
$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
File: uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft (raw, json)
Hash identifier: r7Mkb1mwjG4aCARiApo8IMY8Oewo1e1kwJ1pFzOTXbs=
Subject key identifier: F3:96:70:9A:6D:1A:B9:44:B3:A2:8C:E3:05:2A:C1:E3:77:6E:80:74
Authority key identifier: B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36
Certificate issuer: /CN=A915825D/serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636
Certificate serial: BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
Manifest number: BB
Signing time: Mon 03 Nov 2025 06:02:58 +0000
Manifest this update: Mon 03 Nov 2025 06:02:57 +0000
Manifest next update: Mon 10 Nov 2025 06:02:57 +0000
Files and hashes: 1: uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl (hash: wl7XRANcy204oefZXnGpT1FDZ/EaB5ngPValU/u31CE=)
2: B035E67615D311F09BAD2971C4F9AE02.roa (hash: m6K1ejQzgZZN/JIHhR+mHfBRgRA0KhwEs/admphjKvc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl
rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915825D, serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636
Validity
Not Before: Nov 3 06:02:57 2025 GMT
Not After : Nov 10 06:02:57 2025 GMT
Subject: CN=69084591-d99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7a:6f:47:8d:84:b1:aa:3b:82:87:9c:30:ee:
23:91:8d:f5:c5:db:c1:a3:4f:e3:46:42:0a:9e:5b:
44:fd:12:29:ba:fc:ec:aa:c5:8e:56:12:4d:ce:62:
66:c9:3f:dc:81:42:a0:f8:7b:78:af:7b:e0:dd:87:
ea:98:54:3f:cd:1d:e6:c6:41:f8:24:f8:a0:af:90:
e3:06:38:86:96:1b:6d:40:9d:ac:8e:a5:a6:86:a7:
1b:1c:5a:88:04:9e:8f:f2:b5:66:44:49:35:84:b6:
e1:d7:ad:5e:0c:be:36:8b:17:f1:36:45:ae:fe:0f:
62:e9:a6:65:ff:12:95:cc:0b:30:03:54:25:29:a9:
96:f5:e6:5d:b1:14:f0:50:0f:db:f3:78:86:76:69:
0e:41:50:34:f0:ec:d6:1d:0d:5f:cb:9a:96:cf:9b:
cc:0b:d9:83:56:8c:45:af:fd:8a:45:f5:0f:9a:b8:
af:01:c6:47:01:e2:80:d3:70:ce:e7:db:ff:23:72:
ee:96:3a:02:c7:fd:58:dd:19:bd:06:e0:dc:c1:25:
a4:12:04:29:76:dc:2e:50:a6:1b:56:33:2f:22:54:
14:de:5e:e6:ab:5d:57:73:72:38:3e:fa:60:9b:ee:
89:49:76:aa:e1:75:cc:c3:ba:75:b4:76:fe:0d:ca:
6c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:96:70:9A:6D:1A:B9:44:B3:A2:8C:E3:05:2A:C1:E3:77:6E:80:74
X509v3 Authority Key Identifier:
keyid:B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:7d:54:02:b8:36:38:5a:34:ee:67:0d:ab:38:b2:5f:78:2e:
a6:3a:d3:b6:70:8b:f4:18:04:b6:d4:bd:f5:57:e5:15:e3:8f:
34:95:46:d7:53:8a:40:19:7b:69:c7:5c:f6:30:1f:68:85:2c:
41:89:74:e2:4a:47:56:a9:18:08:d9:17:9b:3b:6c:a5:62:9d:
00:63:f6:53:15:91:ab:78:b9:91:6d:70:2a:f2:f7:a6:b3:4c:
45:c0:0b:d1:b7:10:27:c5:a8:c4:77:5e:be:52:25:16:98:46:
82:8f:69:a5:25:00:21:9e:1b:3c:cb:4a:6e:87:31:cb:75:3b:
5f:e5:54:4b:12:ae:d8:71:b5:de:fc:c9:06:ed:8d:a7:92:54:
59:11:ea:65:b2:01:eb:f3:a8:51:fe:1d:b2:cb:5a:0e:67:e3:
ea:e9:f6:80:88:54:2c:9f:64:4a:99:80:e1:0f:b3:d8:26:c6:
aa:31:23:14:4f:76:d6:35:a1:cd:f2:aa:6f:58:ff:95:6c:69:
45:c8:59:86:1c:9c:cb:db:d8:01:e1:29:eb:63:de:39:e9:aa:
bb:4f:d7:b2:9e:9b:3d:f6:48:e9:0e:ff:75:2a:b5:e4:f7:b5:
a6:cd:49:b4:31:d6:bd:5b:3f:b6:c1:5d:91:68:1c:15:d9:91:
1c:f9:15:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:10:54 2025 by rpki-client