
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
File: R1dShEvqeklwW8JaqPDJ7xAMmPg.mft (raw, json)
Hash identifier: /1Y6ZrD5JPvgtkEZpa1l9uSSd6RR8KvjoJ8wB2z1b6M=
Subject key identifier: 6D:84:93:36:BD:36:A1:A3:38:F0:5B:2A:B5:90:85:93:50:54:6A:1B
Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Certificate serial: 0824
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
Manifest number: 0803
Signing time: Fri 24 Oct 2025 21:49:17 +0000
Manifest this update: Fri 24 Oct 2025 21:49:16 +0000
Manifest next update: Fri 31 Oct 2025 21:49:16 +0000
Files and hashes: 1: R1dShEvqeklwW8JaqPDJ7xAMmPg.crl (hash: zQY2PvUHSXb2kJabZI+QR/zZAyw63MbD7c6upOHXC6Q=)
2: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (hash: 0MurJBTWr3VBt4BzPGN6YSpJS0KuheQ6jbFiFb2lsDo=)
3: 44873A76ACBC11EBB0651B63C4F9AE02.roa (hash: EDuSd7q+Wy9A9v2ymA1vM1CdQcsnayUqkzAJ0vginys=)
4: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (hash: 3AbfHAacjnEAWoo2sa+rjsKYetf4drBAdDYIzgNRGw0=)
5: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (hash: uh6Udu7tl5B51JnewZD4hvjUOCA+o54nu1BVBecsrkw=)
6: 452550BCACBC11EBB0651B63C4F9AE02.roa (hash: KAqNHdwX5NNEjIYv/SrmUHgArBmx24W5Jn9cFOvsuKs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 21:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2084 (0x824)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Validity
Not Before: Oct 24 21:49:16 2025 GMT
Not After : Oct 31 21:49:16 2025 GMT
Subject: CN=68fbf45c-f6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:03:34:12:f8:a3:1b:76:d6:b2:24:b4:19:
b4:6b:9a:ec:c6:9f:9f:6c:64:c9:4a:68:3e:95:4d:
89:dc:8b:36:7c:83:7f:ac:b2:3b:3b:b8:b7:36:f6:
ee:dd:07:1c:c2:bb:92:5a:06:d2:19:27:41:9f:98:
d6:b2:a5:20:94:c6:c3:59:98:c2:d3:d5:73:06:21:
89:5a:c6:b6:29:bf:a8:5e:f3:44:54:c7:f1:de:14:
e5:2d:d4:c0:bb:1e:4f:a2:c3:1c:23:48:ee:4e:19:
55:ff:e5:4c:86:87:78:f1:ea:7c:a4:a8:7c:17:49:
43:bc:1e:78:a4:83:6e:d4:4f:51:29:0c:34:d8:f0:
11:29:57:de:63:b8:e0:89:58:2c:8f:74:f6:fc:66:
e7:4b:a9:f6:2e:34:bf:9a:46:7c:fa:5d:5e:23:b8:
25:3d:da:8a:6b:7e:2d:84:95:5b:fe:4d:cb:1c:29:
fc:9c:05:12:b8:f3:1f:cf:fc:45:27:0e:69:a9:c1:
00:3c:25:54:d8:47:6a:56:9f:6e:af:28:a1:3e:12:
69:49:73:68:82:e7:9e:bc:6b:24:fd:02:28:b3:3c:
27:09:40:c3:da:45:96:bb:85:21:68:b1:42:e8:d2:
85:4d:e6:28:f2:e5:f8:05:a9:21:c1:73:e9:5a:77:
77:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:84:93:36:BD:36:A1:A3:38:F0:5B:2A:B5:90:85:93:50:54:6A:1B
X509v3 Authority Key Identifier:
keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:61:40:ab:3e:2d:cd:2c:d7:cf:ed:e3:40:88:50:4e:24:73:
0b:bf:b1:b7:22:cf:c5:11:18:df:e5:60:76:40:b3:72:68:13:
f8:36:67:2c:63:a9:76:2c:f2:8b:e8:c7:ae:8e:21:f9:7c:95:
54:9c:2a:03:ad:e6:02:48:a0:a8:eb:ef:32:e4:84:01:d9:fd:
91:46:06:87:a7:51:d8:f4:7c:03:58:45:a9:c2:db:ce:2e:82:
b8:69:ee:4a:0b:7d:55:f6:6d:d3:8e:8a:dd:1a:4c:ff:e7:ac:
f1:e3:69:84:c6:36:e5:32:08:eb:c5:10:ac:52:e9:49:4d:75:
4d:e9:a1:81:a9:71:ad:bb:a3:87:a1:46:9b:a7:ae:b3:15:ad:
d5:df:74:a3:77:80:73:d4:8c:c2:cb:74:96:c8:46:00:3b:d1:
91:58:d0:60:43:47:09:85:dd:c7:d6:1f:76:15:83:10:ab:33:
93:60:a7:23:aa:e2:b2:aa:2a:20:52:dd:89:24:d4:bd:f4:7a:
51:5c:8e:54:e2:58:6d:0c:f0:cc:34:81:c2:0f:31:73:d6:f8:
ed:39:bd:85:11:4f:e1:38:70:0d:e8:d2:73:cc:d3:4f:53:b9:
e5:e8:85:29:e8:0e:05:b4:0d:51:b2:c9:fa:4a:7f:9e:6e:11:
7d:f2:75:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:54:24 2025 by rpki-client