
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.mft
File: adcLNjVnbk9zG47xxYVbXi8n84g.mft (raw, json)
Hash identifier: 4bwE+B7j2wTmH705lGQ3lvP58cDnTLepG5RRWcBJL9o=
Subject key identifier: B9:A2:C7:0E:94:F5:73:3A:3D:D9:28:01:BB:1D:CA:98:A4:57:08:66
Authority key identifier: 69:D7:0B:36:35:67:6E:4F:73:1B:8E:F1:C5:85:5B:5E:2F:27:F3:88
Certificate issuer: /CN=A9174B04/serialNumber=69D70B3635676E4F731B8EF1C5855B5E2F27F388
Certificate serial: 0212
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adcLNjVnbk9zG47xxYVbXi8n84g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.mft
Manifest number: 020C
Signing time: Mon 03 Nov 2025 02:17:42 +0000
Manifest this update: Mon 03 Nov 2025 02:17:41 +0000
Manifest next update: Mon 10 Nov 2025 02:17:41 +0000
Files and hashes: 1: adcLNjVnbk9zG47xxYVbXi8n84g.crl (hash: oPNfn6ywIe943BzcVVPqZSm5O105abgNsGyuR4mp2Kc=)
2: 576B4A9298AB11EDBC12AA81C4F9AE02.roa (hash: hpINcvJULE4XElDu0MJmStTQHvk/pvkVHzA8BiayIb0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.crl
rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adcLNjVnbk9zG47xxYVbXi8n84g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 02:17:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 530 (0x212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174B04, serialNumber=69D70B3635676E4F731B8EF1C5855B5E2F27F388
Validity
Not Before: Nov 3 02:17:41 2025 GMT
Not After : Nov 10 02:17:41 2025 GMT
Subject: CN=690810c5-3f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:ac:93:a8:b7:db:68:ad:1d:0b:7b:cb:a3:
57:42:b6:a7:7d:ed:50:48:91:a6:c6:31:26:e7:66:
af:ef:a1:31:22:8f:9a:2f:46:2b:a1:01:79:dc:15:
71:43:1f:4d:59:c8:60:c7:af:97:bb:2a:3b:58:1a:
f2:8a:a4:01:db:9e:90:ef:09:05:6f:b9:11:97:ce:
fc:08:30:e2:86:c8:ac:e2:2b:78:70:39:40:fe:dc:
b3:85:85:9b:cf:73:6d:b7:95:bf:de:36:a3:13:48:
f9:6c:c3:73:0f:d9:1e:a2:1f:82:1f:90:cf:c8:67:
52:0b:c7:54:4c:f3:c4:03:eb:95:7c:6e:50:2c:d0:
33:6c:d1:c6:9e:a3:f0:69:60:e2:9d:c9:52:e4:18:
9c:a7:88:7f:e1:ed:7c:9c:19:7a:88:14:61:b5:62:
a3:cb:c6:da:6c:8c:87:a4:70:e3:6b:ce:c4:ac:7e:
52:81:ed:70:d7:9b:f7:ef:b5:3c:b2:ca:d0:69:30:
80:10:bf:c9:4b:49:45:b5:fa:12:2f:fe:db:9d:61:
71:bf:af:d3:ae:20:fb:41:c0:c7:bd:ef:dc:0f:dc:
88:65:72:24:89:30:13:e5:08:4a:e7:00:54:2d:0a:
da:64:88:ea:f9:e2:fd:74:ec:09:a5:0b:76:b2:aa:
05:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A2:C7:0E:94:F5:73:3A:3D:D9:28:01:BB:1D:CA:98:A4:57:08:66
X509v3 Authority Key Identifier:
keyid:69:D7:0B:36:35:67:6E:4F:73:1B:8E:F1:C5:85:5B:5E:2F:27:F3:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adcLNjVnbk9zG47xxYVbXi8n84g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:fc:43:3a:4f:92:bb:6d:13:54:97:9f:04:8f:80:b9:3b:13:
82:90:39:ec:60:fe:9d:ef:ac:d0:c0:e5:a3:7e:7b:9d:81:68:
59:b6:f7:ff:24:33:8e:08:d7:3a:eb:8d:d2:ac:8a:65:40:0b:
de:cd:fc:58:ca:2d:cc:27:5e:6b:9a:67:a1:24:70:a8:91:11:
f0:fc:41:48:f9:e4:4d:1b:f5:d1:28:4f:d6:00:e8:c8:d9:e7:
5d:79:69:51:12:30:fa:27:0e:da:57:87:53:e1:a9:b9:07:29:
7a:d8:af:0b:65:1c:52:78:59:95:63:1f:7a:bd:38:0b:1f:e9:
ea:d0:77:5e:f6:4a:94:9e:39:f6:b1:d9:ee:18:59:b2:ee:22:
21:d1:9a:6b:a7:b4:d8:c4:01:d4:e3:e4:53:40:8a:52:58:ef:
bd:af:e8:bb:9d:bf:a8:46:07:95:a2:9f:8b:e6:ad:41:9f:85:
29:ea:d0:f7:45:4c:fe:b2:1f:e3:73:fa:57:b7:1c:1b:6d:6f:
b0:9b:de:c1:fb:00:e1:f0:2c:47:a9:ba:c4:3b:b4:7a:cc:ff:
87:dd:67:84:44:e7:0c:1e:6a:07:b1:83:7b:3d:b7:9e:47:ba:
83:bc:1b:11:73:e0:7a:6f:bf:1d:8e:23:79:44:79:ec:13:a0:
97:14:36:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:43 2025 by rpki-client