
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
File: XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft (raw, json)
Hash identifier: FJ9MJsnZcUPKRhl5ssSr/9UrglEDwDIplBfamNtIqE8=
Subject key identifier: 88:38:A8:82:AA:DA:B3:4A:4C:CE:28:4A:18:E0:15:6C:EA:BE:20:5F
Authority key identifier: 5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0
Certificate issuer: /CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
Certificate serial: 06C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
Manifest number: 06B5
Signing time: Sun 02 Nov 2025 22:10:27 +0000
Manifest this update: Sun 02 Nov 2025 22:10:26 +0000
Manifest next update: Sun 09 Nov 2025 22:10:26 +0000
Files and hashes: 1: XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl (hash: pn/hx8ovCo4osFiRV3tyipUHRCrsEnE9cPjt65L1/9M=)
2: 9ADBEC30DA6411EF95F32A7FC4F9AE02.roa (hash: Ode9C1rjZZ48xy/QuIzg9S8zoYsoG2CKnN/yX25u2gs=)
3: 9BE20420DA6411EF95F32A7FC4F9AE02.roa (hash: p4MgzG+OXWtv9vZOtFXE4K9GjNanwMoHoivstYkkSaU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl
rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 22:10:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1729 (0x6c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142812, serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
Validity
Not Before: Nov 2 22:10:26 2025 GMT
Not After : Nov 9 22:10:26 2025 GMT
Subject: CN=6907d6d3-9241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:38:0e:94:c2:49:34:54:23:89:80:69:2a:
cb:93:50:2d:26:56:3b:1c:87:cf:80:19:34:04:8d:
57:b0:30:2c:bc:bd:7d:70:f7:37:85:d1:25:bc:d1:
20:9c:47:5c:fc:31:7f:cc:ac:65:d6:77:36:91:0e:
e5:03:77:c8:a9:4b:a2:8e:28:9f:c9:da:bc:17:70:
26:82:04:0a:f0:e8:39:5e:7d:82:ce:1f:3a:7b:49:
50:2a:28:4b:85:06:34:db:fe:e9:08:10:ed:e4:c7:
65:28:38:a7:12:f7:95:6a:ca:50:6f:6c:fa:76:8f:
be:e7:3c:76:62:67:e1:8e:3f:ef:cb:23:6c:b0:ac:
53:f2:52:90:00:56:18:a0:84:0b:d7:d9:89:10:7c:
de:74:f8:cb:61:9e:36:11:2d:ec:21:2c:7c:e0:77:
cd:54:20:3d:d6:87:ba:32:dc:51:a7:20:ad:08:cd:
63:aa:e4:82:ea:cd:d2:3e:f3:28:67:93:86:5e:27:
9f:00:71:d9:e6:01:c6:79:5b:80:79:73:a5:ab:22:
af:61:3d:31:a9:93:ff:28:eb:4f:b2:0b:84:cb:ad:
d4:ed:4b:65:23:d4:9f:0f:a6:91:ce:dc:cd:a7:dc:
9a:6e:a6:f4:ea:ba:17:7b:cc:c4:14:89:59:7d:6d:
ce:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:38:A8:82:AA:DA:B3:4A:4C:CE:28:4A:18:E0:15:6C:EA:BE:20:5F
X509v3 Authority Key Identifier:
keyid:5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:fb:71:20:ef:c8:26:ac:67:ac:32:a4:65:b6:49:f9:d7:59:
8c:7f:e3:42:e2:a7:04:d5:f8:e5:c2:3a:0b:6c:ce:8c:ba:a4:
8d:80:54:ec:a6:81:51:99:96:a9:3e:a9:f6:f1:cd:5f:32:8d:
03:f1:28:a8:91:2f:3a:20:eb:3b:95:4b:ff:0f:ab:f1:0b:8a:
0a:5b:60:9d:41:1d:5d:00:ac:5e:86:f8:24:b9:8e:6e:a1:95:
6f:9d:ff:db:cb:f6:ec:13:a4:9e:58:a4:40:ad:86:87:1e:cf:
66:19:f3:cb:62:42:bf:89:cd:b4:57:0e:7b:85:1a:9e:dd:e1:
de:4a:62:b5:33:95:de:05:5a:a0:2a:7a:ac:d3:4a:e1:cc:13:
26:78:50:bf:22:d6:df:58:2c:18:87:ac:12:51:cf:8c:72:2a:
f8:cd:80:f5:db:5a:b7:ec:10:26:3b:43:6e:c0:0d:eb:13:95:
9c:ab:29:f1:fb:57:53:1b:a7:c2:c5:96:7b:ae:be:7b:be:1f:
fd:f9:12:55:1d:55:d9:b9:92:cc:6d:ca:64:ae:ab:5c:58:67:
dc:3d:69:6d:ae:1a:53:7e:40:d2:71:ed:2b:2a:da:f4:c1:67:
50:3b:df:4e:60:7f:62:39:64:d7:a9:f8:1d:9b:b2:a6:a5:6d:
75:4b:38:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:04:34 2025 by rpki-client