
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
File: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft (raw, json)
Hash identifier: TVgy7bGZ8ULE7YaJmjxJZnBf/N13+QydWIkI74OQx28=
Subject key identifier: 5F:1D:F2:90:8B:B5:66:06:AF:99:F9:7A:44:E8:43:1E:EB:83:BB:F2
Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34
Certificate issuer: /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
Certificate serial: 0825
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
Manifest number: 0821
Signing time: Tue 04 Nov 2025 20:53:37 +0000
Manifest this update: Tue 04 Nov 2025 20:53:36 +0000
Manifest next update: Tue 11 Nov 2025 20:53:36 +0000
Files and hashes: 1: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl (hash: q52uJoWMTIPAadSuT/9tQ7JIFOsMvlzjPDgpOEYGtMc=)
2: 2EDEA8344A5711F0BD4BC13AC4F9AE02.roa (hash: /F/gYX/L863YX0w0vTOKFM1DOvBiDwzCSuLCvUmNqSk=)
3: 2E6008624A5711F0BD4BC13AC4F9AE02.roa (hash: CJo3Y0RDZ6WOA9pdaOgsipKbuYOBA79WFUuGjeqh4aQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl
rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 20:53:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2085 (0x825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120522, serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
Validity
Not Before: Nov 4 20:53:36 2025 GMT
Not After : Nov 11 20:53:36 2025 GMT
Subject: CN=690a67d0-43b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:53:ac:e9:c1:1d:df:04:3a:a1:cd:0a:8d:
47:8f:e2:cb:13:79:2e:40:d2:fa:ce:00:0d:64:6d:
4e:9a:c2:85:9c:87:bf:6a:2f:72:d1:8f:69:4c:ba:
97:8a:39:0c:5d:9a:74:02:ac:a7:43:cd:83:4d:34:
7b:b1:83:44:95:d3:cb:26:37:0e:e8:6c:bc:8c:43:
fa:97:33:cb:28:09:39:21:46:e8:7a:93:c4:34:02:
8d:25:d1:2d:71:ae:e3:04:5c:57:8d:5b:33:a3:fd:
6a:c1:d6:6a:a7:05:21:3e:8e:90:8a:db:83:44:14:
89:b4:36:e6:67:ec:f7:c0:58:25:ab:c6:5c:90:c0:
00:9f:e1:d1:d7:83:64:5d:04:2d:01:d4:ba:cc:75:
07:b8:e5:7a:16:d1:ca:83:44:fb:93:fe:ff:a8:9f:
99:fd:4c:dc:35:4b:2f:7d:78:ad:33:15:e5:5a:ae:
06:ba:3f:a5:cc:c3:92:8b:1b:e7:58:3c:92:58:94:
16:80:40:aa:87:61:b2:3d:bb:25:54:75:47:c2:bd:
99:c3:bc:43:9a:ff:a6:55:bc:38:ca:6a:3e:72:6c:
06:17:80:66:62:e9:c7:bf:95:a0:26:85:eb:05:6c:
cb:67:2d:7e:c1:a6:5d:e1:f1:45:3e:bd:11:b8:c7:
57:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1D:F2:90:8B:B5:66:06:AF:99:F9:7A:44:E8:43:1E:EB:83:BB:F2
X509v3 Authority Key Identifier:
keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:19:59:bd:cf:d5:14:a3:fa:a0:bb:14:ae:1a:b0:ee:16:f0:
82:c0:51:4e:2d:a7:63:b1:dd:52:90:e5:78:0f:fc:9b:fb:38:
f7:2d:d4:d6:6e:9c:17:a0:f4:99:83:53:de:3e:6a:81:a6:11:
ad:c1:66:70:74:cc:87:20:bf:91:43:6d:21:b7:dc:37:3d:ea:
a0:e0:36:81:e5:cb:f7:e4:b8:e8:e9:03:dc:32:8c:8d:d1:26:
0b:e0:9e:25:63:32:c8:11:48:57:5a:1e:43:7d:6e:cc:14:96:
2b:50:14:a8:a0:a7:7d:9e:d8:db:69:98:45:97:9b:c3:96:0b:
f9:c1:4a:28:ca:50:fa:2d:aa:25:f1:46:d4:8a:e4:21:3c:ff:
f8:d0:d1:67:a3:73:ec:f4:8e:12:45:e7:8f:60:51:ed:f5:56:
b8:c4:3c:92:b5:9e:34:4d:e4:21:13:fb:d1:ac:b0:a9:0f:3c:
df:eb:78:68:43:4f:b6:9b:7d:1c:f6:c2:84:61:00:f3:55:9c:
67:2d:12:53:49:c8:83:c1:c5:68:e0:93:03:57:99:4e:15:c0:
69:09:3a:18:2b:d8:81:ed:40:35:89:32:18:35:90:33:8e:b6:
fd:26:67:c9:93:f9:33:01:e9:e9:03:04:3a:0e:44:d7:7b:e3:
c5:64:65:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:52:25 2025 by rpki-client