
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
File: bOLX0NlZgNdDytSEhphI26Elwps.mft (raw, json)
Hash identifier: etD0bL6FFFS+o79cnDan4VWO3tExWYmD7TucIjEYNSw=
Subject key identifier: 61:B9:6E:5E:A1:FA:13:02:73:96:D6:52:FA:83:53:15:53:55:93:E0
Authority key identifier: 6C:E2:D7:D0:D9:59:80:D7:43:CA:D4:84:86:98:48:DB:A1:25:C2:9B
Certificate issuer: /CN=A9120E98/serialNumber=6CE2D7D0D95980D743CAD484869848DBA125C29B
Certificate serial: 0189
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
Manifest number: 0183
Signing time: Wed 05 Nov 2025 03:50:16 +0000
Manifest this update: Wed 05 Nov 2025 03:50:16 +0000
Manifest next update: Wed 12 Nov 2025 03:50:16 +0000
Files and hashes: 1: bOLX0NlZgNdDytSEhphI26Elwps.crl (hash: KJmUbCMG46utYWqyIUUaOLayOhUm6KyzMLC2VBPjF8U=)
2: 36F3B6A86E5411EEAA31F87AC4F9AE02.roa (hash: sGfgOeU/fHIH2HrB1IOWJi3rlZbzHtByfN0MLcFepBI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.crl
rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120E98, serialNumber=6CE2D7D0D95980D743CAD484869848DBA125C29B
Validity
Not Before: Nov 5 03:50:16 2025 GMT
Not After : Nov 12 03:50:16 2025 GMT
Subject: CN=690ac978-1ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e5:73:87:06:70:d1:56:42:29:a3:a8:e2:4c:
82:a7:82:f3:f9:b8:fc:04:c7:cd:6c:48:21:6c:14:
08:8f:cb:f8:b5:7d:30:7b:6f:2b:26:24:9e:8a:4d:
e1:60:c8:9f:8d:8b:8a:5d:77:01:65:ba:b4:3d:d6:
f0:f6:06:fb:98:a2:bf:bf:f8:0a:70:03:78:39:14:
b0:66:77:6e:e4:41:84:6e:e3:1d:a4:14:7f:57:98:
49:76:5d:0f:06:5b:42:af:d6:c1:56:af:f7:15:cc:
18:75:50:2b:0a:cc:23:2c:bf:30:f2:80:6d:e3:2c:
fd:e2:e1:8d:8f:20:81:09:38:6a:d5:65:d8:84:09:
15:3c:bd:7d:91:89:cd:ff:8a:b1:d0:a6:ff:76:b9:
de:90:0e:b8:0b:6d:c6:1d:93:d1:9b:91:f7:df:88:
05:70:46:e6:e6:da:a7:3f:6c:b7:46:ba:05:ba:9a:
2b:76:22:c5:73:53:48:cf:a0:f8:5b:3d:61:de:ce:
7c:7c:55:f1:e7:19:7a:d3:29:8d:aa:e9:fa:3c:d4:
ec:2a:8c:20:e0:6d:87:09:c9:8f:7c:0c:8d:1d:66:
73:ec:c6:cd:b4:92:02:26:50:95:e4:d0:c3:ce:f8:
92:3b:a3:ee:12:95:74:8a:d7:79:5c:69:f1:c1:51:
23:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B9:6E:5E:A1:FA:13:02:73:96:D6:52:FA:83:53:15:53:55:93:E0
X509v3 Authority Key Identifier:
keyid:6C:E2:D7:D0:D9:59:80:D7:43:CA:D4:84:86:98:48:DB:A1:25:C2:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d3:80:a9:ff:5a:96:cc:67:7d:c2:c5:7e:a7:2b:89:d5:ed:
86:b6:f1:85:9b:53:b9:96:69:1e:1f:df:f6:e5:5f:23:91:d9:
7a:ed:09:83:59:12:a8:d9:a6:0e:fa:11:55:c6:20:8d:dc:bc:
c1:9b:49:35:33:94:19:01:0c:5c:6b:38:f9:45:9f:13:96:c4:
44:0b:da:4b:f5:78:76:4a:8a:28:88:79:8d:d4:c5:b4:26:57:
cd:ca:a9:87:d8:ec:be:53:15:54:fb:2c:c9:42:30:ab:55:e9:
c8:a5:9a:e0:e6:5b:55:7f:b3:91:fd:21:bc:15:ed:ac:15:f5:
24:d9:e1:93:ca:2b:67:39:a1:02:e1:ae:8a:7b:0a:d4:02:9c:
3f:b3:ea:c0:e0:ce:5b:25:41:bd:f1:33:90:ae:dc:7e:14:4e:
a9:b2:3d:4c:2b:ce:20:a0:38:33:c5:72:43:e3:e8:5c:cd:a1:
37:41:87:dd:5f:f1:37:f4:16:9d:2a:ec:6f:9b:4e:01:d3:83:
4e:7a:68:92:76:c2:9e:ae:9d:03:b9:33:6c:b5:a7:90:e9:e4:
76:82:c1:49:c5:e8:28:f4:4a:fb:38:94:6f:00:09:cf:0e:2b:
f3:cd:84:4c:00:63:f8:1d:53:98:29:e8:5e:10:78:00:82:8b:
33:53:11:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:55:07 2025 by rpki-client