
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
File: -bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft (raw, json)
Hash identifier: EmmYv/BvrDI7gq/zzUJooOgNiRBPsud2khxfhGqrul4=
Subject key identifier: 46:0F:B2:8B:13:44:FA:6A:62:F2:73:84:27:0C:02:0B:1B:DC:F6:AA
Authority key identifier: F9:B4:02:2C:02:9E:7D:9E:5A:63:49:68:FD:BA:4A:0E:9C:D6:24:E4
Certificate issuer: /CN=A915E012/serialNumber=F9B4022C029E7D9E5A634968FDBA4A0E9CD624E4
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
Manifest number: 64
Signing time: Thu 23 Oct 2025 09:10:48 +0000
Manifest this update: Thu 23 Oct 2025 09:10:48 +0000
Manifest next update: Thu 30 Oct 2025 09:10:48 +0000
Files and hashes: 1: -bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl (hash: TaDpkjnfvrQDZQpgX8X79KJusp5qJfTGu2nbaw9SsJs=)
2: 28BBA728141411F08D862A74C4F9AE02.roa (hash: bM0rHlFCkCxESty36KKICwvwa1HEG8pgqoXnhaZGbjI=)
3: 2857C712141411F08D862A74C4F9AE02.roa (hash: q/LJ7SPvTkUYwfSCfg1Hilqw1bbJVMWb831qXikLEmE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl
rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Oct 2025 09:10:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E012, serialNumber=F9B4022C029E7D9E5A634968FDBA4A0E9CD624E4
Validity
Not Before: Oct 23 09:10:48 2025 GMT
Not After : Oct 30 09:10:48 2025 GMT
Subject: CN=68f9f118-1872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2a:d8:49:c1:21:be:57:95:8c:8a:8c:1f:76:
bb:58:c5:3e:88:7b:71:89:f7:81:df:4c:a7:fe:19:
07:9a:c5:be:d4:12:89:4b:3a:66:43:91:cd:da:e5:
9d:9e:a1:45:f0:f0:6d:d2:08:83:0e:52:95:c9:82:
8a:1d:23:e0:31:d7:01:f8:3a:68:ec:c7:8f:35:ad:
47:69:09:7b:7b:71:50:a1:83:a9:19:00:ae:3d:8a:
78:6c:8e:90:7b:db:f1:8c:3f:e5:fa:a2:87:9a:e1:
a3:f2:1c:ee:f3:16:b1:99:45:fc:25:8e:0a:ad:ae:
23:2c:c2:ab:ce:cb:42:34:d6:ce:20:f2:57:3c:55:
62:45:9b:55:96:1c:6f:2d:fd:df:36:9e:84:60:7c:
04:88:c1:1a:f7:60:2e:36:b0:82:a4:be:c2:61:f6:
86:d7:b9:6d:d7:1b:0c:42:8c:61:a2:0a:c2:43:5f:
28:16:26:f5:de:17:ef:c1:06:c0:23:7e:2e:1d:40:
81:90:fa:eb:a1:ea:30:c8:ea:ab:94:16:aa:7b:7a:
5d:a8:c0:5b:59:f4:e0:55:2d:03:38:ca:c5:a7:15:
f6:7c:80:95:64:88:54:ff:cd:18:ca:ba:35:50:c2:
b6:3a:96:52:67:05:c0:07:a1:ba:d9:1c:ed:7b:a3:
11:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0F:B2:8B:13:44:FA:6A:62:F2:73:84:27:0C:02:0B:1B:DC:F6:AA
X509v3 Authority Key Identifier:
keyid:F9:B4:02:2C:02:9E:7D:9E:5A:63:49:68:FD:BA:4A:0E:9C:D6:24:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:6f:9b:f6:69:98:af:0e:17:df:0c:e2:9a:fd:78:59:47:ef:
10:4c:66:42:c4:0b:6c:de:54:b3:0c:8a:40:1c:84:24:c0:37:
fd:81:2c:b0:a8:b1:06:61:d5:b7:27:d7:ba:13:61:5d:4a:19:
de:76:19:5b:b7:6e:2d:36:0e:03:2e:d4:27:dc:5a:c1:33:ae:
55:1c:85:4b:6a:4f:38:87:fa:3c:57:f9:e4:31:fd:67:58:68:
ff:42:83:38:7b:c3:71:98:80:4a:04:9b:50:d8:2a:73:a1:fa:
cf:36:77:29:2c:8d:14:15:c4:9f:bb:4e:9d:f9:e4:80:79:42:
ed:48:20:0d:be:4f:24:b9:09:8c:0f:1f:30:1a:36:53:d7:c9:
0a:be:9a:53:7e:3d:fe:be:7e:9e:74:61:b9:6a:b1:6b:9f:be:
ff:36:04:5c:40:77:e9:5b:89:ad:ed:3f:e4:36:86:5a:c1:42:
1a:95:95:21:ad:76:9d:6d:a8:3c:45:3a:32:8e:4f:9d:18:25:
8a:aa:2f:0b:24:3b:93:fd:74:a6:78:ba:79:4c:af:5b:72:12:
95:cd:53:f4:f5:85:04:6b:fa:f8:07:78:64:10:4b:c3:77:02:
4a:3c:1c:20:ef:58:26:91:a3:d8:f3:dd:3a:18:80:a3:9a:3c:
b9:2d:66:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:28:26 2025 by rpki-client