
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
File: o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft (raw, json)
Hash identifier: AMFd9dzbwuKgZZr+Xf5g4yFjDuOzabvEyOlUev4CV/k=
Subject key identifier: C0:93:03:63:3E:E5:29:4A:47:FD:2D:81:64:57:C0:55:5C:BF:EC:05
Authority key identifier: A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B
Certificate issuer: /CN=A913F26E/serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B
Certificate serial: 044D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
Manifest number: 0449
Signing time: Mon 03 Nov 2025 00:11:16 +0000
Manifest this update: Mon 03 Nov 2025 00:11:15 +0000
Manifest next update: Mon 10 Nov 2025 00:11:15 +0000
Files and hashes: 1: o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl (hash: eA9dsudQUoc+aTyGHEsfLVdkREsjhV+oUxtrEvyJwyk=)
2: 61F1288A76B311ECABA1A612C4F9AE02.roa (hash: PnVC3vOx/m/d2i5GijyZP2nHOvoHme0AIyPBMzeLZ6g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl
rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 00:11:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1101 (0x44d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F26E, serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B
Validity
Not Before: Nov 3 00:11:15 2025 GMT
Not After : Nov 10 00:11:15 2025 GMT
Subject: CN=6907f324-fc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:74:c6:4c:0c:16:ae:3e:14:4e:aa:06:9c:e3:
6a:f4:41:12:34:21:58:90:90:45:6c:87:67:e3:d7:
59:6b:a1:92:4c:7a:59:fa:0b:bc:55:87:0f:f0:f7:
01:c4:51:b1:b3:05:3f:3e:ae:45:10:f9:cd:e3:53:
4d:7c:97:ca:fd:62:10:c7:d4:46:8f:be:31:32:9b:
49:cb:90:3e:37:da:33:a3:fb:f6:4c:78:36:25:64:
ee:23:ee:b4:49:76:17:2f:69:01:02:59:c6:1f:71:
90:58:e4:e7:dc:07:d9:9c:9f:ea:72:c4:a3:2d:d2:
6f:a7:65:e1:a2:d5:ed:66:15:4c:b0:60:40:c0:8c:
0c:37:a9:79:78:3b:e7:6a:9b:53:7f:08:94:a8:a6:
f1:4e:fa:f0:31:b5:18:00:f8:f9:ba:95:ed:df:15:
c0:0a:ce:87:99:ab:46:16:c8:1c:3b:bd:97:46:a8:
43:e7:f0:e3:64:32:a5:49:2b:93:e4:7c:01:ba:ce:
66:55:b7:f7:95:8b:3d:26:7b:22:75:b7:ed:c6:6e:
37:89:65:d3:e2:f2:a0:3c:2e:25:0c:3d:a6:65:19:
57:54:05:a7:84:77:e4:1a:fa:50:61:af:2a:b7:c7:
c6:43:88:48:40:18:a1:2f:bd:98:2f:06:28:8e:28:
fe:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:93:03:63:3E:E5:29:4A:47:FD:2D:81:64:57:C0:55:5C:BF:EC:05
X509v3 Authority Key Identifier:
keyid:A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:56:5c:20:e3:37:94:72:96:26:dd:08:e7:d2:bf:81:b8:58:
16:2e:9e:eb:5a:9d:1e:63:cd:37:09:d2:bf:fe:8d:8c:78:f9:
19:e7:74:93:58:83:b0:44:14:ee:8e:59:f5:c7:b5:3c:80:ca:
f1:df:3d:64:14:84:1f:96:1d:ba:ac:8a:c8:8b:83:d6:0b:46:
52:83:b0:70:db:bf:b6:00:2a:7d:d9:71:9a:5c:73:f2:04:3f:
1f:02:fa:d7:d7:62:6c:7d:e5:e5:38:73:c5:09:1c:ed:2b:32:
a1:e3:02:c3:33:7b:ba:01:92:a6:8d:ff:84:70:c2:b2:46:6f:
f7:43:68:3e:72:f3:ee:fa:e6:29:e5:d1:e5:ca:e8:f0:bf:71:
a1:66:c7:a2:86:75:6d:aa:9f:91:b9:d5:e7:3c:88:5d:ca:29:
59:9a:34:3d:ad:13:a2:22:0c:f4:9c:4c:26:d4:0a:71:61:1c:
9d:be:8a:30:2a:a2:bd:31:65:fb:28:bf:b1:7e:89:61:00:7e:
2d:29:d5:87:e3:fe:6b:ea:c1:43:11:8b:b5:71:7d:e1:f1:98:
22:07:ca:aa:3f:ac:aa:90:1f:cf:ed:16:70:65:95:66:84:cc:
ae:d9:31:5c:86:46:ea:ec:01:fb:90:6a:4d:f8:04:da:7c:91:
32:c9:dd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:40 2025 by rpki-client