
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
File: ex0xxneDebryS2uQVqe7Mf0dzqg.mft (raw, json)
Hash identifier: y5sicZnSykhvVber6bGyVcEfJWknOqIaoii0y/wfM+U=
Subject key identifier: 05:09:DA:40:25:57:87:DB:1D:E9:64:9F:21:45:15:E1:AB:48:DB:9C
Authority key identifier: 7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8
Certificate issuer: /CN=A9138B0D/serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8
Certificate serial: 0615
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
Manifest number: 0614
Signing time: Tue 04 Nov 2025 22:54:54 +0000
Manifest this update: Tue 04 Nov 2025 22:54:53 +0000
Manifest next update: Tue 11 Nov 2025 22:54:53 +0000
Files and hashes: 1: ex0xxneDebryS2uQVqe7Mf0dzqg.crl (hash: HfZwXfaqG3wgsTFGW1PoOfxI5Pw7LYnC0majZIGQJfw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl
rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:54:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1557 (0x615)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138B0D, serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8
Validity
Not Before: Nov 4 22:54:53 2025 GMT
Not After : Nov 11 22:54:53 2025 GMT
Subject: CN=690a843d-cd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:de:b5:4b:1f:71:7c:ea:c4:39:95:cd:ef:da:
57:9a:df:eb:5d:35:d7:52:57:ab:8b:f2:83:e6:d0:
43:9d:fb:b6:7e:95:28:16:94:a8:9d:71:09:c9:57:
18:1c:d9:6b:10:6d:af:db:36:f4:ba:25:0f:93:1e:
3d:45:ff:1b:8a:b5:86:b7:86:d0:a2:bc:dc:26:ea:
ce:88:05:05:44:b1:cb:d2:19:08:d6:b5:a1:5e:ea:
ea:9a:30:de:07:0e:66:98:c6:f5:a4:55:6a:1c:29:
26:72:b4:49:74:e3:c2:a3:e3:78:07:55:f3:1c:e5:
6d:fe:12:36:8f:6f:40:8a:ee:ed:7e:26:34:a6:be:
a6:06:62:ee:af:0a:0c:c5:32:93:6d:15:03:f3:d7:
7e:c6:93:9d:61:8c:a7:0a:d2:34:99:20:02:fa:82:
77:20:21:e1:74:c4:82:45:6a:fe:e6:41:fd:a2:31:
b9:35:0c:65:98:3d:23:84:f2:63:3b:32:79:7e:0d:
7a:e7:b5:e0:80:02:1c:af:7a:e0:77:13:d9:47:47:
69:74:e1:8f:b4:39:96:d6:6a:ea:23:ea:f4:2a:ed:
76:38:02:5b:53:0d:fa:6e:f3:75:2c:b5:e4:1a:9e:
3f:72:74:75:0f:b5:d9:b9:52:ab:d2:08:0f:9e:bd:
a2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:09:DA:40:25:57:87:DB:1D:E9:64:9F:21:45:15:E1:AB:48:DB:9C
X509v3 Authority Key Identifier:
keyid:7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:ce:70:0f:54:be:12:db:53:bf:6c:4a:97:62:33:f0:61:fc:
74:2c:f5:9d:5e:00:3f:58:c6:7c:d8:d9:c9:e9:8b:cf:69:74:
29:b0:6c:b7:ce:a2:12:06:09:7d:d2:6e:29:30:49:70:b3:c6:
66:c0:67:2e:9d:a9:56:cb:5e:05:02:a9:b1:08:33:0d:6f:6d:
3c:4c:bb:73:79:bd:d6:8d:12:14:8e:40:c9:9b:94:0c:71:4a:
72:25:24:1f:96:7c:24:28:a0:0d:99:1f:c2:88:46:4e:6f:39:
e4:26:d7:f2:6b:ba:d0:80:e3:c9:52:43:85:5a:98:96:a4:a8:
d9:0a:95:34:35:fa:f3:e3:05:d9:9a:c2:fe:c5:14:5e:a4:c7:
dd:cc:7d:8b:d9:fe:62:0f:15:52:b7:7e:ab:3c:0f:7b:84:aa:
74:c5:89:f4:95:7d:56:04:a4:46:68:5b:e5:d3:99:0a:4c:4c:
67:42:6a:07:f9:82:6a:58:ad:84:6c:13:90:5d:66:d8:0c:50:
41:c9:84:df:b4:25:16:f1:65:2e:57:35:ff:60:ef:5c:81:81:
76:36:ed:c1:a5:d9:85:34:8a:d4:3d:7e:36:e8:b5:94:fc:be:
1a:9d:1b:4d:ee:f1:18:d4:a1:23:b5:30:41:76:8c:d0:e2:db:
71:f0:54:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:25:41 2025 by rpki-client