
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
File: ML4eudOsSdCv7hNTw_nRFnoAexc.mft (raw, json)
Hash identifier: 0JmgqPy8tPygv3eaEkGT2acsMIsOTT/9cTQVUxmc/O0=
Subject key identifier: D6:54:C0:87:75:8D:EB:AC:91:0E:41:94:84:60:5D:CB:1C:58:C4:AF
Authority key identifier: 30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17
Certificate issuer: /CN=A917B736/serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17
Certificate serial: D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
Manifest number: CA
Signing time: Sun 19 Oct 2025 08:56:16 +0000
Manifest this update: Sun 19 Oct 2025 08:56:16 +0000
Manifest next update: Sun 26 Oct 2025 08:56:16 +0000
Files and hashes: 1: ML4eudOsSdCv7hNTw_nRFnoAexc.crl (hash: Wgc6scVz+7NyjSSXnFwqUi/bwk5wufJhtU+AMaU9nfc=)
2: A8F4AE389D7E11EF91A24C73C4F9AE02.roa (hash: cqlcdGiLqE3aY+b7c71D9qJhiS/wi/pJbFxJk9OTyQE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl
rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 08:56:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209 (0xd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B736, serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17
Validity
Not Before: Oct 19 08:56:16 2025 GMT
Not After : Oct 26 08:56:16 2025 GMT
Subject: CN=68f4a7b0-d09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:26:b0:98:dd:de:94:0b:87:68:5f:29:cd:
38:6e:a9:e4:4e:a0:57:a6:c9:59:19:e0:ee:99:92:
b4:ec:a1:aa:da:3d:33:03:a3:f4:45:f4:28:14:39:
31:a8:a9:29:45:77:35:76:47:2f:f8:a8:90:b8:3c:
18:e7:ec:4f:bf:9f:b9:2e:4e:2a:69:12:90:19:80:
19:cd:a7:df:60:b2:75:69:90:93:30:2a:62:d1:85:
41:c9:ed:08:08:9a:86:8f:08:09:c6:59:22:9a:53:
69:a1:51:5a:4b:e5:e6:e4:e3:37:0b:47:35:61:61:
df:e4:0f:ac:52:c3:4b:74:0b:bb:c8:a9:7c:a1:b8:
2e:78:f0:c0:3b:44:eb:b4:d3:ba:5f:0c:83:73:1c:
02:64:49:90:35:58:db:dd:ba:45:02:25:77:db:a0:
58:92:d9:98:f0:70:18:df:aa:5c:9f:83:e4:6d:8a:
86:50:36:00:0a:ec:35:90:87:3a:d9:7f:79:18:b9:
73:a4:ba:66:43:74:5e:d7:a1:a7:d8:3c:df:ea:09:
d1:2e:a0:e4:2c:60:db:35:c4:ac:5f:b8:bd:33:4f:
63:12:1b:27:63:e2:37:11:06:40:8c:57:4f:cc:ec:
a8:16:5a:e8:25:1d:f6:59:ca:13:e1:15:55:ef:2c:
8b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:54:C0:87:75:8D:EB:AC:91:0E:41:94:84:60:5D:CB:1C:58:C4:AF
X509v3 Authority Key Identifier:
keyid:30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fb:a3:89:4c:70:56:8b:f7:2d:72:d0:f9:85:22:e2:cb:20:
cd:00:4e:6b:a7:86:07:fd:0f:ce:5a:e9:e4:bd:ab:e0:94:26:
96:f4:1a:fa:43:27:e4:11:33:e7:d7:32:42:59:25:e5:19:77:
27:d0:18:88:f3:f6:b2:03:8c:b8:b0:e9:33:8b:fb:7d:a4:e9:
59:85:e2:95:ee:e6:59:d4:9f:8f:e0:8f:e7:bb:c7:5b:ef:59:
94:e1:90:8f:0b:b7:34:5e:a7:c7:c4:aa:91:f3:5e:42:2d:cb:
fa:f1:06:39:e5:99:09:00:38:3e:37:32:28:9b:08:bc:b8:bd:
18:f5:a9:88:19:52:b6:50:74:53:e3:00:8f:f3:e8:46:62:6d:
f4:75:16:5f:70:32:eb:73:af:a1:00:c9:8c:1c:12:f3:90:88:
f4:a1:41:c5:4a:55:d4:d0:bf:7e:fb:53:86:45:27:44:a8:a9:
17:1c:ab:5c:c1:4e:45:c7:e8:65:cb:48:05:20:b0:f8:12:f6:
63:29:17:b6:96:02:91:c9:08:d9:d7:bc:b5:8f:bb:d2:2c:e2:
dc:71:7c:e2:cf:c4:df:ed:f6:90:80:63:3c:d5:ac:5a:f3:09:
0d:44:83:f8:32:fa:ee:fa:d5:46:a8:0f:bc:51:8b:41:18:f5:
38:14:62:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:28:07 2025 by rpki-client