
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
File: xVZN7BAWY79D0_LjQDlMAHZqY-M.mft (raw, json)
Hash identifier: EMC/pMGS5sPEerxSTsQEcvbzbaJQcNOzC3rquc5KJ0A=
Subject key identifier: 22:F0:39:64:BB:AD:7D:73:10:59:D8:0A:5C:24:4C:AA:36:50:67:22
Authority key identifier: C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3
Certificate issuer: /CN=A9122B85/serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3
Certificate serial: C1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
Manifest number: BC
Signing time: Mon 03 Nov 2025 03:53:42 +0000
Manifest this update: Mon 03 Nov 2025 03:53:42 +0000
Manifest next update: Mon 10 Nov 2025 03:53:42 +0000
Files and hashes: 1: xVZN7BAWY79D0_LjQDlMAHZqY-M.crl (hash: xrdIPfhGgWsbOvblgccdMrtkQk1V+YDEtEyXsvbZewI=)
2: 21D32B1EC54211EFBA442C85C4F9AE02.roa (hash: xY5rRYGsWrcsy57HxUo/DUZymmQ+QbhnmZvTvm4JJxQ=)
3: 42582BE6C54211EFBC189185C4F9AE02.roa (hash: 3NBZi9t73NGUqewcrwzUwAEjzkPNxuY/EA9dZDJA11Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl
rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 03:53:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122B85, serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3
Validity
Not Before: Nov 3 03:53:42 2025 GMT
Not After : Nov 10 03:53:42 2025 GMT
Subject: CN=69082746-5c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fd:d4:91:fc:1e:f8:9d:af:c5:0b:cd:b7:8b:
74:5c:3e:41:79:54:96:aa:f1:00:2c:f0:9b:1b:c3:
ff:a8:93:ac:f9:81:13:b9:9d:63:6e:9d:a7:de:91:
dc:f9:28:89:1e:4e:a8:62:f7:9e:bd:b4:27:41:82:
a4:c2:cc:fd:08:90:b1:05:33:12:fa:0b:03:39:85:
e4:8c:47:ba:bf:cf:90:19:a3:01:e4:0f:b4:05:23:
c0:de:41:45:2e:eb:5f:80:5d:96:6d:75:91:b7:f4:
bc:f5:ed:c8:4d:30:1f:97:c2:68:c0:8e:42:30:cd:
f2:d1:99:15:8a:e3:c0:12:48:2c:c6:e6:af:58:f0:
d6:21:fa:f2:98:9d:24:dc:4b:aa:da:24:e1:3b:6a:
49:6d:4f:63:5d:38:80:3b:89:0b:a9:82:46:6b:a2:
2a:c1:0f:5f:10:fd:22:53:2b:c5:bd:91:d0:fe:c1:
0a:77:0a:b6:ca:f3:5e:c4:82:74:c0:a9:52:50:e5:
30:38:30:d9:0a:1e:00:49:52:00:36:ab:36:cc:c9:
5d:c7:ae:cb:c6:cb:29:b6:c5:31:22:33:29:7c:88:
22:e9:32:2b:9d:b7:72:37:31:8c:fd:46:c5:95:a0:
31:5a:7e:12:50:f7:87:a4:61:4e:e9:25:e2:56:e0:
38:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F0:39:64:BB:AD:7D:73:10:59:D8:0A:5C:24:4C:AA:36:50:67:22
X509v3 Authority Key Identifier:
keyid:C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:97:ed:76:1c:11:a7:9b:37:dd:ae:ea:b8:cd:8c:90:44:74:
50:3f:f5:74:1a:dc:08:c0:16:81:f7:77:cb:28:ea:11:20:d2:
f7:e9:1b:7e:eb:1a:12:10:d4:95:15:29:fa:3a:4a:bf:0a:2c:
97:ab:71:82:07:24:73:4a:cb:70:c3:b5:82:a1:84:48:d3:f9:
71:12:09:bf:2d:24:d7:d0:ed:6d:d1:80:b5:56:d3:3a:60:0e:
69:92:8c:e4:7c:68:71:0d:77:ef:e4:64:24:03:6e:63:ba:aa:
91:f1:14:b9:30:b0:3e:63:3f:e8:8d:e6:54:5b:76:02:2a:06:
a3:ef:2f:b4:69:2b:93:d4:2e:e8:5b:1e:e0:64:8c:67:eb:2a:
5b:88:a3:c3:1f:95:a5:14:26:13:22:ab:d9:d4:59:1f:9a:46:
2c:55:77:03:b1:17:69:b9:55:20:33:e0:21:bb:e4:23:76:bf:
f0:d7:0b:d4:15:32:0b:67:1e:87:95:01:fa:0e:84:0d:bc:2c:
31:5b:d8:14:d0:c8:45:c5:6b:22:c2:92:4f:9a:ee:cd:ac:c3:
86:64:8b:1c:53:19:a3:3d:a7:2f:d6:e9:25:48:07:9a:47:c5:
dc:74:6f:0b:cd:0e:6a:bf:01:b0:9f:de:6a:2b:50:b0:9e:57:
17:cc:9d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:20:54 2025 by rpki-client