
$ rpki-client -vvf rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.mft
File: XFIDfgLgI3qkpHhukIwUJuu5qUc.mft (raw, json)
Hash identifier: 8bLeXxFUB0s0q9h0xh8RceHNFykyhu8AEnbnYltervY=
Subject key identifier: DB:87:18:EE:1F:B5:87:69:0D:D3:BD:D9:9F:BC:04:27:69:72:D5:E0
Authority key identifier: 5C:52:03:7E:02:E0:23:7A:A4:A4:78:6E:90:8C:14:26:EB:B9:A9:47
Certificate issuer: /CN=A912418E/serialNumber=5C52037E02E0237AA4A4786E908C1426EBB9A947
Certificate serial: 09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFIDfgLgI3qkpHhukIwUJuu5qUc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.mft
Manifest number: 08
Signing time: Mon 03 Nov 2025 08:02:13 +0000
Manifest this update: Mon 03 Nov 2025 08:02:13 +0000
Manifest next update: Mon 10 Nov 2025 08:02:13 +0000
Files and hashes: 1: XFIDfgLgI3qkpHhukIwUJuu5qUc.crl (hash: i7RuyBh35ZgTlyyFEwlFIdrPPqtO/f18DCGihdyjlnQ=)
2: E7126E0AB08111F0B4456572C4F9AE02.roa (hash: KRwjwSWWBywAGAbXEKvDlNQZp8JppNvRq0fzU/i7zgU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.crl
rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFIDfgLgI3qkpHhukIwUJuu5qUc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 08:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912418E, serialNumber=5C52037E02E0237AA4A4786E908C1426EBB9A947
Validity
Not Before: Nov 3 08:02:13 2025 GMT
Not After : Nov 10 08:02:13 2025 GMT
Subject: CN=69086185-69e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d1:83:5d:87:f2:34:d5:21:16:6a:40:f2:dd:
70:1c:90:b4:88:22:a2:d1:39:a5:d0:7d:79:9d:6a:
b0:b4:2e:3c:4c:40:34:dc:3c:e2:22:c2:26:90:75:
79:04:82:0a:ab:03:6b:b2:c8:4c:59:c5:f2:12:2b:
3b:dc:78:9d:c7:c9:27:f1:15:c6:bf:f6:a6:49:2f:
5e:73:99:48:d0:42:f1:a6:9d:db:3c:f5:7f:6d:74:
7d:65:a1:4a:9a:48:9e:a9:45:79:94:9d:c2:66:80:
01:90:1f:5f:cc:3b:5a:fb:68:3a:2f:3f:d1:b3:1d:
dc:73:b7:2f:11:db:23:90:f7:59:8e:19:c6:4a:0e:
39:95:2e:cf:7e:dd:8e:c7:9d:88:84:8c:02:79:1d:
3a:03:cf:6e:b5:0d:76:89:b8:00:7f:23:fc:27:1d:
a1:20:f5:1b:98:59:66:f7:d1:b1:60:42:4d:20:f2:
ab:c8:35:19:e0:b7:f0:54:57:96:93:93:5f:1e:a8:
03:73:af:f4:b0:02:59:0a:fa:89:e0:09:c7:9f:65:
03:9f:1c:48:4f:ba:91:83:15:5f:21:e3:14:f8:40:
f9:44:2e:71:08:e6:8f:aa:d0:70:df:b7:95:c1:a1:
1b:21:c3:60:63:6c:30:fc:91:b9:94:7d:4f:b5:72:
23:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:87:18:EE:1F:B5:87:69:0D:D3:BD:D9:9F:BC:04:27:69:72:D5:E0
X509v3 Authority Key Identifier:
keyid:5C:52:03:7E:02:E0:23:7A:A4:A4:78:6E:90:8C:14:26:EB:B9:A9:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFIDfgLgI3qkpHhukIwUJuu5qUc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:09:a7:12:0a:bd:49:17:b8:4d:4c:42:0f:a7:a8:27:02:16:
ff:1a:e0:43:ef:74:23:94:9e:e5:f1:01:d6:01:14:09:71:6e:
0b:67:41:d2:f1:7d:b7:80:4d:f0:e5:64:ba:06:e1:aa:4c:bd:
33:95:0b:bf:48:c4:03:cc:bd:49:2e:0d:75:0d:09:df:f3:3b:
01:15:9b:aa:b0:ec:9e:ff:98:fb:d7:f8:22:e2:88:5f:cf:cf:
1a:ee:90:1a:a4:64:49:40:be:44:41:33:14:27:2a:b4:2a:00:
0c:db:fd:6d:2c:e8:ce:32:3d:6e:49:5c:d6:85:a2:5b:d5:37:
e8:ef:35:9e:82:81:82:4d:bf:88:d6:3b:97:77:aa:d1:42:e4:
63:72:c4:75:fc:e3:84:5f:ca:ad:e8:1b:c4:97:b4:c9:05:c2:
0b:16:6a:dc:96:d8:4e:ea:57:c9:4e:71:91:04:46:1c:e4:82:
de:ee:c2:c2:ef:d5:23:bd:7a:75:53:17:ed:fa:48:0e:55:95:
64:f2:0d:69:b1:39:b3:e5:de:7f:83:e5:d7:13:c9:88:29:a6:
d4:39:59:50:f7:0b:46:5f:cb:c5:80:72:8c:0a:b6:79:6f:e4:
36:03:db:e3:86:23:17:c0:44:28:56:7a:56:77:3b:39:ff:39:
5c:6f:82:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:09:53 2025 by rpki-client