
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft
File: 9VqsRorxZKWTnXLq_dOkczp5lgk.mft (raw, json)
Hash identifier: KmyQMX4yefPWXIfjA3xC3e22zgaytJl+W6FrqlnzLFI=
Subject key identifier: 57:2E:20:74:63:78:9F:0C:8A:5A:9E:CC:07:15:6C:43:6A:5E:17:6A
Authority key identifier: F5:5A:AC:46:8A:F1:64:A5:93:9D:72:EA:FD:D3:A4:73:3A:79:96:09
Certificate issuer: /CN=A915CF83/serialNumber=F55AAC468AF164A5939D72EAFDD3A4733A799609
Certificate serial: 0685
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft
Manifest number: 0683
Signing time: Sun 02 Nov 2025 22:23:33 +0000
Manifest this update: Sun 02 Nov 2025 22:23:32 +0000
Manifest next update: Sun 09 Nov 2025 22:23:32 +0000
Files and hashes: 1: 9VqsRorxZKWTnXLq_dOkczp5lgk.crl (hash: fUZHMVPtdYPv8TzS65oiSJ86E8JUvDJR1B+sPY+/T7g=)
2: 3F3A8E86912511EBB0270738C4F9AE02.roa (hash: zJD2DUaHYLIs6MFcD7dM939RjwobVqjAJWT+0osciMA=)
3: 3E6BCA6A912511EBB0270738C4F9AE02.roa (hash: A9rThl3FoOc3UI4pEM8sFZ4EouFKASPqDt9/k6x5psA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.crl
rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 22:23:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1669 (0x685)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CF83, serialNumber=F55AAC468AF164A5939D72EAFDD3A4733A799609
Validity
Not Before: Nov 2 22:23:32 2025 GMT
Not After : Nov 9 22:23:32 2025 GMT
Subject: CN=6907d9e4-12aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:56:f5:18:a8:26:d2:6f:8f:c3:aa:e1:83:2b:
f1:c9:cc:68:36:24:ab:89:c1:83:f2:e6:19:e7:b0:
e9:19:87:d6:f0:f3:24:9d:ce:85:ef:ca:8f:19:60:
be:03:29:40:5a:d4:1c:63:d6:70:38:69:16:97:71:
3b:6c:57:d7:79:4e:2b:c5:42:40:f9:f2:1b:6a:0e:
e8:31:d1:fc:cc:af:c8:66:13:df:3e:7e:67:08:73:
40:f9:44:fc:28:0f:c8:ae:f3:ef:77:b5:ca:f4:45:
3b:2c:b3:cf:6b:43:c7:63:03:ec:d0:56:d1:b6:ec:
61:c7:2d:71:14:47:d5:88:47:f3:f1:1b:20:34:d7:
17:b0:b7:19:88:0f:51:46:d4:35:99:62:1f:39:87:
5e:b9:de:9c:3f:83:ac:af:5b:b8:5c:d4:eb:89:44:
58:51:4b:f3:3e:2c:c2:93:5c:d1:ca:ff:b4:d6:44:
46:1d:5d:0d:be:8d:4f:67:16:df:ac:15:11:f8:0d:
42:75:5b:60:29:b8:a8:77:fb:d3:51:7e:6c:73:47:
f2:0f:cd:6d:01:b8:5e:59:9c:9d:f5:7f:04:f1:f3:
1b:88:d6:92:33:00:e6:40:4a:a8:21:41:5b:ad:a0:
b6:40:b2:1f:0e:aa:a0:15:1e:27:a1:61:5c:7e:4a:
a7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2E:20:74:63:78:9F:0C:8A:5A:9E:CC:07:15:6C:43:6A:5E:17:6A
X509v3 Authority Key Identifier:
keyid:F5:5A:AC:46:8A:F1:64:A5:93:9D:72:EA:FD:D3:A4:73:3A:79:96:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:ae:df:79:65:d8:b7:14:24:e6:07:7f:6c:b4:b0:a9:02:40:
ff:74:66:3c:a9:ff:18:fe:83:f3:d8:c3:e6:9d:4b:cd:fa:c8:
0c:1c:e9:6a:b1:cb:d7:ed:aa:14:c5:42:df:92:69:e6:2c:2e:
24:a6:9c:aa:72:7a:81:a6:ed:b9:2d:90:59:df:2c:a5:26:31:
5f:04:a6:27:af:dc:80:e5:a9:dd:eb:22:bf:14:61:d0:d3:ca:
c1:33:3d:b7:ed:5c:14:04:29:ce:71:a7:c2:96:d5:f5:db:75:
1a:d4:3d:d6:a1:54:71:20:86:af:34:dd:68:ea:46:cc:6c:6e:
8f:72:e4:45:4b:4a:fb:da:7a:28:ae:16:1b:eb:92:b3:79:8b:
c0:9f:05:cd:ef:a2:76:04:6b:2c:7b:84:66:78:84:03:fc:1c:
79:ef:23:58:d3:77:9f:c3:dd:fc:01:5b:6e:95:ee:6c:93:98:
6c:5c:e1:c6:e2:82:bf:bf:de:ba:54:32:51:c1:a9:f1:86:32:
65:a2:34:61:3c:44:13:bb:bf:99:4f:37:ff:f2:57:28:06:9c:
0c:82:14:2d:e2:f9:66:dd:68:9d:08:b7:e0:18:c9:c6:3b:89:
9a:34:3e:e7:59:73:6b:75:0e:96:70:1e:d7:bb:2a:54:4e:fe:
32:3d:62:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:11:02 2025 by rpki-client