
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
File: zx4OW9d7H_tTVngfYWMVjC4ve20.mft (raw, json)
Hash identifier: ea/EvRhBpPk1TsfM/rktg6ATy5OoHGVHF8eSGcfWfZo=
Subject key identifier: 57:62:46:80:E4:11:DF:21:27:D3:4A:A8:70:B8:D3:D8:30:6E:9C:0B
Authority key identifier: CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D
Certificate issuer: /CN=A9180E90/serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D
Certificate serial: 58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
Manifest number: 56
Signing time: Wed 05 Nov 2025 07:24:39 +0000
Manifest this update: Wed 05 Nov 2025 07:24:39 +0000
Manifest next update: Wed 12 Nov 2025 07:24:39 +0000
Files and hashes: 1: zx4OW9d7H_tTVngfYWMVjC4ve20.crl (hash: /BXIjI+aoX9CJF0HRFEWK3RweZxiYMZGrWSgwKBHE0w=)
2: BA6887DC396611F0A9E1DB44C4F9AE02.roa (hash: Q2OV3NsfBJcMxHBSs801cjjdjHl9svmtSMg1krMtAx0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl
rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 07:24:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180E90, serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D
Validity
Not Before: Nov 5 07:24:39 2025 GMT
Not After : Nov 12 07:24:39 2025 GMT
Subject: CN=690afbb7-9ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2e:ee:17:eb:13:fc:40:cb:13:c2:bf:d5:05:
bc:7b:a9:a8:26:d0:d0:9c:46:bd:ee:4d:75:22:b7:
05:42:ef:d2:fb:55:c1:88:68:61:20:2a:5d:d4:53:
f3:21:29:1b:29:0d:18:01:9d:52:74:9c:ba:60:7e:
75:fa:d9:d8:91:98:ad:24:be:bb:f0:33:96:72:ae:
49:91:72:e7:5e:17:4c:6f:67:51:06:7c:02:56:fc:
07:e3:2a:3c:dd:ef:29:1f:ba:64:ce:73:fe:a8:a6:
da:f3:2b:e4:5d:8d:20:53:8f:d9:e7:ec:22:8a:1a:
e7:88:59:8e:85:7e:9f:60:0f:83:e2:c1:56:6f:01:
d5:6f:42:0a:f4:79:5e:1e:39:0f:6a:d0:8c:d0:9e:
d6:10:a4:01:77:78:4a:bd:82:99:96:bc:c4:6d:38:
64:ee:a1:0f:88:7f:c1:3b:89:5a:f8:66:ea:e3:04:
55:89:62:83:9d:f2:e2:df:ff:53:5e:4f:bd:15:19:
19:95:b4:14:fd:c7:6b:46:50:34:96:f4:2b:89:14:
9f:92:3e:cf:62:72:39:dc:5f:12:a4:cd:76:37:64:
ae:10:29:64:b0:6f:02:e0:7b:07:d6:2d:32:99:35:
b1:e1:f4:be:85:e6:85:bb:9e:43:74:63:8a:7b:66:
53:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:62:46:80:E4:11:DF:21:27:D3:4A:A8:70:B8:D3:D8:30:6E:9C:0B
X509v3 Authority Key Identifier:
keyid:CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:df:5c:fa:3e:1b:2e:ab:a6:4e:be:c4:7d:71:df:f5:b0:1d:
70:47:8e:70:96:9a:ec:11:f0:ec:2b:6f:85:a7:5d:fd:16:83:
4b:44:1e:92:9c:5c:51:a1:6a:ae:47:4d:b9:63:81:f5:19:eb:
5d:1f:c3:27:4d:89:5c:02:84:de:92:53:fb:28:8f:5f:47:d8:
7d:1a:12:75:bb:5b:ae:94:e6:6f:32:b3:04:24:25:b2:12:0d:
91:ee:8d:c0:51:55:9e:24:7c:d5:07:32:fe:ac:6c:ab:a1:e8:
8a:ec:23:11:98:06:14:5e:29:f6:9e:2b:de:a7:c1:9a:bd:3f:
20:53:23:86:2e:59:b8:5e:61:5c:27:89:2e:dd:37:ec:d7:2f:
ba:e8:58:4c:f0:45:a4:54:d6:a3:5d:d6:64:2e:24:b2:97:6f:
8e:3a:b8:ff:df:c2:d2:58:1a:83:0c:e0:e3:ff:5b:1f:b5:2a:
94:5a:60:92:71:bc:38:f1:df:42:78:14:48:33:05:65:b5:29:
94:a4:bf:f0:66:38:61:66:06:33:40:19:26:c0:8d:31:c3:c4:
da:1d:cd:78:15:4a:73:7d:9f:c4:fc:28:6b:26:46:3c:0f:fa:
8d:6a:8e:5f:82:7c:0f:cb:1a:cc:ea:ca:89:fa:98:a6:64:0a:
6e:a9:b3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:30:16 2025 by rpki-client