
$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
File: rpODqTtsWhNdJhOpfF3slgliM_E.mft (raw, json)
Hash identifier: H5EinbywcuUn9UbeOMpXqAG470xh/Zz8wrLGMtWQUNE=
Subject key identifier: D0:8B:75:69:DF:BB:4E:24:D7:84:D7:6B:25:73:89:83:92:7F:E3:DE
Authority key identifier: AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
Certificate issuer: /CN=A917748E/serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Certificate serial: 0239
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
Manifest number: 0239
Signing time: Mon 03 Nov 2025 01:48:01 +0000
Manifest this update: Mon 03 Nov 2025 01:48:00 +0000
Manifest next update: Mon 10 Nov 2025 01:48:00 +0000
Files and hashes: 1: rpODqTtsWhNdJhOpfF3slgliM_E.crl (hash: 3KlK6k5iX++Ss1Xs9FlKaUCiQFs1cvliZH1cWkbjyzU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl
rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 01:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 569 (0x239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917748E, serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Validity
Not Before: Nov 3 01:48:00 2025 GMT
Not After : Nov 10 01:48:00 2025 GMT
Subject: CN=690809d1-0ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a6:06:78:9a:ae:dc:89:71:11:db:33:dd:31:
4f:2b:8e:fa:26:36:a7:d0:8c:b7:de:57:9e:18:59:
d1:40:1d:1d:a7:b2:33:52:39:50:17:7d:d7:56:ae:
4d:a0:a4:f5:e0:e0:a1:ed:bb:23:c3:c0:8d:ec:c2:
ed:30:dc:d7:34:2c:d5:24:a0:07:f4:31:de:e9:04:
54:c4:f2:06:ef:cc:ef:6b:37:88:41:d4:05:5e:07:
6c:c7:82:0d:5a:9c:f3:75:db:c6:c6:6d:81:4b:35:
48:e7:5d:19:18:ab:b0:41:c7:e3:81:6b:5b:6b:91:
22:3f:6d:6e:ef:06:f3:65:aa:21:7d:90:20:bc:6d:
ee:02:2d:fa:43:c3:bb:98:82:e8:9b:79:27:32:41:
fe:97:fe:9c:ea:1d:e5:d2:71:1f:ba:8a:52:1c:77:
5a:4c:b8:41:72:ce:eb:26:7b:8a:fd:ce:8b:5d:47:
43:0d:5f:6c:7d:ac:3c:f8:ca:19:b7:47:d6:f9:9e:
ae:be:0e:57:c5:e8:be:0c:99:ba:3b:42:20:c1:af:
c0:7f:fa:dd:66:b6:95:a5:2b:a1:a5:51:8c:31:7b:
6e:ec:30:f7:04:45:ea:5a:b5:69:34:d8:be:e3:6f:
99:66:15:8d:fe:c3:c0:c8:dd:aa:e6:2c:3f:e8:53:
eb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8B:75:69:DF:BB:4E:24:D7:84:D7:6B:25:73:89:83:92:7F:E3:DE
X509v3 Authority Key Identifier:
keyid:AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5b:59:8e:a0:9d:c4:aa:96:a3:ec:4e:1c:e7:d7:c5:4d:5e:
7d:02:6e:80:b4:8e:c2:66:76:25:db:44:fc:36:2f:3e:3a:95:
a3:60:6a:90:3b:81:0a:76:ce:68:f2:f5:99:ed:ca:c0:ab:c9:
0a:4d:62:06:8e:0b:b6:e2:ad:93:4d:d4:0a:9f:48:f1:34:58:
06:36:5d:12:bc:4d:75:f6:fb:a5:6c:2f:4e:ce:d0:70:a4:98:
4e:f7:68:68:0e:f6:a7:62:d2:73:33:0f:94:a6:49:15:f0:73:
d9:1c:b6:3b:f3:57:e4:1b:52:91:a3:88:86:90:35:e0:74:13:
df:4c:19:7f:d1:5a:fb:e0:45:12:c0:d8:52:2d:76:cc:a0:bc:
8b:c0:96:c2:e7:0d:38:28:11:71:61:66:d4:f0:93:ba:fc:11:
b8:80:ed:d5:da:88:a3:bd:a8:c3:2d:67:ee:32:97:f0:5b:08:
04:b3:77:ac:c8:02:d5:31:0a:c5:fd:40:23:cd:5a:aa:ba:d4:
db:f1:71:03:5a:15:d3:eb:32:ae:7d:b2:b6:11:eb:2d:33:09:
e0:07:29:57:a1:2c:cf:fa:5a:63:29:d0:a9:5a:91:fc:dc:54:
0a:e7:e0:0d:7b:77:78:55:4a:34:05:d7:5a:0c:fc:c1:b6:06:
92:64:f6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:17:07 2025 by rpki-client