
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
File: rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft (raw, json)
Hash identifier: gBqOC2JC20fqJPIlz5jHGj02h645l/FmgLnIgeysp2I=
Subject key identifier: D3:9F:91:03:DC:B0:EE:D8:35:52:11:F6:92:EB:5F:FC:18:98:FF:39
Authority key identifier: AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E
Certificate issuer: /CN=A917C23C/serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
Certificate serial: 0788
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
Manifest number: 0773
Signing time: Sun 02 Nov 2025 21:36:21 +0000
Manifest this update: Sun 02 Nov 2025 21:36:21 +0000
Manifest next update: Sun 09 Nov 2025 21:36:21 +0000
Files and hashes: 1: rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl (hash: mLO5tn3N5jfqsqeHdzuZ/EexMdQHUZI2dniRW1cnjXM=)
2: D75EF2ACFB6D11EC8F56D760C4F9AE02.roa (hash: 2JXMW+fr45VK5sWZ5vPmZ3HpKXF1OtYxpAwUvK0JoOo=)
3: BA4B22643AC911EBB83D7F0EC4F9AE02.roa (hash: 49sLLzSLtNmidSVGS5udGErAMHHN/OeLE93kClICECY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl
rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:36:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1928 (0x788)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C23C, serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
Validity
Not Before: Nov 2 21:36:21 2025 GMT
Not After : Nov 9 21:36:21 2025 GMT
Subject: CN=6907ced5-3102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:19:d4:a6:31:d7:bf:5b:b1:15:37:7b:e0:fc:
16:77:ea:9f:72:7f:e4:d1:65:a6:ad:7a:99:d7:2c:
3a:fc:93:74:c0:11:4a:b7:48:01:cb:06:40:a3:ed:
30:68:3d:f6:86:1d:7a:61:92:20:5a:75:f6:ed:81:
15:f7:47:30:c1:76:45:4e:7c:70:7a:fb:66:12:67:
fa:e1:8b:e1:5c:13:54:28:59:08:18:9c:ae:8d:65:
7f:2f:5b:ea:bc:f1:9e:ec:b2:c3:f5:d8:01:c2:aa:
c1:12:07:4c:7d:ac:cf:11:ad:98:46:3f:39:f5:04:
13:ec:43:25:97:68:25:8a:1f:c2:8d:7a:c6:37:d9:
23:02:02:e9:fe:82:9e:02:41:97:cf:60:88:99:e8:
dc:a3:5e:7c:aa:c5:9d:9e:ac:43:60:56:9d:b8:00:
f7:92:a2:01:ea:57:20:7f:68:ab:7f:5c:bd:58:3c:
06:61:02:97:97:ad:38:96:5b:f8:fd:b3:b2:56:fb:
0c:c7:3d:ba:af:cf:01:d4:16:32:a6:74:f1:21:4d:
cb:e7:2a:11:d9:85:86:84:63:72:af:a2:91:b9:69:
89:09:f2:50:10:21:af:db:ae:55:3c:5d:b4:3c:77:
f1:41:23:db:6b:42:49:45:4e:6e:cc:56:6f:5b:bb:
7b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9F:91:03:DC:B0:EE:D8:35:52:11:F6:92:EB:5F:FC:18:98:FF:39
X509v3 Authority Key Identifier:
keyid:AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:a6:b1:46:b3:27:c5:cb:7e:bb:f8:5d:85:b9:74:82:ff:a8:
4b:b5:d1:82:7e:35:5f:57:96:1c:c1:06:29:fb:b0:dd:cc:51:
17:4f:eb:63:81:ae:cb:9f:43:ee:2f:9f:e9:4e:c8:29:e4:68:
c9:fe:20:63:9e:60:8a:1a:a7:2e:2e:83:e7:9e:49:e8:32:f7:
b4:56:58:bc:89:ea:60:b5:37:ca:52:23:0e:53:1b:c9:7e:c0:
81:ce:cd:df:da:42:0a:17:88:9d:b8:c5:98:c0:bf:f1:7d:b5:
36:88:00:14:e3:3a:6d:4e:70:9e:36:91:80:70:84:f9:fe:a9:
78:65:0f:95:28:43:6a:e0:a3:fc:b7:74:14:64:89:2d:f4:16:
c9:63:d2:22:e2:eb:73:71:aa:89:39:75:b6:65:6c:3f:e0:29:
72:7f:4a:12:89:fe:9b:9e:e6:46:be:3c:81:35:f3:1a:49:14:
3e:d9:d9:0e:41:21:ee:03:07:30:bf:e8:8d:ab:3c:68:5a:bc:
b1:f4:9b:d3:4a:5f:29:0c:23:39:6b:30:f6:2d:28:9a:54:37:
54:01:ad:c4:bc:b9:e5:ed:d9:ac:e1:14:44:85:5f:22:29:ea:
61:b3:86:40:13:13:91:64:e0:d1:f9:6a:1e:97:44:2a:4c:e2:
34:79:c4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:11:00 2025 by rpki-client