
$ rpki-client -vvf rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
File: dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft (raw, json)
Hash identifier: zwve/873Ha0itIpIBq8jLtfb+no6K1Eoz4nEwpDwlkc=
Subject key identifier: 30:36:47:AD:51:0C:D6:A2:17:60:81:75:9F:2E:63:AC:6D:E8:F6:E1
Authority key identifier: 76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF
Certificate issuer: /CN=A91828F3/serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF
Certificate serial: 0202
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
Manifest number: 01FF
Signing time: Mon 03 Nov 2025 02:20:30 +0000
Manifest this update: Mon 03 Nov 2025 02:20:30 +0000
Manifest next update: Mon 10 Nov 2025 02:20:30 +0000
Files and hashes: 1: dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl (hash: 8LZVX9/Eg5qrxEnxLnEjgum/wog3BTkXZ6Ec0WJkVGo=)
2: 05E078B2A5D211EDBC42DA12C4F9AE02.roa (hash: 949cDrd9O3ejSTUuoxYP0yKZgFwRWnkdff/N9Ay5rNE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl
rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 02:20:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 514 (0x202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91828F3, serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF
Validity
Not Before: Nov 3 02:20:30 2025 GMT
Not After : Nov 10 02:20:30 2025 GMT
Subject: CN=6908116e-bde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9c:9c:ae:52:e7:08:01:7c:64:a1:c8:85:1d:
c1:5d:ce:39:d1:fa:c4:cd:ad:67:32:f8:4f:90:16:
d2:18:f7:a9:91:c3:21:51:74:95:2a:f8:17:f6:c8:
34:44:7d:85:2c:17:40:85:33:7a:ae:15:d5:5a:24:
f0:1a:b1:ca:c5:2a:bf:10:31:40:39:67:ef:44:69:
3b:f0:c3:e4:77:14:7a:84:be:07:2a:b9:ef:5e:60:
fe:7f:6f:78:04:d0:75:b2:c1:0a:7a:32:bd:33:52:
d5:d1:90:f1:b1:a6:9f:8b:50:fb:88:4b:a9:fb:b9:
f7:1a:82:51:aa:0a:89:b5:fa:ab:ef:45:46:ce:ea:
1f:55:0b:4a:27:10:8e:fa:ab:e3:35:50:1a:2f:51:
5b:56:42:6f:25:2d:c9:7c:c3:6f:0e:8a:dd:0f:bb:
ca:38:94:9c:be:32:60:23:cc:82:dc:87:6f:59:49:
a5:33:d2:f5:77:13:80:b0:18:43:7f:fe:c3:d9:73:
91:ab:f4:5a:f1:31:8f:19:5c:6c:4a:f4:84:8c:2e:
fc:a8:aa:0c:e0:1c:e7:2a:07:44:c1:28:70:69:09:
89:39:76:0f:5f:82:03:8b:46:72:3a:d6:da:82:28:
06:2b:33:4b:07:b7:0a:11:f8:27:7a:8e:fe:4c:07:
24:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:36:47:AD:51:0C:D6:A2:17:60:81:75:9F:2E:63:AC:6D:E8:F6:E1
X509v3 Authority Key Identifier:
keyid:76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:47:97:80:d2:9d:19:1e:0f:03:ac:a6:c1:f3:6b:0c:b9:0f:
b7:57:1c:da:01:da:1a:a2:97:f9:dc:45:a7:bd:9d:d2:48:e8:
54:12:49:50:64:43:a0:95:92:88:ff:70:24:cd:19:5f:df:30:
7c:72:87:09:2f:ad:d5:29:b5:75:00:9c:20:cf:cd:54:43:ab:
a2:86:be:ec:1b:a0:81:e5:e6:d8:d6:b2:ca:92:12:be:10:2e:
3e:30:9f:f6:a3:e6:62:e2:5c:0c:31:bb:81:15:6d:b0:a3:4d:
30:83:6f:61:17:d5:75:93:db:02:53:a5:d3:41:61:15:ea:50:
6e:35:00:68:77:59:f3:91:26:33:9b:99:fe:2c:ea:b0:1f:1d:
21:2a:25:45:0d:a8:87:0b:b0:c6:d2:95:9e:63:da:97:5b:15:
e9:2c:2e:95:e0:72:bb:93:a7:11:7d:e1:3e:72:8e:59:09:03:
74:c0:12:bf:c6:1d:9c:ed:54:96:ca:58:e1:18:fb:a5:6a:28:
c0:b2:3e:84:36:2e:6c:b0:d8:48:06:06:70:11:b3:57:53:93:
57:6b:1a:34:1d:1a:27:26:dc:fc:dd:c5:e3:0d:00:4b:b7:62:
67:79:66:0f:58:fd:51:4a:06:b8:b4:71:8e:93:63:9d:b8:88:
bd:69:31:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:39 2025 by rpki-client