
$ rpki-client -vvf rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
File: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft (raw, json)
Hash identifier: 9F8vsLsfwLAYa4We59wVuR5gPC5Uszarq6xgA/gd5dI=
Subject key identifier: 4B:CD:98:8F:16:AD:53:D8:27:EF:6F:12:1E:13:2D:E6:65:BB:79:19
Authority key identifier: 98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70
Certificate issuer: /CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770
Certificate serial: 05F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
Manifest number: 05DB
Signing time: Sat 25 Oct 2025 01:16:10 +0000
Manifest this update: Sat 25 Oct 2025 01:16:09 +0000
Manifest next update: Sat 01 Nov 2025 01:16:09 +0000
Files and hashes: 1: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl (hash: mDeyeP5hZHXNFhoyt79vqCSjGM86I8lNuuWTTNvqACE=)
2: E9C2CC6C29CC11F086897744C4F9AE02.roa (hash: hA/qYpYBMY/Kd41Yn5++b5Q+qTaDQ7FCreW/lO2fSUE=)
3: B2C8CBDE5EDA11EFBFA8A226C4F9AE02.roa (hash: +jBGaqvKM/p3gFY9j31Ktn8G8q5l2wqpkIruownzwFg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl
rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 01:16:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1524 (0x5f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91228BC, serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770
Validity
Not Before: Oct 25 01:16:09 2025 GMT
Not After : Nov 1 01:16:09 2025 GMT
Subject: CN=68fc24da-c0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:50:6d:1a:68:74:6d:9a:3a:db:30:a8:2b:
26:8f:51:6a:94:49:bd:98:1c:2d:db:28:39:6e:93:
9c:95:59:e4:97:47:d4:d8:8e:61:11:63:05:b8:ae:
55:33:16:7c:11:4d:2b:c0:b3:d2:a3:85:c2:b0:2b:
3b:c0:13:93:10:e9:f0:e9:40:a0:23:6a:ba:d4:78:
6f:64:86:d8:96:de:21:ea:3c:0b:66:9e:72:d1:c4:
fd:8e:7c:c8:00:1b:cd:04:1a:e5:07:d1:a1:ec:3a:
0d:ff:54:66:68:da:97:d5:54:a4:39:6b:84:a1:df:
42:52:41:37:b3:9e:b7:7e:32:0d:a0:96:da:ad:72:
32:e9:60:1e:14:a7:16:db:33:ac:5c:12:95:15:20:
db:03:be:c4:28:9c:1d:d0:23:fa:73:fe:99:c4:73:
77:3b:0e:06:30:90:26:3d:69:46:c3:7e:95:94:be:
4b:10:cf:2e:98:51:7a:33:c3:eb:0f:79:55:ce:d5:
9a:82:52:c8:f2:95:f7:a8:94:f0:77:c4:56:e7:b4:
1b:70:1f:7a:55:6b:b0:05:f1:09:f1:de:cd:6e:a4:
c2:49:3f:13:7a:0a:e9:b8:60:1d:58:d3:9e:49:0a:
26:d0:38:1e:e2:3e:96:f6:14:2c:a0:bc:d7:12:b5:
30:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CD:98:8F:16:AD:53:D8:27:EF:6F:12:1E:13:2D:E6:65:BB:79:19
X509v3 Authority Key Identifier:
keyid:98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:27:81:94:20:3e:92:60:61:7b:79:0f:cb:1a:e0:a2:a0:9b:
5a:17:24:2a:29:09:5c:0b:04:86:40:44:d5:5b:39:d4:de:29:
76:23:8a:0e:e8:bf:b1:7e:a7:3a:7c:31:1f:b4:25:a3:47:bc:
54:44:f4:09:5e:78:4b:6f:b3:43:fb:43:a7:1f:52:04:a0:ed:
07:d6:31:28:2f:1f:ab:51:c3:52:0a:22:11:ba:a5:11:17:a3:
8d:41:25:74:d3:1d:52:c2:23:3f:5d:81:a8:61:9c:ab:e9:d1:
d8:cd:8c:b7:58:de:42:19:a6:10:11:b3:40:5c:8d:22:c5:01:
7f:f7:a4:19:b1:f0:6e:57:bf:55:24:3c:aa:2d:e4:d9:cf:9b:
6d:8e:31:e9:e0:83:0c:78:05:6c:7c:71:c7:0c:af:12:9a:c8:
bb:f8:3d:6b:6c:68:a2:96:7f:4e:f5:2d:27:89:fd:e3:c4:c0:
ab:9e:38:73:56:46:00:6a:04:b9:13:51:4d:39:ab:d3:7f:f2:
6a:65:59:02:51:c4:8d:5d:39:82:fd:cd:5c:b1:e2:c8:3a:bf:
86:ee:3c:6e:2a:cd:f2:12:0c:58:56:a4:5f:4d:ad:c7:af:f9:
18:01:08:55:ba:9d:ef:30:46:6b:61:a9:e8:32:63:86:81:37:
e3:30:34:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 06:45:19 2025 by rpki-client