
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft
File: 7drOQHH9qFhc8SNEuCUSze8H860.mft (raw, json)
Hash identifier: llEYqEX7CUEN0SUzZ/58QGS/vf4Zz5363lORQhqw+vg=
Subject key identifier: C0:08:4C:D4:C7:EF:48:20:2F:00:F8:74:F2:C1:85:AB:A1:0D:2E:41
Authority key identifier: ED:DA:CE:40:71:FD:A8:58:5C:F1:23:44:B8:25:12:CD:EF:07:F3:AD
Certificate issuer: /CN=A91D9335/serialNumber=EDDACE4071FDA8585CF12344B82512CDEF07F3AD
Certificate serial: 34D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft
Manifest number: 34D4
Signing time: Tue 04 Nov 2025 14:39:17 +0000
Manifest this update: Tue 04 Nov 2025 14:39:17 +0000
Manifest next update: Tue 11 Nov 2025 14:39:17 +0000
Files and hashes: 1: 7drOQHH9qFhc8SNEuCUSze8H860.crl (hash: d3Bc8crZxyVxdHdQnIhCWiL3+hKeZS4mnXsCgOrK+y0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.crl
rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:39:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13524 (0x34d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9335, serialNumber=EDDACE4071FDA8585CF12344B82512CDEF07F3AD
Validity
Not Before: Nov 4 14:39:17 2025 GMT
Not After : Nov 11 14:39:17 2025 GMT
Subject: CN=690a1015-671c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:06:5a:38:9a:b0:11:f0:1b:ee:60:2f:fd:31:
8f:a8:62:fc:7d:82:6e:d2:cd:c2:e3:88:74:a6:d8:
6c:37:96:e1:52:b9:dd:47:bd:40:e3:6a:0f:71:52:
3e:4e:9e:fe:45:99:2e:7e:8f:32:76:b4:40:83:46:
2f:46:40:04:0d:fb:f0:c2:de:88:58:92:42:85:d7:
ea:94:a3:04:8c:89:b3:5c:93:ed:2e:bd:b4:0a:38:
e6:2b:9e:83:e0:3a:85:8d:87:7d:27:93:00:6d:a4:
fa:87:59:ac:68:03:0f:a4:b9:b8:46:c4:fd:7f:66:
0d:02:2a:eb:97:55:d0:db:20:4b:a7:4b:81:f1:62:
90:a3:c6:1d:bf:e6:ec:d4:e1:77:c2:3a:0d:d6:17:
f3:b0:bf:30:4f:c8:68:fd:dc:5a:b3:cf:46:ec:5e:
22:df:85:5e:bd:14:6e:66:94:27:14:38:4b:55:db:
cc:26:17:04:e2:9d:3d:24:10:9e:e6:73:27:67:a8:
2c:a2:06:f0:7e:2d:a8:14:4f:c8:3f:88:df:3b:20:
bc:cb:d4:02:0c:06:48:63:13:d1:6a:a8:ed:00:d8:
a4:5b:4e:47:6c:c1:2e:bc:d9:8a:72:22:20:a9:e6:
29:25:c9:80:fb:a5:77:16:2d:e3:11:ff:dd:19:c7:
21:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:08:4C:D4:C7:EF:48:20:2F:00:F8:74:F2:C1:85:AB:A1:0D:2E:41
X509v3 Authority Key Identifier:
keyid:ED:DA:CE:40:71:FD:A8:58:5C:F1:23:44:B8:25:12:CD:EF:07:F3:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0f:47:49:19:d8:82:61:9d:e3:f6:ba:86:77:97:15:2b:89:
fb:15:ab:2b:8f:11:b1:6b:18:40:96:a1:ab:b3:b1:31:d3:91:
c5:26:6e:dd:10:46:02:7d:5a:38:7b:28:0e:b6:61:67:4a:e5:
3e:79:fb:73:82:6e:9e:5b:ae:23:c0:0a:29:68:15:6c:09:81:
f2:34:35:d5:91:41:63:46:dd:3d:47:d5:a1:ae:5c:45:a8:be:
91:12:13:d6:c9:f2:f4:27:ae:55:ac:1a:dc:2a:2f:f7:fa:51:
29:6f:ad:7b:d4:a6:55:43:30:67:ae:86:98:7a:ad:54:14:be:
9b:08:e5:47:3b:34:cb:21:e7:d7:52:5e:22:12:33:33:5e:66:
76:4a:a3:a8:40:b5:97:be:99:9b:44:aa:01:0f:d6:2b:fa:c7:
b6:23:3f:99:fb:35:4f:b7:5e:5b:f6:29:22:68:84:5a:f3:44:
46:78:64:05:09:04:b9:01:86:7c:ce:c2:eb:9c:f3:9f:19:e7:
2c:73:fa:60:04:63:47:ce:b9:d3:c7:06:0f:10:55:d5:2c:52:
12:7a:6e:3f:a9:8a:d0:15:ee:19:14:be:47:03:29:63:de:49:
58:7d:3e:7b:fa:5f:21:22:c6:d5:03:e9:9c:ea:af:32:75:e4:
0d:22:ea:78
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDkzMzUxMTAvBgNVBAUTKEVEREFDRTQwNzFGREE4NTg1Q0YxMjM0NEI4MjUxMkNE
RUYwN0YzQUQwHhcNMjUxMTA0MTQzOTE3WhcNMjUxMTExMTQzOTE3WjAYMRYwFAYD
VQQDEw02OTBhMTAxNS02NzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1gZaOJqwEfAb7mAv/TGPqGL8fYJu0s3C44h0pthsN5bhUrndR71A42oPcVI+
Tp7+RZkufo8ydrRAg0YvRkAEDfvwwt6IWJJChdfqlKMEjImzXJPtLr20CjjmK56D
4DqFjYd9J5MAbaT6h1msaAMPpLm4RsT9f2YNAirrl1XQ2yBLp0uB8WKQo8Ydv+bs
1OF3wjoN1hfzsL8wT8ho/dxas89G7F4i34VevRRuZpQnFDhLVdvMJhcE4p09JBCe
5nMnZ6gsogbwfi2oFE/IP4jfOyC8y9QCDAZIYxPRaqjtANikW05HbMEuvNmKciIg
qeYpJcmA+6V3Fi3jEf/dGcchAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAITNTH
70ggLwD4dPLBhauhDS5BMB8GA1UdIwQYMBaAFO3azkBx/ahYXPEjRLglEs3vB/Ot
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTMzNS9FNjI2RTVEMDFE
OEIxMUUyQUVGRERBRTYwOEIwMkNEMi83ZHJPUUhIOXFGaGM4U05FdUNVU3plOEg4
NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdkck9RSEg5cUZoYzhTTkV1Q1VTemU4SDg2MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OTMzNS9FNjI2RTVEMDFEOEIxMUUyQUVGRERBRTYwOEIwMkNEMi83ZHJPUUhIOXFG
aGM4U05FdUNVU3plOEg4NjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBcD0dJGdiCYZ3j9rqGd5cVK4n7FasrjxGxaxhAlqGrs7Ex05HFJm7d
EEYCfVo4eygOtmFnSuU+eftzgm6eW64jwAopaBVsCYHyNDXVkUFjRt09R9WhrlxF
qL6REhPWyfL0J65VrBrcKi/3+lEpb6171KZVQzBnroaYeq1UFL6bCOVHOzTLIefX
Ul4iEjMzXmZ2SqOoQLWXvpmbRKoBD9Yr+se2Iz+Z+zVPt15b9ikiaIRa80RGeGQF
CQS5AYZ8zsLrnPOfGecsc/pgBGNHzrnTxwYPEFXVLFISem4/qYrQFe4ZFL5HAylj
3klYfT57+l8hIsbVA+mc6q8ydeQNIup4
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:10:23 2025 by rpki-client