
$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
File: DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft (raw, json)
Hash identifier: 3AzPx/JCSksVd98vpOSwkRJNt0g3PxE//5YNeDopr/E=
Subject key identifier: FF:8D:2C:BA:14:F7:C8:36:D8:EA:28:02:F1:19:56:F7:89:75:47:30
Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5
Certificate issuer: /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
Certificate serial: 17AE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
Manifest number: 178A
Signing time: Fri 24 Oct 2025 16:56:54 +0000
Manifest this update: Fri 24 Oct 2025 16:56:52 +0000
Manifest next update: Fri 31 Oct 2025 16:56:52 +0000
Files and hashes: 1: DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl (hash: j8zI5mZVo8MwClYww1IP0wXZSrIamHmBeQ1w8D658A4=)
2: FDA89E2CA33511EBA984863CC4F9AE02.roa (hash: WZaPuq2ePLoM0KjlrMWH8IWVHfB/Av+7ec0Tgw3cu6Q=)
3: FEB0FC60A33511EBA984863CC4F9AE02.roa (hash: YlusDdL6GSsVTm6aqUoc8SPstBv7LDPsMKGOZ35QMHY=)
4: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (hash: 28BPEKV85FSPKq/CUsjxZqA9dsNxiffYXaIe9r8e36E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl
rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 16:56:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6062 (0x17ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
Validity
Not Before: Oct 24 16:56:52 2025 GMT
Not After : Oct 31 16:56:52 2025 GMT
Subject: CN=68fbafd5-8da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:f9:e1:86:cb:0d:d5:9a:22:c5:48:7c:58:
03:f9:9a:c0:a3:b9:95:20:17:2a:49:3e:43:cd:04:
e8:64:37:da:d5:63:55:da:da:dd:1f:6b:9b:81:89:
a7:88:e7:96:4e:2e:8f:d8:3d:c2:c9:25:ea:91:0d:
96:81:a7:d1:84:a4:1f:a0:0c:a8:39:cd:8a:2e:29:
3f:8d:67:82:a3:4b:4b:b3:c3:c6:57:de:ab:07:2d:
1a:4a:f5:98:09:2f:04:e8:dc:c3:c7:60:08:16:7d:
f8:29:71:8e:8a:96:73:e8:8e:a3:7a:04:e4:ac:88:
46:4e:53:13:a3:ef:07:02:3b:ea:8a:bf:c2:fb:27:
7e:ae:c6:dc:6f:7d:8e:c4:3a:62:b7:0c:e6:89:93:
f3:c3:c9:30:07:b9:f9:8c:18:4f:45:46:13:cc:11:
56:3a:e7:fc:6d:71:03:ba:91:bc:19:6c:e5:44:38:
2b:ec:f8:3d:0d:0b:54:5d:35:33:99:6b:18:24:95:
0a:71:bd:f9:68:e9:8f:40:d8:09:90:98:76:6c:a0:
02:70:67:53:6c:04:03:95:30:60:19:39:90:17:11:
f8:52:86:a8:a8:e6:94:b8:20:21:98:76:3e:05:54:
c3:fd:76:de:35:39:21:e0:40:f3:2f:20:8d:0c:78:
77:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8D:2C:BA:14:F7:C8:36:D8:EA:28:02:F1:19:56:F7:89:75:47:30
X509v3 Authority Key Identifier:
keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:d5:86:90:3a:4f:b9:95:b7:3a:ff:cd:9e:9c:b9:e9:7e:cb:
d3:40:bb:37:43:6c:89:39:50:65:c0:17:6f:19:2c:54:bc:ab:
e3:61:d6:1b:1f:93:51:7d:d1:64:30:79:a3:49:05:76:82:f6:
c8:18:87:df:1d:ab:e5:0b:c3:e0:34:04:a3:49:72:83:95:3b:
8c:14:12:b3:c4:ba:94:cc:6f:b9:e1:82:5f:f7:99:32:b0:50:
aa:9e:0c:67:bf:1f:18:24:3c:f6:81:16:b0:d6:2b:12:a9:c8:
d1:38:17:a6:04:b2:31:a1:7b:28:1d:c2:50:38:88:f5:29:2f:
fb:01:87:45:67:04:e6:fd:ba:98:e0:c7:35:e5:2a:0b:f2:e6:
2a:1d:b7:e4:2c:2f:d0:66:a6:57:ee:31:92:8a:cc:cd:f5:96:
a5:73:c0:dc:4d:76:a1:1f:84:ca:a3:cd:16:e0:b7:65:06:3b:
ed:99:27:f8:84:0d:3a:ae:fb:cf:d0:db:82:34:88:f9:b9:29:
55:84:6c:47:b8:77:4b:c9:a3:2b:11:8d:06:7c:d6:fb:ad:3b:
3e:f3:25:33:f4:76:c5:f5:28:e6:6d:e1:3d:d1:b7:f9:4a:e0:
4d:73:15:1a:d3:85:80:72:53:29:32:be:5a:bc:09:5f:e0:68:
02:1d:8d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 01:20:11 2025 by rpki-client