPVti6B9GpMe9RpW_OoBpyj4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.mft
Manifest number: 0CF0
Signing time: Sun 02 Nov 2025 18:30:45 +0000
Manifest this update: Sun 02 Nov 2025 18:30:44 +0000
Manifest next update: Sun 09 Nov 2025 18:30:44 +0000
Files and hashes: 1: dRqLPVti6B9GpMe9RpW_OoBpyj4.crl (hash: pkr8WohQM6yzwb8b+A6CIXEKUN93T+Vzqw/My0SI6s8=)
2: 6AAE9EC03C6D11F0890C1546C4F9AE02.roa (hash: Fjs0TU9gzU04QRaG0LDDD3BWVYWiyk2BOJBnhSA8Uzo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.crl
rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRqLPVti6B9GpMe9RpW_OoBpyj4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 18:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119010, serialNumber=751A8B3D5B62E81F46A4C7BD4695BF3A8069CA3E
Validity
Not Before: Nov 2 18:30:44 2025 GMT
Not After : Nov 9 18:30:44 2025 GMT
Subject: CN=6907a355-fbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4a:bb:71:a3:9c:bd:dc:3a:23:97:16:0f:57:
a1:71:7e:0b:be:8f:63:90:3c:d7:2b:64:4f:50:bc:
9c:7c:ad:f5:e2:22:18:07:84:37:93:2b:fc:73:b1:
d6:a9:4e:4e:0d:4c:a6:67:d8:fe:ae:89:36:65:dd:
46:58:8b:63:a2:b3:38:cd:83:89:7a:a7:37:26:cf:
b4:75:68:0c:b9:a4:95:66:78:6f:0e:d5:fa:09:d0:
72:aa:81:8a:64:d1:64:0b:21:bc:1c:3d:9c:73:47:
cc:00:43:a8:96:1d:2a:f5:0f:4b:0b:eb:18:f9:f9:
be:de:47:3a:23:1d:b7:57:5c:cf:d8:9d:e6:f7:00:
aa:7e:cd:31:a4:0c:62:e1:17:35:a9:7b:2c:0d:46:
35:4a:83:61:99:4d:83:dd:c6:5a:97:97:1e:45:67:
53:b0:2f:47:e0:fd:17:91:d2:30:52:ff:d9:63:4b:
55:5b:e2:c6:b4:83:4b:a1:91:d0:7e:42:c0:9c:37:
3e:24:da:52:3f:16:cc:a1:5a:ef:bf:a6:c8:fb:54:
3f:69:cc:5a:cf:ec:24:4d:c2:b2:84:b7:d2:96:8f:
c7:ac:b4:67:ec:a5:5a:a4:4b:8b:62:4f:03:a9:ea:
39:56:7d:ca:dc:5a:dd:2b:c6:bf:70:f1:c3:c2:ac:
26:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4F:EA:25:63:44:79:BB:23:96:28:DF:C7:26:F3:D6:D9:61:79:29
X509v3 Authority Key Identifier:
keyid:75:1A:8B:3D:5B:62:E8:1F:46:A4:C7:BD:46:95:BF:3A:80:69:CA:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRqLPVti6B9GpMe9RpW_OoBpyj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:18:30:3c:66:58:17:f9:e6:12:76:7c:1a:6e:b2:c0:f5:21:
a1:17:a6:0f:f5:e9:97:74:b5:f2:c7:c4:6c:87:5a:27:1f:7f:
a2:c5:32:00:50:76:b0:ee:5e:30:19:76:f2:62:88:21:2e:37:
6d:3f:7b:0f:83:5f:a2:86:8a:aa:40:00:47:ba:49:57:97:ba:
1e:f3:d5:eb:40:4b:b5:15:63:f8:1b:b4:5e:f6:ce:5f:ac:ac:
e4:89:26:56:ba:e6:61:5e:73:af:ce:77:dd:78:8d:db:26:19:
6b:15:67:5b:72:cc:a6:72:5f:eb:e8:a7:68:32:b7:5d:f4:c8:
6a:4a:d8:55:10:29:61:0a:98:0e:07:79:63:59:99:87:82:0d:
49:6d:17:74:1e:b5:b4:18:42:87:e4:ee:59:d8:2f:0c:b8:37:
06:8e:a9:3a:c4:6a:50:5c:dd:97:0f:d1:53:f2:c2:e0:33:be:
cd:46:8d:43:88:ea:50:d7:76:94:33:e4:34:9d:61:9c:1a:77:
32:5e:01:ae:48:2a:b9:0b:de:13:77:a3:9f:f6:78:2d:51:e4:
1a:2a:c8:7f:e5:0b:d3:53:0e:8c:fd:69:95:05:45:c7:c9:a6:
c2:d3:0b:2e:43:82:3e:00:6a:a0:56:a8:ba:ea:d3:b3:f2:eb:
44:a1:12:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:04:05 2025 by rpki-client