
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
File: if0nxQZ7TPQSKW_rps5tgxGFgAs.mft (raw, json)
Hash identifier: 3ABeEYLREbq/1ySTFaBGZCvYO+2RpCYnWWvlQpv2I+w=
Subject key identifier: 97:EC:1E:E9:3D:4F:DF:D9:6A:67:F3:16:68:CE:AC:B2:9C:C1:E7:E8
Authority key identifier: 89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B
Certificate issuer: /CN=A9185344/serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
Certificate serial: 34F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
Manifest number: 34DF
Signing time: Sun 26 Oct 2025 15:09:30 +0000
Manifest this update: Sun 26 Oct 2025 15:09:29 +0000
Manifest next update: Sun 02 Nov 2025 15:09:29 +0000
Files and hashes: 1: if0nxQZ7TPQSKW_rps5tgxGFgAs.crl (hash: vkrqRSBncR8x3fOGYtr1NgXAWeNwEHsN4J5sbTAAZzg=)
2: 4453BC8A2CD411EC8884B41FC4F9AE02.roa (hash: L9v33ErHRKA++x/T+d5W1nanQSyaxGDGiTysI79f4Mw=)
3: 438B5C5E2CD411EC8884B41FC4F9AE02.roa (hash: fvjNR7aEXviMeBGpx7kzk2S8B+LOJKavqoJJ41ujD8w=)
4: 7D2A30D22CD111ECBE97C117C4F9AE02.roa (hash: 7kBxjCAjLqc2z/ikXd0m4qFuLdkWBpVLj18nN1YZMWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl
rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Nov 2025 15:09:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13556 (0x34f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185344, serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
Validity
Not Before: Oct 26 15:09:29 2025 GMT
Not After : Nov 2 15:09:29 2025 GMT
Subject: CN=68fe39a9-6274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:86:7e:92:d2:9c:15:16:65:a4:ed:ec:c3:
95:91:75:77:f9:e7:20:2f:52:26:01:38:89:f1:78:
98:5d:97:11:fe:93:13:e6:03:02:b7:74:05:71:60:
37:0a:cb:3c:f5:bf:e1:c6:fc:76:8d:bf:0b:34:74:
5c:14:8d:c9:71:37:48:17:95:85:09:60:41:7b:49:
3c:2e:fd:c7:2b:41:bb:6b:d6:de:f8:39:78:2b:70:
e4:4b:d0:22:7c:81:69:50:40:40:31:64:6e:5b:82:
dd:f3:84:db:30:6c:d7:4d:c5:4c:11:95:7e:11:8b:
dc:3a:a4:eb:28:e4:b5:6c:94:61:b7:aa:e8:b2:77:
87:a5:8d:68:ef:c9:d7:b5:85:ec:d2:3a:4c:7d:78:
5b:0f:da:cf:40:50:29:2f:3c:73:11:a1:f3:0e:6c:
e6:f6:fe:2e:db:5a:36:5f:c8:c5:3d:54:a1:03:5e:
9e:5e:35:71:d7:9e:6a:33:a9:d2:ab:fe:fa:e5:80:
7a:5f:c9:5e:ad:7d:f5:47:5e:2d:14:93:d5:ce:4d:
83:ee:1f:b5:3c:23:94:9a:5f:9c:8c:52:6a:54:e6:
6d:d4:89:7e:ec:55:0a:19:21:d9:d4:42:8b:69:b2:
95:a9:72:be:97:f8:05:be:33:74:3f:88:ab:84:65:
53:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EC:1E:E9:3D:4F:DF:D9:6A:67:F3:16:68:CE:AC:B2:9C:C1:E7:E8
X509v3 Authority Key Identifier:
keyid:89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:35:3e:ea:08:82:4a:b0:fb:1d:33:ca:3b:ce:af:8d:2c:9c:
6f:06:47:25:07:1a:63:4b:ee:09:70:7b:25:ae:f9:80:d4:38:
73:b5:54:64:8f:0e:40:82:38:16:3c:0d:da:aa:f0:12:9c:1e:
57:e5:c5:14:4c:41:78:96:19:f6:57:a1:94:fc:0b:78:f4:20:
d5:ff:61:ea:af:d3:41:7c:8a:dc:ca:3e:23:dd:c7:52:dc:9d:
b4:03:8b:fa:00:7f:39:cf:ef:ea:6f:6f:1e:9a:d8:72:36:87:
6e:41:80:69:c8:d5:95:cf:6f:e5:ec:28:06:ec:6b:55:dd:be:
73:d8:38:83:67:5e:1e:fb:56:ba:16:68:ce:f1:cc:a0:d5:9b:
f5:32:dc:af:bc:43:dc:7e:2e:0a:30:3c:5e:5b:a1:1c:67:71:
6e:67:74:4d:3a:0f:89:20:57:c5:58:3c:d2:28:95:ea:43:f5:
00:f0:71:12:fe:40:f8:03:18:18:96:ab:fa:8f:d6:e1:36:04:
4e:33:e3:9a:aa:94:59:60:de:4b:9e:49:9c:7d:09:a6:ab:5e:
3b:2e:f2:e2:b7:bf:fd:c4:05:8a:d6:7a:3d:af:6b:7b:1e:cd:
47:ee:89:93:63:27:31:5a:eb:b6:cd:b1:2a:fa:40:6a:97:1e:
40:b1:24:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:44:26 2025 by rpki-client