
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
File: nplO914RM-YPAbmkigkmGVL7G4E.mft (raw, json)
Hash identifier: fdfqaVxM5YlSF8ZBelIxzqGejcp6dKdvMvmBDstQgzY=
Subject key identifier: 97:86:CE:07:63:0C:3A:B4:42:95:EC:66:C5:4C:39:8A:80:ED:38:F4
Authority key identifier: 9E:99:4E:F7:5E:11:33:E6:0F:01:B9:A4:8A:09:26:19:52:FB:1B:81
Certificate issuer: /CN=A9172154/serialNumber=9E994EF75E1133E60F01B9A48A09261952FB1B81
Certificate serial: 0A1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
Manifest number: 0A18
Signing time: Sun 02 Nov 2025 19:44:49 +0000
Manifest this update: Sun 02 Nov 2025 19:44:49 +0000
Manifest next update: Sun 09 Nov 2025 19:44:49 +0000
Files and hashes: 1: nplO914RM-YPAbmkigkmGVL7G4E.crl (hash: yQ2oyakEsIX/Dpn5df120UNJrbtMW2d31OdxjtvujrY=)
2: 95A08652730D11ECAB074439C4F9AE02.roa (hash: 8SZ9w1bXpjgmgqCHhkJA4hqFkmJXaJwJe1y4R5qoWpI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.crl
rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 19:44:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2591 (0xa1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172154, serialNumber=9E994EF75E1133E60F01B9A48A09261952FB1B81
Validity
Not Before: Nov 2 19:44:49 2025 GMT
Not After : Nov 9 19:44:49 2025 GMT
Subject: CN=6907b4b1-58ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:de:7f:03:44:5e:c3:84:43:b0:3c:32:08:3f:
4f:bb:54:9a:54:d4:33:71:2d:29:ee:93:80:ff:10:
51:62:06:e3:13:07:87:c4:65:36:9a:84:00:37:2b:
21:59:73:9a:91:19:4a:9b:35:25:f8:9f:cd:18:d6:
aa:ed:df:56:be:78:b3:0c:83:41:b8:03:e6:52:ec:
72:bd:0d:f2:f1:a1:e3:cc:6e:10:f1:96:ab:ad:f3:
8e:e6:9d:b5:81:b7:fb:fb:c9:7f:69:c3:9b:15:a0:
96:59:24:fe:45:5f:27:de:22:73:cd:1e:d9:73:14:
4b:ef:8f:a6:93:01:17:a4:9e:0e:04:6a:f9:5e:3c:
fb:26:15:0f:5f:ea:fd:a6:2f:d9:4e:c3:0d:75:a1:
ac:1c:87:ca:3c:32:2f:a8:a5:9f:79:b5:2b:46:84:
56:b9:0b:ec:51:a8:d4:c9:20:56:d8:b0:b5:50:b0:
cd:2a:92:9b:8a:83:96:5c:42:46:79:cf:2e:ee:57:
b9:e6:2d:89:44:61:15:b0:f0:0d:e5:3c:7a:ac:99:
b4:87:5a:54:3a:05:af:96:8d:a9:92:f8:c6:01:b8:
1e:84:3e:92:18:b8:e1:ce:67:aa:25:16:4e:0f:cf:
fc:1c:d1:c1:fc:8a:8a:86:b0:bc:86:cd:da:ed:01:
97:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:86:CE:07:63:0C:3A:B4:42:95:EC:66:C5:4C:39:8A:80:ED:38:F4
X509v3 Authority Key Identifier:
keyid:9E:99:4E:F7:5E:11:33:E6:0F:01:B9:A4:8A:09:26:19:52:FB:1B:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:d2:a9:f1:9b:50:8d:a4:2c:d6:ae:f5:30:f6:aa:bf:03:5b:
41:33:8e:5f:17:6f:24:f4:c1:73:6c:5a:85:82:21:5e:fc:70:
2e:ff:33:26:0e:52:22:a2:1f:48:8c:c5:ff:94:56:4b:16:47:
ec:41:cc:d7:3e:f7:6c:f6:c0:b3:34:85:d2:11:06:52:cd:e5:
f2:f0:a2:dd:fa:1b:a8:20:bb:1d:74:4b:39:30:2e:86:24:78:
95:87:74:9b:86:47:a1:b3:1f:9b:58:de:99:2a:11:8f:44:fa:
d7:fd:61:7c:fd:76:61:0d:83:d5:53:99:a6:1a:3b:eb:b5:4c:
f2:d8:cd:85:4a:10:4e:fd:c0:0e:34:ba:cf:e1:27:08:24:bc:
88:2b:89:b0:cc:12:bf:ad:fd:25:4d:e8:f4:a6:0f:ff:e5:99:
0f:1d:42:b0:26:78:2d:0a:a6:32:09:3d:99:e8:86:0f:bd:cd:
f9:1b:77:df:7b:3b:8f:87:86:18:09:2e:03:d4:16:7c:3b:59:
a1:2d:3e:ad:7e:e6:77:71:29:0a:34:b1:b6:dc:22:ac:54:45:
0b:fd:d8:81:b0:50:e1:2d:77:f0:80:6d:33:81:56:8b:a9:b0:
50:1e:9b:57:69:6d:77:f3:da:9a:7f:e8:74:ed:d6:52:43:34:
3f:8d:4d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:19:21 2025 by rpki-client