
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
File: tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft (raw, json)
Hash identifier: QVYj0CYm0+0sXBlwAYAGTC5qO2agdC1KOGg5yO7+smE=
Subject key identifier: 9E:05:B7:8C:32:C5:3B:86:50:A0:E2:57:78:C1:32:24:58:A5:33:27
Authority key identifier: B5:3B:CE:16:1A:CF:63:05:EC:05:5C:59:A8:91:E8:22:A1:1E:F8:04
Certificate issuer: /CN=A918E85E/serialNumber=B53BCE161ACF6305EC055C59A891E822A11EF804
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
Manifest number: 0126
Signing time: Mon 03 Nov 2025 04:37:41 +0000
Manifest this update: Mon 03 Nov 2025 04:37:41 +0000
Manifest next update: Mon 10 Nov 2025 04:37:41 +0000
Files and hashes: 1: tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl (hash: H4evOmVVxuLYdnz5mzriX+kjkzQOJEaf7r26Ji4XnbI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl
rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 04:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E85E, serialNumber=B53BCE161ACF6305EC055C59A891E822A11EF804
Validity
Not Before: Nov 3 04:37:41 2025 GMT
Not After : Nov 10 04:37:41 2025 GMT
Subject: CN=69083195-5704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2e:1b:cb:57:04:d3:81:f6:a4:c2:5e:24:fc:
ec:97:4d:cf:0f:66:bc:5b:b8:f9:fe:ec:d4:ab:17:
a4:ce:6b:9a:32:82:30:e1:e3:3f:34:2b:48:ed:ec:
47:af:80:82:3d:42:c0:24:73:f6:c0:65:4b:03:c6:
96:3b:84:63:eb:f3:6a:2e:f9:1e:38:5b:66:05:d3:
67:e7:0d:75:42:2e:9f:fa:70:c8:42:ca:d0:5b:40:
51:c6:c6:3b:47:cc:d6:23:6c:8d:33:97:e6:bf:70:
c1:79:c4:8c:b1:cf:bc:74:3b:30:93:71:7e:c7:32:
6f:92:5c:5d:07:66:80:37:1b:f2:41:0d:9d:f8:00:
7d:61:9d:1b:db:61:a0:81:f4:ea:6f:33:97:e6:4f:
e2:5f:11:a7:43:0b:d5:dc:dc:9f:84:e5:85:55:2e:
d8:2f:1e:57:c7:d6:b4:de:db:76:46:4c:06:68:78:
e4:46:f2:d9:1d:a8:63:da:20:71:df:32:a9:b2:32:
8b:4d:8d:d7:cf:34:0a:42:2e:5d:49:6c:82:8c:41:
3e:d7:33:58:1e:00:4b:2c:fb:cb:da:5b:d0:4a:23:
a6:ef:f8:28:4d:18:b3:18:c0:29:7b:5b:29:71:b7:
8a:f4:1d:49:9f:1e:f5:d6:00:85:de:47:a6:b4:b8:
31:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:05:B7:8C:32:C5:3B:86:50:A0:E2:57:78:C1:32:24:58:A5:33:27
X509v3 Authority Key Identifier:
keyid:B5:3B:CE:16:1A:CF:63:05:EC:05:5C:59:A8:91:E8:22:A1:1E:F8:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:f9:ed:de:a2:7f:52:07:b4:ee:1f:ef:0a:bc:f3:44:b4:ba:
66:52:ce:35:f3:11:0e:76:54:49:19:a0:66:24:88:c6:0c:ca:
eb:13:8c:8c:76:bb:16:f9:dd:12:b8:15:11:a0:ba:2f:b9:59:
ac:a0:55:80:77:a2:2f:65:4c:96:33:e5:17:f7:82:a1:90:82:
f4:cb:fa:2e:25:ab:dc:9e:5b:d5:43:f6:86:79:e0:d6:0c:36:
f9:6d:43:92:80:9a:1e:dc:d7:7b:ce:c6:f2:c8:3b:ae:eb:18:
37:1d:c5:b3:dc:22:3c:02:d7:a8:86:84:69:c4:67:d9:7b:8c:
4c:a9:f2:27:c1:e2:af:6f:ac:18:26:6f:0e:97:0e:4c:d2:dc:
06:c4:d4:bb:b8:f0:34:a5:d3:68:6d:c0:fe:b2:ac:bd:b2:a7:
7d:1c:71:4f:cc:da:a2:57:9b:6c:2b:6c:90:01:68:5a:aa:dc:
46:c6:da:12:de:82:8c:f5:43:dd:5f:62:3f:e7:77:5f:38:2a:
e3:28:1e:08:7e:02:21:b0:d9:d9:46:65:68:12:e1:e6:a7:db:
fc:3e:a2:8d:05:6d:28:a9:78:3c:d4:6c:6a:3d:68:5f:96:a3:
c5:5f:e0:cf:2a:86:2d:2c:dd:17:0d:02:1a:85:a6:df:d1:89:
aa:94:ed:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:37 2025 by rpki-client