
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
File: Psg0IE1rqvmRQMA712IRRcB7umI.mft (raw, json)
Hash identifier: mIBUO16ZcI0Vglh+48whgu7jx/Cnd2AYaYYQgvcYtj8=
Subject key identifier: C7:F8:D4:25:8B:63:5A:36:B2:B4:6A:EE:1A:89:C2:93:57:99:8D:38
Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
Certificate issuer: /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Certificate serial: 34E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
Manifest number: 34DA
Signing time: Sun 26 Oct 2025 15:13:36 +0000
Manifest this update: Sun 26 Oct 2025 15:13:35 +0000
Manifest next update: Sun 02 Nov 2025 15:13:35 +0000
Files and hashes: 1: Psg0IE1rqvmRQMA712IRRcB7umI.crl (hash: d1TjSi50IW0BcAjQTYnNDZBlkFHCgUXSi7/RHoCzgMA=)
2: E7DDE5B8682811EB8D635520C4F9AE02.roa (hash: JPpUiaz8as6ncagKgyuUXaP5ZRdmrTGzakjmAvPZHY0=)
3: E73006AA682811EB8D635520C4F9AE02.roa (hash: 3dh9yLLZm2+U6xobWuHKGIC0VGl5iGyZmQBPzOFbKDA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Nov 2025 15:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13545 (0x34e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196D24, serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Validity
Not Before: Oct 26 15:13:35 2025 GMT
Not After : Nov 2 15:13:35 2025 GMT
Subject: CN=68fe3a9f-b20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:20:f6:5e:41:c4:9c:bf:1d:71:95:82:2b:59:
d7:54:f2:ed:02:ac:93:bc:33:a2:0e:0c:2d:8a:5a:
d3:f3:67:7e:ba:10:df:b4:80:44:cb:58:54:6e:73:
1e:c8:d4:d9:b5:20:3b:7b:0f:02:9c:3c:d7:9f:40:
4e:42:b1:67:cd:06:8d:fc:b1:c9:90:d4:4f:54:5b:
2e:7c:0d:92:fc:b2:1a:4b:d8:2e:46:44:df:78:cf:
ff:41:9e:98:4a:27:d9:f0:19:60:63:9b:85:46:b0:
5a:7f:3a:3e:54:65:fd:ad:2f:28:2e:2e:f9:ac:37:
13:8e:e8:1f:46:3b:c0:39:e5:9e:d9:e5:9c:ff:9b:
ed:09:26:8f:b1:7a:a6:04:0e:a8:28:96:d3:e0:e4:
0d:46:16:de:31:5b:39:08:f9:36:e5:d4:74:59:bb:
02:18:6d:d9:1a:88:bd:ba:59:66:0c:17:a8:26:c5:
87:ce:65:97:ae:0d:bd:d2:92:b1:92:e7:ef:eb:b1:
1f:25:8b:f1:bf:53:9c:8c:f3:c3:4d:72:b8:5b:da:
32:b7:78:d7:11:e7:c5:40:c4:3d:01:47:75:6d:4e:
6d:e7:37:8b:ec:16:ec:cd:8e:bc:69:a8:db:47:c3:
a6:4a:e6:6c:6b:d3:f4:3e:49:29:a1:1a:e3:97:ff:
94:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F8:D4:25:8B:63:5A:36:B2:B4:6A:EE:1A:89:C2:93:57:99:8D:38
X509v3 Authority Key Identifier:
keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2c:69:62:08:a4:b6:c2:87:41:f4:cd:44:f7:5a:4e:2a:81:
43:36:3f:7f:49:c4:34:2d:a7:40:eb:49:96:28:7a:d3:93:07:
67:65:56:6a:65:56:c2:b1:1c:1f:10:77:4d:b9:d7:02:24:32:
6a:38:71:36:3d:d8:8d:c0:0b:6b:9d:60:a0:1b:b3:76:66:86:
46:a7:3a:72:31:78:5d:a6:9f:cb:f9:7a:f1:a3:91:3c:a1:13:
b4:b0:f8:e3:93:22:38:aa:d1:9d:c8:8d:56:ad:71:97:7c:17:
e5:47:a3:fb:87:a4:60:8e:af:dd:0d:a8:35:64:84:ae:60:9e:
96:25:b3:d7:ff:05:15:e6:e6:79:9f:0c:1a:12:98:30:59:c2:
21:be:41:31:3b:8b:77:66:51:c9:c3:f3:c0:d1:73:c5:94:42:
28:b4:ef:88:a5:86:81:cb:ca:01:e9:81:d7:ee:bb:91:fb:40:
83:e4:57:5d:45:75:d6:c7:0a:d4:ee:92:31:aa:76:40:a7:10:
5d:78:0e:d8:7b:92:0a:6e:2f:36:d6:eb:44:a1:e1:7e:5f:95:
1c:48:cf:ce:8e:85:e0:a6:81:6b:4f:1d:69:27:0c:f6:a2:66:
dc:57:0b:c6:37:4a:2b:d4:05:9a:60:55:41:08:e6:b1:cc:79:
09:96:7b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:07:16 2025 by rpki-client