
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
File: S9cDt_7KOqKoNmdfoPPzKYEub2U.mft (raw, json)
Hash identifier: ZSgf2CVelz/rjXOTKvVRofM8UypdpzwqR6EW71GFBBs=
Subject key identifier: 46:44:DA:F2:99:6C:DF:48:08:76:A7:6B:55:86:59:83:B0:BF:21:20
Authority key identifier: 4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65
Certificate issuer: /CN=A915FF72/serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65
Certificate serial: 01FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
Manifest number: 01F9
Signing time: Wed 05 Nov 2025 02:36:22 +0000
Manifest this update: Wed 05 Nov 2025 02:36:21 +0000
Manifest next update: Wed 12 Nov 2025 02:36:21 +0000
Files and hashes: 1: S9cDt_7KOqKoNmdfoPPzKYEub2U.crl (hash: tPBM1mwRhFHHgZvxqBAJJW45V3+McRAHJSVkL8BHvco=)
2: 13C23898BAA511EDB866A412C4F9AE02.roa (hash: h6q23QMfBwFmxIMVTA6ARQak7Qs7wYbVCQBIj8uPZPY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl
rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:36:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 510 (0x1fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FF72, serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65
Validity
Not Before: Nov 5 02:36:21 2025 GMT
Not After : Nov 12 02:36:21 2025 GMT
Subject: CN=690ab825-4b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:27:33:24:69:8a:59:ce:ae:fa:61:0b:8f:44:
5f:47:9a:8a:85:77:49:0f:ba:45:83:b0:67:73:02:
1c:db:48:4e:e4:2c:6e:2e:b7:76:d3:93:02:78:6a:
2c:3f:d0:e3:ea:1f:3a:73:5d:21:83:31:11:e9:09:
14:6d:b5:e3:b1:d2:83:c2:fa:e3:2e:f1:e0:5b:46:
85:97:b2:e6:c2:14:e8:8d:af:8a:72:39:7d:f6:d3:
44:76:04:cd:35:38:88:3c:92:a2:35:b7:02:6c:14:
f0:f6:03:3f:39:5b:c0:1d:d8:78:b1:c2:3d:0c:ff:
43:65:49:68:bf:ff:51:30:68:f0:c1:94:da:00:b7:
59:85:91:34:d1:54:fa:a0:9c:19:2d:ca:9a:92:84:
ae:cd:15:98:d9:7f:0b:c3:26:e4:9b:6d:86:93:41:
b2:24:01:99:47:eb:49:6f:f3:48:3d:96:ba:06:88:
cb:7f:15:2e:99:ba:8f:4b:0c:0e:ae:0b:e7:bf:cb:
c4:a0:b6:ac:c2:39:a3:15:89:aa:25:c7:3f:b3:83:
6e:cc:8a:e9:c0:3c:2f:4a:24:20:9a:b9:7a:ca:1c:
28:1d:f4:e1:90:8b:cf:05:99:33:3a:65:e9:37:20:
e2:ed:8c:0c:6f:2b:91:71:ed:b4:3f:3b:8a:c0:25:
4b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:44:DA:F2:99:6C:DF:48:08:76:A7:6B:55:86:59:83:B0:BF:21:20
X509v3 Authority Key Identifier:
keyid:4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:d3:1a:0b:41:50:f7:a6:ea:76:b3:50:6c:2e:9c:5f:7b:fa:
da:57:50:ba:29:60:57:05:66:5c:ce:ea:21:77:7e:46:dd:84:
b6:43:be:80:b6:7a:cc:f2:07:e2:e8:49:0a:3a:15:14:d8:c2:
a3:56:27:1f:61:62:26:91:54:de:53:84:91:bf:b2:d0:68:62:
66:d1:9d:a9:b8:75:d9:e1:80:d4:12:60:88:47:42:25:87:ce:
aa:02:fa:cd:3b:2e:fc:7d:2e:3d:a0:dc:be:05:5e:ce:fb:ab:
35:7e:8b:f2:b4:c5:11:40:64:dc:c8:0b:48:4c:af:ad:36:33:
12:ff:72:c8:7f:0e:ae:79:f6:d6:98:7f:3c:5f:40:de:d4:02:
b1:f5:45:01:20:ed:23:29:4f:2e:77:c6:5d:b6:94:5f:43:70:
87:86:bc:69:54:7a:0b:c2:a8:67:93:a9:58:c7:bc:c4:1b:bc:
6e:b6:aa:38:c2:b3:b3:ce:3d:9d:06:65:ee:6b:36:b9:ce:d8:
c1:5b:1b:cf:dd:af:1d:ff:10:a0:10:5e:fc:9c:18:b0:1c:c2:
10:3d:73:ce:3a:ac:a1:fa:d8:89:b7:c5:8c:df:a9:14:68:81:
eb:da:c3:bc:0a:dd:81:c0:b1:f1:55:1d:95:b5:25:da:83:f0:
76:e9:25:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:27:53 2025 by rpki-client