
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft
File: azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft (raw, json)
Hash identifier: 5NBwUDxRflEj2esJR/RaM+2xhiNdX8i25P/meHgvY7M=
Subject key identifier: BD:FA:D9:27:54:B0:DD:38:6C:97:18:3A:CF:E4:62:FB:C4:07:7C:AB
Authority key identifier: 6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4
Certificate issuer: /CN=A917B1EE/serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4
Certificate serial: 0168
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft
Manifest number: 0162
Signing time: Mon 03 Nov 2025 04:05:22 +0000
Manifest this update: Mon 03 Nov 2025 04:05:22 +0000
Manifest next update: Mon 10 Nov 2025 04:05:22 +0000
Files and hashes: 1: azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl (hash: 1vO0TQ5u6geRjfMs0f0biLY0LKKd7lHtlbKjehelgoQ=)
2: 0F7A0CD4C72E11EEAA6B423BC4F9AE02.roa (hash: lqNFFXORI79Tp9nH7sxtcuWMLXX1DbMNSF2W2W7xgQw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl
rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 04:05:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360 (0x168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B1EE, serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4
Validity
Not Before: Nov 3 04:05:22 2025 GMT
Not After : Nov 10 04:05:22 2025 GMT
Subject: CN=69082a02-fabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:20:bd:17:82:f1:7b:e3:92:c9:25:a5:3f:
13:5d:e2:e9:1a:3d:9e:43:5c:9c:f5:69:36:ea:db:
0e:51:c1:02:01:c1:70:52:2a:d5:ae:c1:d6:10:fe:
bb:c1:a0:5e:d1:f4:f3:de:7a:fe:18:b1:57:3b:93:
4f:6a:61:73:8e:a8:7c:cf:68:9f:25:85:ac:a9:6c:
9a:2d:77:75:be:58:d4:80:81:9c:37:e1:dd:fa:01:
5c:9c:5a:2c:66:25:2f:6c:31:b8:18:fd:9a:1b:4f:
ec:7c:b4:67:1c:00:23:8a:9e:d0:4d:31:d7:a0:39:
13:62:2f:08:38:a8:fe:96:ce:1b:b7:5b:a2:a8:8d:
97:1b:62:66:de:0d:4c:35:3f:ba:02:87:45:e7:f8:
19:4c:c6:72:74:68:d5:04:fc:75:42:36:c8:7a:3a:
50:a1:54:fd:37:51:3e:22:47:18:7b:dc:67:ab:07:
53:3a:fa:c0:d5:ac:60:74:52:0b:cb:3e:31:79:91:
6c:f0:f4:92:64:61:f8:c4:81:57:3f:a4:fb:7d:27:
a3:0c:f9:3e:38:ab:48:82:28:8d:06:fb:1d:e1:b5:
e4:08:4f:70:7f:f7:06:ab:a3:ff:62:c7:57:39:df:
c7:ed:64:42:5a:1a:3d:b7:90:6b:8e:1a:40:2a:ad:
7e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FA:D9:27:54:B0:DD:38:6C:97:18:3A:CF:E4:62:FB:C4:07:7C:AB
X509v3 Authority Key Identifier:
keyid:6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:84:41:13:17:1f:f4:f0:12:35:27:fd:a4:c5:2f:72:13:91:
c3:4d:33:10:34:e7:f7:a9:9a:7f:64:ed:ab:ea:2f:9d:5a:03:
ad:1a:14:0d:b1:93:07:20:d2:77:0d:a6:3b:f7:ab:79:a1:25:
78:92:23:a8:33:4e:37:07:c0:e9:c2:62:f2:26:53:22:77:6b:
02:de:ed:c7:21:0d:f8:cb:b1:f8:68:b4:1f:22:c7:60:35:c9:
be:2c:87:10:3e:cf:9a:7c:d0:c8:ac:57:70:be:8f:f8:0d:71:
ac:12:97:df:55:56:fc:0b:d4:15:a1:1b:ad:72:93:c3:95:ac:
27:f3:5f:eb:e1:49:4d:87:80:0b:4a:fa:3f:7f:2f:b2:22:06:
40:13:0c:38:33:63:72:22:37:fd:86:f8:09:85:17:f3:01:ca:
76:66:9e:1f:41:35:47:6b:77:da:2b:00:b9:14:9a:45:a3:d9:
5d:72:a8:5c:a7:1f:b8:78:aa:8f:09:04:32:5f:fc:6d:c8:40:
34:9b:b5:7e:56:f4:4c:2f:15:1f:22:a5:3f:df:a7:50:77:c4:
18:a3:d3:2e:3b:c9:e6:83:1c:21:28:07:69:95:33:e1:49:ae:
6d:db:cc:6e:b5:40:b3:8a:fa:43:64:f2:57:60:3f:b4:bf:13:
7d:94:15:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:10:54 2025 by rpki-client