
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
File: hDGOgbLln2EUsQL6RQgzfekVw5M.mft (raw, json)
Hash identifier: cgCeaF9z76UUr1Je26I/lWWGqudaOKR6ObmrfdssQ88=
Subject key identifier: 0E:AE:C0:05:7C:54:0F:1A:9D:45:57:F8:70:F8:E5:21:2B:B9:CB:64
Authority key identifier: 84:31:8E:81:B2:E5:9F:61:14:B1:02:FA:45:08:33:7D:E9:15:C3:93
Certificate issuer: /CN=A9176632/serialNumber=84318E81B2E59F6114B102FA4508337DE915C393
Certificate serial: 3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDGOgbLln2EUsQL6RQgzfekVw5M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
Manifest number: 3D
Signing time: Wed 05 Nov 2025 07:40:51 +0000
Manifest this update: Wed 05 Nov 2025 07:40:50 +0000
Manifest next update: Wed 12 Nov 2025 07:40:50 +0000
Files and hashes: 1: hDGOgbLln2EUsQL6RQgzfekVw5M.crl (hash: IdzofeXQWNMX84vFerrT9RfCXLw5AElljStJbjk0TLA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.crl
rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDGOgbLln2EUsQL6RQgzfekVw5M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 07:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176632, serialNumber=84318E81B2E59F6114B102FA4508337DE915C393
Validity
Not Before: Nov 5 07:40:50 2025 GMT
Not After : Nov 12 07:40:50 2025 GMT
Subject: CN=690aff82-1203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:11:b0:d4:6e:c7:06:10:5b:9c:c5:64:5f:
fd:aa:b8:e6:20:4d:e8:86:96:be:be:f8:42:53:a8:
97:0f:85:7c:5a:00:c0:50:61:39:17:6c:61:ca:e2:
de:0a:b9:a9:50:35:bb:eb:97:90:8e:42:bf:a3:af:
d1:7f:23:3f:1e:f0:8d:68:98:1c:2e:ef:f7:63:fc:
a5:72:13:2a:2b:9f:4e:b0:f5:57:73:96:af:ff:ee:
4e:a8:18:36:d4:48:df:28:14:f8:26:7f:50:96:04:
21:d4:f8:51:88:0e:9d:37:8b:eb:23:2d:41:58:c1:
ae:b8:03:48:9b:e1:05:8a:f4:c4:2b:e0:ab:5b:d0:
b5:e6:31:b0:b8:26:0d:d9:ad:64:d2:c7:1d:5d:60:
8a:38:55:ac:ea:59:c9:9d:35:04:4a:a2:10:07:5f:
59:d5:73:2e:bf:92:99:a8:27:ec:51:9e:4e:ee:1c:
e5:13:33:ec:71:cb:5a:e9:18:2f:0f:5f:9e:72:3e:
5e:31:0b:0d:5e:ba:58:a7:ed:c3:f0:2c:a2:53:ba:
f1:24:5a:86:41:d2:d7:3c:d5:97:50:9a:dd:71:f5:
3b:04:b1:eb:57:e6:cb:6f:c0:e6:ac:8a:30:f9:ab:
66:39:85:4d:7d:bf:2d:22:e5:15:bf:3a:82:a6:f8:
f7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AE:C0:05:7C:54:0F:1A:9D:45:57:F8:70:F8:E5:21:2B:B9:CB:64
X509v3 Authority Key Identifier:
keyid:84:31:8E:81:B2:E5:9F:61:14:B1:02:FA:45:08:33:7D:E9:15:C3:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDGOgbLln2EUsQL6RQgzfekVw5M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:51:dc:69:ab:e4:b9:4d:70:15:e9:fb:2f:a8:3a:84:ae:04:
d0:1f:50:12:e9:9d:b4:f9:14:85:96:35:67:72:a7:06:b7:9b:
8d:de:c1:4d:01:73:2a:f8:14:93:99:a8:52:e7:f4:7e:16:1a:
d9:40:47:01:77:c3:6c:12:5a:39:c3:dd:25:54:1c:0e:47:54:
36:b3:35:7b:ff:7a:ac:72:0f:57:c8:8c:69:41:96:c4:8f:38:
6b:b1:2d:22:56:97:64:c4:dd:74:fb:d9:1b:5b:b5:ac:bf:40:
ef:07:8e:89:08:3a:f5:b2:90:55:90:ae:e2:91:8a:0e:b3:64:
ec:22:69:7a:f8:dc:72:9e:9b:0a:82:fb:59:a2:6f:19:61:4d:
7a:d3:30:1b:3c:a6:6a:d6:e9:34:f4:43:f8:bc:43:15:25:e7:
30:e4:ac:79:ca:d0:db:08:8b:72:5e:74:83:29:e3:4e:d9:7a:
2d:5d:43:64:71:ca:50:40:60:4f:07:25:72:8d:73:5f:2e:96:
9e:36:6d:ee:c6:5f:b6:27:f1:c7:c5:f9:1e:6c:5d:65:c5:17:
ee:49:2d:0a:42:89:89:30:4d:6c:87:7a:0d:94:cf:2f:1b:11:
6d:a9:ca:80:89:27:09:54:75:a0:ab:a0:53:e6:66:6e:65:7d:
b6:42:b8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:06:44 2025 by rpki-client