
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
File: BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft (raw, json)
Hash identifier: GpRAmtRNZyVuMbIXXp9rqMSKs4cODdGfU5CR8BeswGM=
Subject key identifier: 76:C3:C5:C5:B4:D4:F0:70:3C:F3:01:7C:31:73:E1:72:A0:41:0C:AA
Authority key identifier: 06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E
Certificate issuer: /CN=A9150D5C/serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E
Certificate serial: CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
Manifest number: CC
Signing time: Wed 05 Nov 2025 05:53:58 +0000
Manifest this update: Wed 05 Nov 2025 05:53:58 +0000
Manifest next update: Wed 12 Nov 2025 05:53:58 +0000
Files and hashes: 1: BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl (hash: 1gksVZ5FeVyCbzbst/130Mnpo8tBuGyj10w4en8LRdY=)
2: 79F85264827711EFAACDBD12C4F9AE02.roa (hash: 8S+MnfPAwwqJ4EDo87RkT/K1LmOYDK5SfddRm32GGQ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl
rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:53:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206 (0xce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150D5C, serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E
Validity
Not Before: Nov 5 05:53:58 2025 GMT
Not After : Nov 12 05:53:58 2025 GMT
Subject: CN=690ae676-539f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e3:66:77:3e:4a:6b:81:91:71:96:0f:39:32:
9b:ad:90:c7:f4:60:fe:5f:ed:71:ea:53:0f:82:11:
01:5c:ef:d9:57:22:93:74:be:35:91:e5:dd:07:ec:
54:04:4c:8f:e6:80:b8:cd:18:de:2c:8d:d8:13:69:
56:eb:4c:21:d8:30:06:98:db:4e:89:96:55:4b:e6:
73:83:5d:cb:86:16:be:a5:19:e2:29:97:24:c9:ee:
6e:08:f6:67:49:a1:53:cb:9e:cc:91:3d:fc:e0:5a:
fa:11:2e:e7:06:81:6d:85:0a:5e:f8:75:06:9b:98:
43:53:4d:e3:46:64:f7:9b:1d:fc:85:16:8f:4a:f3:
e2:20:ad:cc:e8:e0:e4:3c:f0:2a:c9:54:45:d3:9d:
bd:a1:e0:7d:b6:1e:5d:bf:54:db:6f:48:f5:fe:93:
fb:f0:08:2d:14:bf:94:aa:69:33:94:a3:33:1f:cc:
ca:ac:b1:c7:e2:e3:c4:97:93:f6:c7:ae:cd:b5:2e:
f5:03:2d:fd:c4:7e:29:2d:1e:a3:50:4d:bf:27:8c:
f2:d6:66:60:c7:63:6b:5a:01:65:15:a6:e9:b9:d5:
8d:88:a1:5f:81:d6:53:9f:e6:ce:6e:d7:60:94:f8:
fc:76:b8:30:be:7f:c4:1a:07:99:68:b0:79:0c:c6:
46:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C3:C5:C5:B4:D4:F0:70:3C:F3:01:7C:31:73:E1:72:A0:41:0C:AA
X509v3 Authority Key Identifier:
keyid:06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:c9:58:ef:e4:62:c5:56:04:6d:be:3f:13:a1:b8:da:8c:2e:
5d:f3:9d:fc:19:52:48:99:99:4c:97:20:09:b5:c7:d1:89:d5:
43:c5:58:2d:48:f0:65:f7:2b:b9:27:88:ce:0a:00:85:eb:ea:
cb:93:3a:11:9b:2e:ac:e9:4e:36:7e:29:7d:71:e3:bc:22:d8:
20:f0:09:ab:5e:31:22:98:0e:4f:9e:b3:90:15:99:ca:9b:ff:
72:d6:16:09:cc:67:14:d6:9a:1f:ff:9e:c8:62:86:b0:9c:cd:
b2:b7:de:b5:da:0a:b2:40:05:15:fb:68:44:0e:e9:29:2f:a3:
8a:b0:28:a0:02:37:ed:e0:dd:ed:d6:07:e1:33:ea:f0:cd:e2:
a1:e4:06:a1:a5:c5:66:eb:ad:68:bb:25:8f:fd:91:0b:7c:2f:
b4:35:59:1e:50:3f:fb:2f:82:af:22:88:2d:c9:c1:b0:80:b5:
46:56:97:94:fb:54:e7:ee:c3:43:06:d8:2a:2a:ad:9e:e8:ed:
de:63:61:8f:74:bc:cd:be:36:00:e4:a2:92:ea:d8:ee:06:29:
93:26:11:76:0b:f8:99:7d:de:24:d7:bd:57:aa:1b:bc:b7:7a:
a0:96:b6:6c:1b:3f:6d:5c:ef:c8:28:2f:44:7d:e5:f7:bb:eb:
84:77:e0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:05:05 2025 by rpki-client