
$ rpki-client -vvf rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft
File: 0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft (raw, json)
Hash identifier: hQfQT81usoE7N4up49Ox1m0k9ZVVbFl4/Qv3bbyIF/4=
Subject key identifier: A4:0D:63:B0:87:BA:CE:85:09:F8:6B:D0:FF:26:42:EC:3F:8A:C9:EC
Authority key identifier: D2:33:BB:88:B0:88:9B:64:F1:4F:53:15:D7:16:13:AA:16:74:D0:07
Certificate issuer: /CN=A913397F/serialNumber=D233BB88B0889B64F14F5315D71613AA1674D007
Certificate serial: 071A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft
Manifest number: 0715
Signing time: Sun 02 Nov 2025 21:49:41 +0000
Manifest this update: Sun 02 Nov 2025 21:49:41 +0000
Manifest next update: Sun 09 Nov 2025 21:49:41 +0000
Files and hashes: 1: 0jO7iLCIm2TxT1MV1xYTqhZ00Ac.crl (hash: 8jKLyLnHyNRK3Ido3emLvvEnwOkCLEunarAp09G75I0=)
2: 9622AF205A5811EBA7FCC36AC4F9AE02.roa (hash: 8i4ad6LrRcxPKcbznzNvi2BM6i3jnmiOquYCkcN8Y1U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.crl
rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1818 (0x71a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913397F, serialNumber=D233BB88B0889B64F14F5315D71613AA1674D007
Validity
Not Before: Nov 2 21:49:41 2025 GMT
Not After : Nov 9 21:49:41 2025 GMT
Subject: CN=6907d1f5-77fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:0a:5a:f7:47:4c:06:d6:0e:f7:9b:b7:2d:
a8:11:47:7c:ea:c6:fb:8f:60:aa:85:04:db:3f:73:
fd:e9:a1:78:85:b2:5a:1e:f6:84:f7:58:6d:11:d2:
7f:9a:f6:a0:26:fe:61:0e:e0:24:8e:6b:d0:d8:3d:
92:c9:fb:e6:a0:5a:ef:4e:39:9e:98:55:38:e9:e5:
45:cb:a2:10:6e:1b:99:0d:3a:40:ca:6c:ac:6c:49:
e6:9d:f2:ff:f7:fe:2a:15:1f:78:32:57:70:85:b3:
07:cc:86:47:64:07:04:a0:c7:c8:31:82:db:29:68:
40:44:91:bb:2a:73:80:e1:9d:3e:41:8b:ba:9f:0e:
6f:da:ca:c4:08:3a:c6:38:d2:70:1c:93:98:ca:5d:
c9:66:79:b0:29:72:64:cf:88:2d:1b:56:7c:de:10:
15:9e:c2:3d:45:e6:01:e0:b1:2a:14:ae:54:9d:64:
b1:4c:ad:0f:9e:82:c0:be:d0:00:b7:6d:49:2e:e7:
b6:87:ec:dc:1e:d9:d4:9f:06:f0:6a:74:97:f8:c1:
1f:78:13:2e:f5:9e:21:fd:b1:01:d3:13:af:b7:0b:
89:95:79:cd:40:dc:75:c8:91:99:2c:e0:90:c9:f2:
b3:69:50:ac:9f:c3:09:fe:2b:b4:1c:b4:f5:53:a7:
e6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0D:63:B0:87:BA:CE:85:09:F8:6B:D0:FF:26:42:EC:3F:8A:C9:EC
X509v3 Authority Key Identifier:
keyid:D2:33:BB:88:B0:88:9B:64:F1:4F:53:15:D7:16:13:AA:16:74:D0:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:e3:df:51:15:d6:66:4a:b6:95:1d:7b:2c:6b:62:0e:e8:a8:
02:23:76:46:97:41:c1:fe:e7:99:ad:4c:5a:01:87:c5:a6:ec:
fc:0c:ac:bc:84:aa:ef:d8:3a:46:30:e9:4c:2a:87:04:e0:88:
c8:21:21:62:9b:68:6e:60:e9:7c:33:dd:e7:14:d0:c9:da:f1:
91:48:91:da:5f:72:7a:38:1d:02:d1:d7:74:50:73:89:3b:48:
5f:3a:f4:2a:88:9a:1a:91:18:3a:ce:c9:2f:0e:b1:0d:c0:57:
77:3a:33:b0:91:ae:c1:31:d4:72:76:75:b8:01:b8:c9:20:a0:
70:7a:5a:0d:2e:15:20:de:29:ee:5d:b7:1e:ae:44:2f:9c:12:
8c:09:84:07:47:95:95:b3:a2:15:ee:cc:55:0b:93:c7:05:1b:
ac:ed:05:b1:aa:4c:ba:90:e2:8f:32:1a:03:76:fc:16:c6:ef:
6a:20:c7:fc:33:cd:f4:2a:1b:46:a5:67:19:39:74:bb:8e:f5:
df:03:62:1c:b5:95:3b:d5:42:58:28:ff:aa:c9:81:7b:5e:37:
51:a9:7f:44:05:c2:6d:dd:c1:33:70:88:0d:48:28:13:9a:be:
64:e9:85:97:c4:b6:ae:10:3f:25:a5:ec:00:fa:2d:64:39:ad:
29:9a:32:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:19:32 2025 by rpki-client