
$ rpki-client -vvf rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft
File: B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft (raw, json)
Hash identifier: 1CyhcdQGlBH/ZDYAp/n4NbWOn2QRi8rjgSYtcR70s/0=
Subject key identifier: AC:98:D5:9B:33:66:7E:64:9E:CF:26:AF:28:99:7B:79:B6:35:2A:26
Authority key identifier: 07:53:FE:22:FF:ED:6B:00:B6:E6:E3:C5:AB:1C:3C:84:20:2A:63:74
Certificate issuer: /CN=A91276F9/serialNumber=0753FE22FFED6B00B6E6E3C5AB1C3C84202A6374
Certificate serial: 151F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1P-Iv_tawC25uPFqxw8hCAqY3Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft
Manifest number: 151E
Signing time: Sun 02 Nov 2025 16:48:18 +0000
Manifest this update: Sun 02 Nov 2025 16:48:18 +0000
Manifest next update: Sun 09 Nov 2025 16:48:18 +0000
Files and hashes: 1: B1P-Iv_tawC25uPFqxw8hCAqY3Q.crl (hash: pIPPP57596UeSC2mEDkLOP9wSrYVCfmkokPqrQHoN84=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.crl
rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1P-Iv_tawC25uPFqxw8hCAqY3Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 16:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5407 (0x151f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91276F9, serialNumber=0753FE22FFED6B00B6E6E3C5AB1C3C84202A6374
Validity
Not Before: Nov 2 16:48:18 2025 GMT
Not After : Nov 9 16:48:18 2025 GMT
Subject: CN=69078b52-eff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:3e:c6:bd:37:89:05:ef:fe:7a:0b:80:f9:
51:14:79:f8:8f:9c:69:97:ae:79:cb:6c:00:e2:47:
b6:50:14:14:f1:7e:3b:2d:01:02:17:d9:55:18:de:
ee:db:1f:38:a1:9e:da:ba:47:48:67:59:16:1e:cf:
2b:e7:d7:ad:95:a6:4e:ea:fe:94:47:44:ff:13:e1:
c7:47:55:dd:0f:40:47:a3:c6:d3:33:47:79:9a:03:
d8:41:38:87:be:b6:53:b1:0b:c3:29:ef:4b:97:e4:
89:e2:a6:d7:a5:d5:01:c0:fa:82:35:cb:d5:c3:25:
6a:95:8c:47:87:b6:73:6b:12:6d:33:3d:52:4a:c6:
74:a3:3c:83:cc:ac:4c:7f:44:11:e4:b7:46:dd:24:
61:3c:94:5a:d4:6a:fa:82:f5:fb:06:fc:15:d5:98:
1a:9f:3b:9f:11:40:c7:c8:07:d3:d1:6e:bc:88:11:
f0:33:9e:2b:56:84:c9:d6:6f:85:af:a8:ef:83:03:
93:06:02:ea:3c:60:d6:90:9f:21:88:9b:03:c0:fd:
9b:e2:4d:96:3b:aa:8f:73:96:b2:ff:14:e2:d9:c6:
2b:30:ca:fd:ad:09:58:fd:6a:66:92:a1:57:d4:c6:
24:33:44:e4:05:7d:65:0b:8a:30:88:6a:c6:79:b5:
03:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:98:D5:9B:33:66:7E:64:9E:CF:26:AF:28:99:7B:79:B6:35:2A:26
X509v3 Authority Key Identifier:
keyid:07:53:FE:22:FF:ED:6B:00:B6:E6:E3:C5:AB:1C:3C:84:20:2A:63:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1P-Iv_tawC25uPFqxw8hCAqY3Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:2e:f7:ba:c3:4b:4c:e4:b0:95:a5:c5:0b:9c:1c:9a:25:48:
81:b7:8f:bf:1f:a4:fa:92:d9:6a:07:e1:39:fd:fe:64:7c:1f:
6f:05:d3:08:28:c3:c8:43:95:44:6f:66:10:48:25:36:a5:7d:
0b:a1:43:90:f9:aa:0a:46:14:86:4b:5c:25:97:5a:38:2d:4b:
83:d0:ba:11:98:2d:bf:d3:79:a4:14:c6:8d:ad:43:8f:23:44:
a3:29:36:32:09:89:2d:14:fa:bf:55:45:09:9e:b3:23:76:ed:
9d:a2:7b:be:13:0b:b3:9e:d0:57:f4:c1:36:ff:a8:a1:11:34:
f4:f0:17:6b:e4:0d:8b:a9:8c:b0:0f:fe:97:c1:2e:97:78:d2:
68:ae:28:eb:f3:4b:1a:f1:4f:03:69:b7:04:65:53:b1:c0:bd:
0d:47:a5:5c:d1:29:31:8f:b7:f5:1f:71:8c:7a:b4:6a:3e:fb:
96:ef:a6:6a:18:f4:12:b9:14:b1:2f:00:e2:24:62:1d:68:92:
ad:f8:96:53:f9:ce:88:ba:56:3d:b9:3e:2e:1f:0c:21:3a:eb:
e3:d2:6b:07:ad:e6:65:93:dc:7a:aa:ed:fb:6b:a4:34:1c:a8:
bd:11:09:2a:ef:49:d2:b6:bd:4d:9a:b7:b1:05:b3:4d:22:12:
c8:ca:9d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:44 2025 by rpki-client