
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
File: dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft (raw, json)
Hash identifier: pTZpqI+SvEgCJSYvCLUlJ2EIKl7uzEYddnI9YjZ1T6I=
Subject key identifier: D2:A1:29:6D:D4:CC:43:1F:91:EE:8B:15:F2:8B:70:DC:36:DE:09:66
Authority key identifier: 74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87
Certificate issuer: /CN=A915A0F9/serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
Certificate serial: 0611
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
Manifest number: 05FC
Signing time: Sun 26 Oct 2025 23:53:33 +0000
Manifest this update: Sun 26 Oct 2025 23:53:32 +0000
Manifest next update: Sun 02 Nov 2025 23:53:32 +0000
Files and hashes: 1: dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl (hash: 1NWetaPKMYeYRpYdQKv1m7dJFYgLyfm9u1WGJPje6gI=)
2: C2B9483E5BDC11F0AA574A7AC4F9AE02.roa (hash: ex+WlMFyVtiheikj5CcskwxC1bY5wSTJhW1aaMBV/nE=)
3: B00A7E6A5BDC11F098C0ED78C4F9AE02.roa (hash: eH6QA4sZzgrBJC86LHr1zy/a4vVBHZoyZjexz7LGcMM=)
4: 77A20CBE5BDC11F0BE617A76C4F9AE02.roa (hash: +Zl76cmx7AGsUQYqJ/t8IiGMCuy30Wvn2FjTFytnW7U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl
rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Nov 2025 23:53:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1553 (0x611)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0F9, serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
Validity
Not Before: Oct 26 23:53:32 2025 GMT
Not After : Nov 2 23:53:32 2025 GMT
Subject: CN=68feb47d-bc2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:54:14:bb:ac:0a:18:ef:ac:54:91:58:2b:e0:
e6:88:8e:dd:77:b8:0a:83:e4:a7:a7:68:9e:e4:3b:
d8:fc:e0:2e:b5:f3:35:08:dd:5c:c7:47:3a:02:dc:
14:dc:77:13:95:99:7f:44:d9:ab:70:51:ef:c2:55:
5d:2c:f0:19:21:dc:7c:5f:2b:82:ba:26:7b:1b:81:
98:13:ce:6e:b7:c4:24:f2:3c:1a:2f:e8:b5:4c:f9:
48:f1:04:5a:fd:6a:bd:7a:30:cd:f6:e4:b7:06:23:
a0:85:28:cd:b3:f1:a7:be:3a:96:57:38:6b:9b:a6:
03:ad:3d:24:b3:60:77:87:3b:20:e9:6d:2d:fa:c8:
c4:92:54:ff:d4:37:7b:7a:f5:bc:4b:d0:cc:ec:49:
a3:85:4a:f3:3f:9f:0a:12:c3:e4:50:15:f7:b1:0e:
96:31:fd:c7:77:7c:5a:3d:75:a6:77:8a:18:f8:a8:
0d:6b:62:7a:8c:88:15:e1:03:eb:5e:c4:7c:d3:3b:
6e:fe:6f:f6:33:55:bd:17:3e:b4:ed:c2:75:b4:8a:
43:76:84:c9:d7:7d:b2:64:d6:3e:f2:07:c1:ec:1b:
6c:a4:9c:b8:ff:f1:3b:fc:19:46:a6:d1:5e:25:7f:
31:94:76:07:bd:6d:3b:67:ff:6b:01:9d:ed:fb:7a:
f4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A1:29:6D:D4:CC:43:1F:91:EE:8B:15:F2:8B:70:DC:36:DE:09:66
X509v3 Authority Key Identifier:
keyid:74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:ac:7c:2d:b5:73:af:76:78:b1:ad:a8:d3:73:6f:47:15:aa:
a8:6a:94:0b:0e:3d:e1:79:cb:83:a3:9b:65:38:25:df:40:94:
8a:8e:c5:58:3a:93:93:e0:f0:70:0f:b9:ee:f9:4e:58:0e:0e:
d0:85:a4:db:38:d2:10:a4:97:7f:5c:2b:09:e4:39:45:2e:bf:
3f:0f:d8:c5:14:a9:05:07:2b:39:e1:a8:a4:bf:13:ad:88:52:
7c:c7:9d:3b:73:b1:a8:c6:31:09:e4:68:9e:b0:16:13:aa:bb:
e0:37:c8:fb:6c:ff:4e:bc:cc:ee:2d:7f:c2:2a:49:a7:44:53:
59:62:b9:85:72:f4:35:16:9f:0c:35:80:63:68:e6:6e:85:d0:
32:44:0f:ae:10:ea:7b:d2:4b:69:ce:a8:6a:3f:4d:9b:08:51:
67:5d:09:e0:a1:6c:ea:95:86:c2:73:23:c4:5c:57:8d:26:bd:
45:21:7d:5d:7a:82:08:b9:b1:36:80:f8:6c:82:6f:fd:27:5b:
32:bb:ca:56:66:17:6f:38:2a:2f:d1:99:8b:27:e3:a1:fa:e1:
c2:43:c7:9c:47:62:44:29:e5:2e:db:1a:c0:a7:b8:40:83:e8:
5f:aa:3e:78:32:1a:c9:5a:be:03:c1:cc:32:1f:c6:d0:0d:9a:
9d:d9:e4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:02:52 2025 by rpki-client