
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.mft
File: 7dan-nQ2Pn9jFksaB04JvojSPDU.mft (raw, json)
Hash identifier: 7FKrQ1y60r1c1Hcg690S3sN86CjkYE6jin/T6dMUOE0=
Subject key identifier: CB:C3:A4:06:56:50:DC:A4:24:C2:5C:76:F1:51:92:E2:4D:FA:3A:D5
Authority key identifier: ED:D6:A7:FA:74:36:3E:7F:63:16:4B:1A:07:4E:09:BE:88:D2:3C:35
Certificate issuer: /CN=A911AB93/serialNumber=EDD6A7FA74363E7F63164B1A074E09BE88D23C35
Certificate serial: 0157
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dan-nQ2Pn9jFksaB04JvojSPDU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.mft
Manifest number: 1FCE
Signing time: Fri 24 Oct 2025 16:21:13 +0000
Manifest this update: Fri 24 Oct 2025 16:21:12 +0000
Manifest next update: Fri 31 Oct 2025 16:21:12 +0000
Files and hashes: 1: 7dan-nQ2Pn9jFksaB04JvojSPDU.crl (hash: SQehcqQrYNcj2aWPryt3AYmTUo3oqVVSxwW7uKQ4f80=)
2: 99596A0EB6C011EE857A8B6DC4F9AE02.roa (hash: GCEET+2JYJ9VCEsUJ4AImKOZQwdzydpwW21JOyc1aFY=)
3: 729C414EB69711EE8D11887CC4F9AE02.roa (hash: 59O262usbaBddiCuAPOTJvgNmHiSFNquAxY8D6+mQW8=)
4: 34545918BA0B11EE9FC74745C4F9AE02.roa (hash: rDNaE/vKw6lZwAV9wFMImDwc7J6mIh2/QNRmkhuzkQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.crl
rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dan-nQ2Pn9jFksaB04JvojSPDU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 16:21:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AB93, serialNumber=EDD6A7FA74363E7F63164B1A074E09BE88D23C35
Validity
Not Before: Oct 24 16:21:12 2025 GMT
Not After : Oct 31 16:21:12 2025 GMT
Subject: CN=68fba778-8a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:99:50:59:da:d6:6f:55:bb:3f:87:b9:79:e5:
e0:fd:1d:15:c4:91:78:c0:56:e7:97:c8:0a:e4:54:
50:6e:c8:3c:b1:f3:02:b8:d1:20:82:c6:42:92:f4:
ee:dd:72:f0:a3:93:53:51:c0:37:96:85:96:df:75:
73:92:2a:2f:10:8b:cd:34:97:87:ba:17:3a:fd:4a:
30:a5:aa:86:86:3e:35:a6:7c:16:ba:16:9e:60:0f:
ed:be:76:53:9c:db:3f:e1:d3:3f:2a:77:f8:13:f9:
95:c7:1a:4a:74:a9:0f:25:1a:f6:54:4e:15:c4:27:
c7:11:01:48:45:1e:13:77:ec:02:4a:31:4a:58:1d:
43:70:63:23:9b:85:38:99:be:5a:ff:3e:f2:59:c4:
44:38:c3:ea:a5:0f:fd:70:86:b9:cc:a8:1a:dd:44:
57:cd:e5:83:a6:94:eb:1c:58:25:2f:65:c8:82:d2:
a5:a7:ec:fc:4b:64:8e:c6:38:8f:2e:d7:e7:41:21:
59:03:91:7f:a8:01:68:7e:ea:7f:22:09:06:1d:23:
6a:12:5d:27:ff:9c:51:1c:f4:9e:d0:a6:8d:a6:5a:
a0:0f:74:dd:6c:c8:95:4f:15:a8:29:4b:07:f8:c4:
47:a0:8b:51:39:0f:0b:e7:20:97:7f:25:58:3d:2d:
d8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C3:A4:06:56:50:DC:A4:24:C2:5C:76:F1:51:92:E2:4D:FA:3A:D5
X509v3 Authority Key Identifier:
keyid:ED:D6:A7:FA:74:36:3E:7F:63:16:4B:1A:07:4E:09:BE:88:D2:3C:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dan-nQ2Pn9jFksaB04JvojSPDU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:fa:e6:cb:d6:4c:15:70:bc:66:55:cf:9c:a3:c2:a5:b2:4a:
0f:72:dd:89:82:4c:25:7c:5e:d9:0c:bb:b8:58:2b:35:71:2a:
4a:0a:6f:97:f5:e6:d3:a7:98:83:08:d6:6e:b1:64:ba:2e:ec:
58:ed:b1:fa:07:86:d1:02:db:6d:6d:37:a0:ff:02:95:60:3b:
96:24:67:34:22:89:e8:1c:95:03:d8:c6:77:66:3c:2b:24:aa:
b5:ab:1d:92:c3:64:cb:d9:1b:c4:70:1d:57:f1:1d:c3:30:d6:
fc:05:82:3a:22:e2:12:ce:62:f5:61:15:15:d6:64:ae:81:86:
27:8c:cf:32:a8:4b:43:b0:b9:15:14:e8:41:9d:79:e9:98:7a:
ae:71:ad:d2:54:f7:ea:21:dd:1f:f5:b6:36:77:68:72:cd:2e:
4b:56:6c:eb:06:e8:d8:bb:fe:b0:f7:df:5f:f2:6d:9b:d9:f7:
3e:34:70:12:a9:1c:bb:16:f6:32:d9:92:12:7d:3a:1f:3b:e4:
a9:a9:fe:dd:8e:84:90:96:cc:98:b2:30:a2:f7:e0:df:66:80:
09:ba:a1:17:53:04:7b:fb:e8:a4:42:60:7c:8d:e4:76:29:d3:
30:7c:24:06:b5:96:3d:de:b3:9e:60:4f:5e:61:fa:19:b9:69:
7d:00:85:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 18:54:50 2025 by rpki-client