
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
File: -XxrnwabbALLPY6tWvc-UGwIyjg.mft (raw, json)
Hash identifier: dy929CkzKEL49rAWOy2qYVPybJWCGBiipxa3wIYAiEA=
Subject key identifier: 80:5B:53:4B:AF:E3:02:64:1C:61:F9:C0:F6:4F:27:BC:6B:E1:D4:09
Authority key identifier: F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
Certificate issuer: /CN=A914DB69/serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
Certificate serial: 0187
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
Manifest number: 0182
Signing time: Mon 03 Nov 2025 03:41:08 +0000
Manifest this update: Mon 03 Nov 2025 03:41:08 +0000
Manifest next update: Mon 10 Nov 2025 03:41:08 +0000
Files and hashes: 1: -XxrnwabbALLPY6tWvc-UGwIyjg.crl (hash: U1LwLitsW+k0/csOHDB39Fs5nXB5S7Y3VM6/+L8evng=)
2: C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa (hash: muOcSUHydOybWaIbIJqpYR7U55ErO7bT8T8E0VaV7DU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl
rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 03:41:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DB69, serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
Validity
Not Before: Nov 3 03:41:08 2025 GMT
Not After : Nov 10 03:41:08 2025 GMT
Subject: CN=69082454-e77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5e:20:ee:07:6d:b9:00:70:12:96:7b:59:9e:
69:78:5b:3c:92:24:56:e6:8e:57:22:b7:9e:89:63:
dd:b0:c7:cb:3a:87:ed:41:59:25:9e:e0:1a:61:6b:
e6:3f:ae:55:f1:40:23:2d:eb:8e:bf:ab:5f:ba:50:
dc:8a:4e:5d:c7:0a:19:fe:06:23:e4:f5:5b:68:ac:
1f:9a:42:53:0b:82:b7:ef:9e:08:da:0b:88:a5:65:
8c:ec:4e:9c:55:93:08:76:3e:60:55:c7:11:53:54:
7b:16:20:ca:2e:5f:63:e4:b9:99:b3:3a:12:46:f6:
04:b7:a6:0f:73:9e:6b:fb:4e:e2:50:47:e9:43:12:
8c:d8:ff:d4:67:20:33:94:22:a9:26:b9:4b:fc:23:
0d:16:f1:ac:37:0e:d0:26:34:38:8e:6f:3a:dd:ed:
d9:a0:68:d2:b2:7d:05:f5:1c:e3:60:0b:1f:5a:6c:
2f:59:9f:53:c0:30:fa:14:7d:54:dd:51:5e:bb:59:
8e:a1:bf:80:21:ce:60:52:8e:1d:d9:8d:ef:b1:5f:
1a:0a:b6:e0:2b:5c:8e:fb:56:cd:dd:53:0c:7b:08:
55:a4:db:93:e4:41:9f:bb:6a:b6:bd:b2:b7:82:e6:
47:fa:59:16:4a:39:0f:1c:0d:54:bd:55:71:49:5e:
89:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5B:53:4B:AF:E3:02:64:1C:61:F9:C0:F6:4F:27:BC:6B:E1:D4:09
X509v3 Authority Key Identifier:
keyid:F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0c:bb:fd:5b:94:60:3c:86:75:f4:3a:0b:f9:a9:e9:8d:0f:
8b:7a:7a:c3:2c:2b:16:64:40:b8:c8:77:b5:fe:44:3b:c6:dc:
11:f2:ed:0c:f5:d3:17:c5:ad:27:7c:88:21:49:e3:ea:ad:7e:
32:9a:88:25:37:40:f3:a8:63:21:17:c0:62:90:15:93:23:fa:
e8:a2:c2:22:65:0b:eb:36:5e:6a:76:d6:ac:25:17:d4:e5:bb:
ca:63:7c:dc:22:5c:05:d5:83:84:82:64:7b:29:a6:95:b8:21:
bd:08:dc:15:48:84:6c:bd:c7:10:e0:38:ab:e4:44:d9:e0:91:
14:de:7a:a3:5c:e1:06:ee:21:0b:22:7e:ca:d4:a1:28:4c:8f:
0d:ef:e3:68:5f:22:1b:a7:e1:6d:c8:fa:b7:6e:77:9c:2b:35:
3c:5c:0d:0a:35:78:ef:2e:0e:f6:a9:a6:91:36:e9:34:75:92:
19:b5:7e:0b:c7:03:ac:22:4a:58:df:13:f5:74:d6:95:48:82:
fe:eb:86:08:fc:03:da:aa:e0:cb:ee:86:fe:a7:5c:01:61:5b:
27:2d:59:1d:e8:62:f9:8f:f0:28:e9:95:d8:a4:f9:b2:12:49:
24:20:c8:93:42:25:9e:3e:1d:23:43:6d:b1:04:ed:20:38:9a:
fa:98:57:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:09:58 2025 by rpki-client