
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
File: Lv74nW1YMOr9plod8ZRuR6FEpBk.mft (raw, json)
Hash identifier: lMMDxJY8BDNVgTBUMI36oOlUr73p/0NRG9Er3DSm2sM=
Subject key identifier: 5C:18:3E:DA:89:CE:0F:7D:82:83:E7:38:07:80:41:57:F0:31:AE:6D
Authority key identifier: 2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19
Certificate issuer: /CN=A9123F2F/serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
Manifest number: 64
Signing time: Mon 03 Nov 2025 07:01:45 +0000
Manifest this update: Mon 03 Nov 2025 07:01:44 +0000
Manifest next update: Mon 10 Nov 2025 07:01:44 +0000
Files and hashes: 1: Lv74nW1YMOr9plod8ZRuR6FEpBk.crl (hash: Apg3kknqkNNtXTG8wAO/NcukOFMoJBFpH+EQ+hfL8XU=)
2: 72AD814686F911F0A97FA80EC4F9AE02.roa (hash: 7POo0MTD3bXJ+GgbQIE+3wN42OgF1nbCb45FXgCxa98=)
3: E7930D061E6111F098E32F79C4F9AE02.roa (hash: iqZbom0z7ztlqp3GEXt64uCWXDCec+1Lyn/WcRebU04=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl
rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123F2F, serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419
Validity
Not Before: Nov 3 07:01:44 2025 GMT
Not After : Nov 10 07:01:44 2025 GMT
Subject: CN=69085359-98d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:79:83:96:61:63:84:d0:a7:f1:6d:9d:67:
43:73:b1:f3:c1:41:42:9f:a3:2b:47:3f:24:eb:fe:
04:55:ba:46:4e:97:9c:cf:ed:30:27:1a:fc:22:7b:
e1:b9:9d:e1:80:26:99:2c:18:bd:7d:0b:58:01:4c:
da:df:50:1f:dc:73:43:f6:bd:f1:59:7a:2c:8d:1e:
df:65:a8:2c:e7:7b:38:63:18:37:72:c9:57:42:c6:
bd:b1:b3:75:97:2c:1c:bd:7c:9c:62:8b:b1:cc:a4:
09:47:34:c6:1d:66:ac:66:a9:dd:7d:e5:68:c3:3d:
55:68:da:b0:10:9d:43:fe:4e:5f:f8:b3:8b:8a:f7:
b8:71:c4:ef:f4:a4:53:2f:99:5a:9b:77:08:3c:0d:
73:15:e6:3d:c0:17:3a:05:90:ce:b9:b2:c0:f6:e2:
29:f1:1b:1a:d1:e9:f6:df:4b:de:fc:b2:52:c6:93:
05:4f:34:27:5d:2c:7f:25:cb:d9:64:db:ff:b9:80:
a8:21:05:c5:1f:ca:d2:fb:f9:99:51:ff:e1:53:30:
f7:99:0a:c1:b5:0f:56:51:e5:8a:fa:f9:ec:40:07:
48:b6:aa:27:a0:2a:3d:91:10:e2:62:a7:2e:09:3a:
ff:51:40:83:55:8e:a7:c6:55:18:c2:23:53:ac:78:
e5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:18:3E:DA:89:CE:0F:7D:82:83:E7:38:07:80:41:57:F0:31:AE:6D
X509v3 Authority Key Identifier:
keyid:2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:35:52:52:7c:20:fc:cf:cf:f8:2c:06:65:5c:a0:d4:72:d6:
f2:81:74:6e:56:ad:7b:99:da:33:bc:c9:33:70:c0:3e:53:1f:
d8:7f:2b:14:8c:f9:5e:80:2e:02:59:35:34:19:77:df:ed:23:
04:ac:26:33:a1:65:08:b1:a8:db:64:e1:7b:68:fa:24:5f:b9:
4a:3c:ab:43:05:a5:65:7a:d6:24:aa:f4:e9:0b:5b:8f:9c:dd:
26:8d:9a:8a:be:0d:be:ca:3f:9d:09:4a:9a:53:7f:09:ec:c8:
c2:41:09:49:10:44:3e:cb:fa:66:ad:8e:1e:fc:00:c7:6a:15:
f4:5d:f3:8b:22:62:6c:6d:fa:df:3f:67:4e:6b:dc:23:7d:d1:
47:97:76:47:e2:f1:57:4f:67:83:2c:2c:c1:14:74:ac:f1:aa:
cb:a0:08:b1:3b:0c:21:10:1f:33:95:26:64:82:ee:5d:5b:b2:
f0:67:aa:72:73:ec:71:ff:70:04:d7:79:ee:d7:c6:e2:d8:76:
eb:18:39:1b:1f:67:b5:4c:68:e3:c0:92:1b:1d:db:7f:58:67:
3f:d7:6d:c6:66:ea:b3:c0:93:2e:7c:dc:22:2a:90:7f:cb:31:
11:82:35:1c:8c:97:a2:8a:47:9d:0f:2e:45:6f:d9:32:82:9d:
88:4d:9d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:19:24 2025 by rpki-client