
$ rpki-client -vvf rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft
File: LtaWwj0zRedLDXNOJLcQqniq5fo.mft (raw, json)
Hash identifier: 4m4qqmAr2on7MqLBlXaWeZDn5A8q9A0X/NTsNtC928I=
Subject key identifier: 4F:6A:38:04:41:0C:78:6C:52:75:65:CD:19:2C:89:06:27:AD:62:FA
Authority key identifier: 2E:D6:96:C2:3D:33:45:E7:4B:0D:73:4E:24:B7:10:AA:78:AA:E5:FA
Certificate issuer: /CN=A913714B/serialNumber=2ED696C23D3345E74B0D734E24B710AA78AAE5FA
Certificate serial: 04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtaWwj0zRedLDXNOJLcQqniq5fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft
Manifest number: 03
Signing time: Wed 05 Nov 2025 08:17:15 +0000
Manifest this update: Wed 05 Nov 2025 08:17:14 +0000
Manifest next update: Wed 12 Nov 2025 08:17:14 +0000
Files and hashes: 1: LtaWwj0zRedLDXNOJLcQqniq5fo.crl (hash: YG/DT4e6T+lacrT2RfpjHV8QLsOlB26iGg8RZEB2dDY=)
2: 5D7ACB26B90811F0ADC46B62C4F9AE02.roa (hash: 7vtN8AsvURmlMFj193nZHd0LnrqmSd3t3WOD+mI+WHA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.crl
rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtaWwj0zRedLDXNOJLcQqniq5fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 08:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913714B, serialNumber=2ED696C23D3345E74B0D734E24B710AA78AAE5FA
Validity
Not Before: Nov 5 08:17:14 2025 GMT
Not After : Nov 12 08:17:14 2025 GMT
Subject: CN=690b080b-b3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1e:c3:f4:4b:02:33:a8:86:8c:02:93:6b:f3:
87:a1:24:28:4b:e1:12:60:18:ff:46:25:e9:4c:3d:
5d:75:07:06:e6:52:a1:52:79:af:24:a3:ba:c3:e7:
90:4a:51:0c:d1:50:f7:ef:c9:64:ba:b6:10:48:00:
6b:25:2c:49:b6:68:b2:b9:69:1f:45:e2:80:65:61:
c6:2d:8b:26:6c:df:f9:70:f3:5d:de:a6:c1:0f:cd:
d6:d3:81:10:73:70:c1:c0:39:e2:5c:89:ee:c1:02:
cd:14:d8:54:ab:b9:74:c1:04:15:6d:dd:f2:f7:92:
65:72:26:44:74:c4:e0:55:35:9b:30:2b:b6:32:5a:
c1:22:49:97:f8:31:c6:68:de:09:c5:d4:b0:55:d0:
56:c7:9d:69:c2:7c:93:6a:a0:3e:10:f4:e0:09:a6:
1f:e1:ca:8a:b8:21:d4:f9:0b:05:68:b2:6c:bd:d0:
8d:52:93:bd:26:ef:6d:74:a6:89:6a:87:6d:65:51:
ae:5c:8a:17:85:ba:e6:71:87:a7:5f:81:f2:3b:75:
51:68:08:b4:19:f9:23:9c:b6:2f:a0:6b:95:05:79:
73:b3:97:8d:44:36:e4:a9:1a:80:e3:1a:ae:fe:ed:
58:ca:c8:1e:ab:db:0d:77:fc:71:52:43:ea:10:b8:
95:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6A:38:04:41:0C:78:6C:52:75:65:CD:19:2C:89:06:27:AD:62:FA
X509v3 Authority Key Identifier:
keyid:2E:D6:96:C2:3D:33:45:E7:4B:0D:73:4E:24:B7:10:AA:78:AA:E5:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtaWwj0zRedLDXNOJLcQqniq5fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:42:1b:24:1b:d2:39:d9:c8:00:99:65:78:ce:62:ec:0b:d9:
70:ac:7d:ff:77:f3:45:6a:6b:4f:02:2f:de:30:24:28:7f:54:
c2:62:20:79:31:05:5a:fe:1e:a8:62:62:33:86:85:44:57:f9:
e8:bc:a7:b0:e3:14:2a:7d:eb:4b:b9:1f:1b:da:be:1e:1f:6b:
6e:ee:1a:d8:b7:4f:da:1c:3e:de:2e:a1:19:0a:26:d2:8b:34:
bd:53:53:c3:50:49:ae:44:1c:5a:ae:6d:6a:ef:cf:15:2a:f3:
e4:be:c9:3a:9a:0a:77:5b:46:4b:35:40:c6:63:45:1d:66:06:
9c:58:cf:f1:b5:63:0f:b1:13:ef:5c:7c:2c:49:9a:2d:a8:47:
8e:5a:8c:8a:2b:3e:b4:09:65:77:56:2c:12:6e:0b:05:bf:a4:
1a:d6:73:da:a9:23:b1:ba:9b:f2:9e:a2:76:2b:43:e8:c1:a8:
8c:ec:2a:9a:e3:41:80:bb:73:7a:a5:81:5e:5b:f1:b2:da:f2:
a4:6c:ed:bd:bd:19:41:18:bb:b1:09:65:21:14:01:07:bb:c9:
a4:02:d1:a9:ea:bc:a6:74:b2:c6:ac:c6:b4:25:62:1b:b9:24:
71:57:c8:c5:63:01:8c:76:8f:e4:23:bc:f9:ad:d2:de:87:45:
54:7c:cd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:35:50 2025 by rpki-client