
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
File: dCF08y5sxujR-WW_odQKENbj58k.mft (raw, json)
Hash identifier: l/5pkLUmEKvAOUJnJ1Wlv/w0zTDCCCelg1+OirkGPyg=
Subject key identifier: 90:47:FC:82:97:9A:B1:F2:AF:C0:61:53:82:13:05:8C:49:96:D3:EC
Authority key identifier: 74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9
Certificate issuer: /CN=A911D1A9/serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
Certificate serial: 01B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
Manifest number: 01AE
Signing time: Mon 03 Nov 2025 03:14:51 +0000
Manifest this update: Mon 03 Nov 2025 03:14:51 +0000
Manifest next update: Mon 10 Nov 2025 03:14:51 +0000
Files and hashes: 1: dCF08y5sxujR-WW_odQKENbj58k.crl (hash: zc+mg4hHuJbscmylKWnUOLcJfD3OpWO4fATTbO1wzg8=)
2: 637BE5B0407C11EFBB872A45C4F9AE02.roa (hash: w1yfyWSTFZ2T3mamuS/YlpEjcUFBj5Vw4U9ZO7o84Xw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl
rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 03:14:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 439 (0x1b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D1A9, serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
Validity
Not Before: Nov 3 03:14:51 2025 GMT
Not After : Nov 10 03:14:51 2025 GMT
Subject: CN=69081e2b-d57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:50:40:6f:aa:d4:df:61:62:a8:8e:f8:08:26:
20:8d:87:43:07:62:08:37:96:e9:34:f4:01:55:c7:
65:05:55:ba:95:41:c7:8e:87:1b:a1:8c:bf:5e:9d:
97:5e:6e:3d:f4:4b:71:d5:cb:75:69:54:c6:88:c5:
01:a2:b4:b9:d1:b6:66:8e:c4:37:ab:d9:df:34:81:
bb:22:e5:9c:c0:1c:70:2f:c5:6d:b8:c6:17:0a:9f:
65:37:ab:9e:63:b1:3b:f4:2d:32:8a:fb:57:39:2a:
34:4f:d5:a8:d0:4b:4c:96:e2:76:67:fe:52:61:2b:
09:bc:8b:62:ab:dd:49:89:b7:d3:5c:fc:08:96:5d:
84:a8:1d:c4:39:b6:2e:ac:e5:6d:f1:cf:70:15:8c:
54:7c:24:63:20:0c:38:e1:c7:78:a6:20:b5:4e:27:
31:14:23:c0:10:87:d0:a6:92:99:42:94:4f:46:8d:
63:17:d4:0b:f3:05:46:5f:e7:f8:52:0d:ef:69:d5:
0f:02:07:c3:39:9d:4f:4c:25:35:a5:27:cd:eb:1a:
dc:1d:74:25:a5:92:73:87:a2:3e:0b:e4:fb:f5:4e:
56:9a:e7:e9:12:35:25:fb:97:c0:f7:d0:19:ff:20:
59:55:3f:99:32:0a:72:f7:86:29:a6:20:20:b5:e3:
0e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:47:FC:82:97:9A:B1:F2:AF:C0:61:53:82:13:05:8C:49:96:D3:EC
X509v3 Authority Key Identifier:
keyid:74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:63:1a:3e:c6:89:60:f4:74:be:e7:fc:c0:1e:e8:bd:1e:6b:
fa:1f:32:97:26:a6:ec:f2:d1:6f:76:03:e3:f6:ae:68:f5:ab:
fb:20:ff:1b:2d:56:8b:46:37:4b:ea:d6:97:78:7c:0d:b8:37:
70:34:b5:21:d3:ab:c0:c8:03:5f:6c:42:f1:47:64:84:cb:34:
d1:61:87:2d:15:0f:c6:64:0a:e9:a4:5d:77:17:23:2a:f6:40:
d3:8a:f9:58:16:b4:61:03:b6:fc:af:3e:bd:1b:2a:a9:7d:df:
10:16:a4:91:72:5a:6d:61:08:fd:49:73:3d:01:07:d1:e6:c5:
61:43:45:b5:05:5f:08:20:0b:57:f3:38:81:5f:ba:8a:06:cd:
ca:99:3c:71:6e:f6:15:29:84:cd:ec:60:48:80:5e:53:a6:be:
32:df:80:dd:20:8c:d4:c5:ff:19:49:71:fa:e4:32:e4:7a:0d:
eb:ba:7b:82:03:50:e4:41:d3:63:0d:22:45:ca:0a:e5:c9:12:
3f:d4:a0:ce:fb:9a:db:58:8a:6f:15:35:2c:71:ff:79:66:22:
35:4d:17:e5:e3:df:c8:fb:05:c8:cf:12:40:d8:7a:17:36:d9:
7c:22:51:9d:cb:b2:3e:fa:fc:7f:0a:01:2f:51:73:43:db:c5:
29:44:3a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:26 2025 by rpki-client