
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft
File: DvqgEPOwbVMhkO827SAodPggF8k.mft (raw, json)
Hash identifier: jgYYGiGHYct0VGkcPbGZCMzCchHo1JB0tJvIbiqXvcc=
Subject key identifier: 66:8C:CE:21:2C:20:FE:04:30:4D:7B:B2:5F:B3:1D:31:E9:0D:1E:99
Authority key identifier: 0E:FA:A0:10:F3:B0:6D:53:21:90:EF:36:ED:20:28:74:F8:20:17:C9
Certificate issuer: /CN=A9167F0C/serialNumber=0EFAA010F3B06D532190EF36ED202874F82017C9
Certificate serial: 0F89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft
Manifest number: 19C9
Signing time: Sun 02 Nov 2025 17:34:07 +0000
Manifest this update: Sun 02 Nov 2025 17:34:06 +0000
Manifest next update: Sun 09 Nov 2025 17:34:06 +0000
Files and hashes: 1: DvqgEPOwbVMhkO827SAodPggF8k.crl (hash: LQ01LTqCGqdHrT8Fy2KiLuHS74qN8DGRU53Yg4B/wbM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.crl
rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 17:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3977 (0xf89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167F0C, serialNumber=0EFAA010F3B06D532190EF36ED202874F82017C9
Validity
Not Before: Nov 2 17:34:06 2025 GMT
Not After : Nov 9 17:34:06 2025 GMT
Subject: CN=6907960f-3328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:10:7d:1d:e4:91:c7:6b:1c:8e:24:c6:fb:84:
9e:f7:f2:16:11:db:94:c6:90:23:1c:b3:ca:a5:a0:
d4:c4:d5:85:eb:53:46:62:1c:a3:ff:ec:81:0d:03:
db:3a:dc:34:34:b5:85:a3:32:ed:0e:63:b4:91:0a:
2f:cd:1f:b7:4e:1c:9c:70:79:9c:c8:4a:d1:63:df:
fb:cb:5c:4d:c4:90:07:7c:df:e3:6f:8f:85:db:24:
31:fe:98:97:2c:d1:3a:85:57:0a:43:2a:85:fc:db:
35:d6:63:93:91:05:cd:87:1c:a1:fe:c4:db:28:e4:
fd:bd:00:74:b4:e8:c2:68:f6:0b:c7:b2:be:f3:f8:
80:8d:d5:c7:73:94:29:e9:93:d3:af:60:0c:0b:53:
a3:d1:58:29:01:26:3a:38:67:4d:e1:94:19:1e:59:
9c:37:61:2a:bc:b8:03:e2:26:60:a6:32:11:75:58:
ac:bc:33:c4:6f:43:e3:d5:d3:96:0e:e5:c6:7c:33:
17:e9:d0:4e:98:21:8c:1e:2f:d7:d5:d8:29:16:01:
ee:c8:dd:26:5f:d9:7b:18:85:33:c7:ad:c4:2e:75:
14:40:eb:94:5b:d3:40:b9:34:21:7a:b2:c2:3e:c8:
fe:3d:00:24:83:13:80:6d:4b:7a:de:07:81:a7:d9:
7b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8C:CE:21:2C:20:FE:04:30:4D:7B:B2:5F:B3:1D:31:E9:0D:1E:99
X509v3 Authority Key Identifier:
keyid:0E:FA:A0:10:F3:B0:6D:53:21:90:EF:36:ED:20:28:74:F8:20:17:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DvqgEPOwbVMhkO827SAodPggF8k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/DvqgEPOwbVMhkO827SAodPggF8k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:7e:b2:99:15:ae:fe:5c:7a:a1:80:c5:08:cc:8c:78:47:ae:
12:3f:98:85:86:29:87:a3:68:42:14:47:93:01:ab:a2:85:88:
32:01:67:65:b9:25:01:a3:f2:1b:53:2d:14:f8:a9:83:21:29:
a3:94:2a:fa:83:10:0c:2e:9f:b0:8c:7d:09:5c:a5:01:9d:18:
4f:aa:be:a0:79:a0:0d:fd:b9:d9:23:1a:55:be:7b:df:6c:2b:
e8:ae:fe:45:d1:af:bf:44:b6:56:e3:16:1a:17:a1:b4:ee:47:
66:6b:a1:0f:57:7c:d2:bd:37:ba:bb:07:53:7d:d0:7f:cb:eb:
54:92:bb:1f:f9:e3:f7:25:3c:74:d7:56:ca:d9:1d:f2:32:b2:
8d:ea:b1:8f:79:d2:e6:be:26:3d:f4:62:fa:e3:d0:1f:13:ae:
13:a0:df:7a:a2:92:84:d9:63:c8:53:20:ae:c5:30:49:02:92:
0b:a0:43:c8:cb:62:74:00:0a:13:64:c0:2f:86:4d:21:ff:7b:
36:a7:85:ac:87:0d:91:da:0a:e3:ec:7b:05:45:4e:4d:10:fc:
d7:f4:50:10:38:95:50:ed:8e:c5:bc:c2:a4:26:fd:6f:27:c0:
95:ef:86:3e:b9:42:3c:23:42:b1:e4:af:3e:a3:1f:8f:66:21:
eb:d2:4a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:02 2025 by rpki-client