
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
File: AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft (raw, json)
Hash identifier: v9JjwOWYSH9IQRJu/HSWUcZQOZVeN5MNikDwnZ0k7YU=
Subject key identifier: 75:33:37:C8:61:A7:12:39:B5:B0:D7:B9:07:E9:3E:53:3F:61:19:B6
Authority key identifier: 00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91
Certificate issuer: /CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
Certificate serial: 0183
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
Manifest number: 0179
Signing time: Sat 25 Oct 2025 07:18:36 +0000
Manifest this update: Sat 25 Oct 2025 07:18:35 +0000
Manifest next update: Sat 01 Nov 2025 07:18:35 +0000
Files and hashes: 1: AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl (hash: vMs27tgmP+YVQh5nGvASTw4wd9JL/bvNnrEGca5BbKA=)
2: D39B04847C4B11EEB4EA3632C4F9AE02.roa (hash: jCjk18NlTAO280vVwUPsYgJU42p5ZyEQ+Q3/KbnN9I8=)
3: 5694D344791B11EEA64C016BC4F9AE02.roa (hash: ZHYQ3wHDGWknZGEZPQElBL1vATEt+W0eJbB64xYMxf8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl
rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 07:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E678, serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
Validity
Not Before: Oct 25 07:18:35 2025 GMT
Not After : Nov 1 07:18:35 2025 GMT
Subject: CN=68fc79cc-6cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4d:ef:44:89:cf:64:e6:95:40:c5:50:aa:8d:
e6:5e:07:dc:34:ae:f1:eb:61:c0:66:e5:59:3b:c8:
9f:1e:6b:71:c9:08:72:74:4d:ca:f6:f7:75:fa:5f:
a9:2a:a2:4b:95:d7:aa:21:c3:35:ba:e3:e9:84:2a:
40:1c:e5:23:ff:12:c5:50:72:2a:74:fe:66:a4:c0:
81:5b:8e:33:0f:69:2b:d4:0f:6f:7e:73:85:8a:bd:
a1:b3:78:70:26:8a:bb:4c:d9:f2:f8:a9:fe:50:a8:
a4:57:03:74:81:6b:8e:77:93:4d:ad:43:72:f9:98:
06:7e:e5:84:99:8c:9f:06:95:99:8d:79:a2:d0:14:
d4:68:f3:86:c4:eb:b8:19:f7:20:a1:5a:42:aa:f7:
d7:0c:62:2f:79:0d:36:3a:7d:a1:97:ef:fa:8a:c1:
4e:2e:71:97:34:ce:83:dc:f2:03:19:d9:6e:0f:dc:
79:ba:af:34:0b:68:21:1e:da:00:19:ac:c2:6a:1b:
44:f7:84:d7:85:eb:5b:4f:f6:5d:d3:5a:72:2f:da:
fd:54:f8:5b:c8:fe:ab:3c:b9:90:df:77:60:cf:85:
bb:d9:05:e5:80:39:a9:af:64:fc:c4:9e:b1:77:30:
d2:a4:7f:cd:f9:36:d1:34:7d:28:7c:7e:b4:26:32:
b0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:33:37:C8:61:A7:12:39:B5:B0:D7:B9:07:E9:3E:53:3F:61:19:B6
X509v3 Authority Key Identifier:
keyid:00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:51:fb:92:91:34:b9:5f:7e:31:f3:a0:88:71:b8:e8:56:1e:
78:f3:3b:56:4e:c0:18:f2:5a:50:b8:34:63:0d:2c:2a:84:b7:
4c:9c:c1:bb:18:7b:c2:75:b6:ac:a8:5f:01:ae:85:41:fc:d6:
56:6e:fe:1f:db:1e:6a:43:fa:6a:36:64:84:90:d5:23:43:12:
87:5b:4a:22:12:4c:fb:20:70:62:c3:8d:52:75:76:20:e9:c3:
c5:b6:bd:98:b2:fa:38:c3:e0:ad:66:85:b2:93:45:48:a2:10:
01:ad:25:bd:e6:8c:93:6d:86:1a:30:5b:4b:d5:1e:ef:9c:b6:
bb:0b:2c:42:50:ae:6d:cb:04:f4:34:59:93:e3:e0:34:9e:b3:
a7:b0:ad:27:4d:05:0a:71:70:65:cd:6f:b4:c8:6b:6b:96:79:
c9:a8:67:ae:2d:c6:4b:72:2e:a7:ba:60:f2:a6:20:4e:b9:41:
4f:7e:51:a8:32:bf:4c:ca:c1:d3:6a:37:c9:b1:21:31:50:a2:
3b:3f:41:f1:36:45:9f:91:65:82:ee:9b:81:80:8a:3c:6a:36:
10:25:a7:25:03:7c:6f:38:66:8f:07:f5:19:52:0d:ec:59:d6:
a3:ce:d9:60:51:c8:58:0b:a2:7e:e6:27:97:97:0f:f2:b0:ec:
2d:32:b9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 18:00:03 2025 by rpki-client