
$ rpki-client -vvf rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
File: 909zX9xaW5M28yTDLLpVjrvSjZc.mft (raw, json)
Hash identifier: t5VBJJkf0uUBe8dG3O4VO455gtF+kei6xUZiv0HaYmw=
Subject key identifier: CC:A7:EA:02:B8:7E:A9:57:FE:B5:D2:C7:5D:92:C9:34:F1:8E:10:24
Authority key identifier: F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97
Certificate issuer: /CN=A915123C/serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97
Certificate serial: 12CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
Manifest number: 12CA
Signing time: Tue 04 Nov 2025 17:09:06 +0000
Manifest this update: Tue 04 Nov 2025 17:09:05 +0000
Manifest next update: Tue 11 Nov 2025 17:09:05 +0000
Files and hashes: 1: 909zX9xaW5M28yTDLLpVjrvSjZc.crl (hash: EUWNyXewl0Bm5De1+eq36OHJkSJD7fZOcW5MdMAXO4Y=)
2: 5232D4B6926B11F09CB88A3FC4F9AE02.roa (hash: jBTeH0H27v9k59mlKnmetbexdDYe956dNh5Wylij75M=)
3: 51C3E830926B11F09CB88A3FC4F9AE02.roa (hash: QvsgBXY2pHOmfBdUrJt5ZO919gY3lcDyrvdiRsNFCPU=)
4: 5144F80E926B11F09CB88A3FC4F9AE02.roa (hash: DgEDuUiux8hU4nHush9Glrrai/CzBmzaMoX7rIYUbLM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl
rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 17:09:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4813 (0x12cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915123C, serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97
Validity
Not Before: Nov 4 17:09:05 2025 GMT
Not After : Nov 11 17:09:05 2025 GMT
Subject: CN=690a3331-1c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a3:5e:62:21:10:57:72:97:38:bb:53:47:35:
06:55:71:0e:73:fe:4c:d8:1f:7f:61:66:fa:d8:68:
d2:bd:6e:b6:e1:64:84:92:98:e8:ad:91:74:33:bd:
10:9c:30:5b:84:ce:b8:a1:eb:14:6d:f2:20:c8:7b:
69:65:03:05:32:28:54:57:66:3f:08:1c:ee:cf:63:
11:24:4f:61:b4:dc:fa:e0:33:d5:f5:6a:9c:1a:80:
b4:7a:e8:30:ae:74:27:70:1b:69:96:5f:9e:29:60:
72:79:c3:89:c7:89:df:a8:d2:3c:00:e5:f2:f5:2e:
66:a6:e1:9b:ef:61:04:81:0d:b9:9b:be:97:7c:b1:
65:4a:3b:0a:ac:c5:dc:42:63:b9:36:55:93:79:87:
fd:fa:5e:51:42:83:cf:87:c9:35:7f:58:ba:85:02:
e9:0c:df:07:22:f5:bd:4f:ef:df:da:2a:67:76:a6:
cb:e3:92:58:da:c0:52:65:44:b3:5f:a9:fa:ad:ba:
81:ee:7f:a0:92:08:16:0f:2a:21:28:97:16:86:a6:
84:b9:17:43:31:c6:ae:78:ba:29:a5:15:a4:c4:0b:
15:c8:17:94:ce:86:80:95:cf:e3:07:40:c8:70:ac:
6d:17:b3:eb:0e:ca:0f:6c:18:6e:4c:3f:48:e7:75:
be:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A7:EA:02:B8:7E:A9:57:FE:B5:D2:C7:5D:92:C9:34:F1:8E:10:24
X509v3 Authority Key Identifier:
keyid:F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:d8:6d:1c:de:de:99:1d:03:4f:a3:e5:75:4a:ef:b2:0a:95:
0f:74:f1:25:4a:b4:14:4d:a1:c0:a3:a6:7f:85:b6:18:65:e6:
46:a9:d4:3b:09:26:1e:a0:58:16:b7:dd:a5:1d:d3:77:28:f0:
33:a6:be:28:1e:ad:1e:e9:f3:ae:85:d6:23:5d:2c:63:fb:43:
ca:91:63:b6:0e:a5:ae:51:b0:bc:ff:d5:0a:f3:dc:3f:56:6b:
30:aa:20:93:e1:6c:97:4b:86:05:cb:f7:7c:dc:bb:50:84:1c:
65:7e:eb:8b:6b:12:9e:ed:35:b0:53:81:7f:08:ca:ea:60:92:
9f:e8:8f:66:7b:8c:40:c4:7d:1e:4f:64:65:1e:ad:76:08:ce:
32:8a:69:a4:08:cf:a2:af:b6:4a:4b:6a:c4:bd:18:28:39:2c:
f5:6f:71:7e:f9:ba:81:b5:df:7c:cd:68:b7:99:60:6c:75:23:
ed:68:e1:5f:11:c1:df:0e:ab:00:66:c4:48:4a:ca:d7:79:8c:
eb:59:3f:94:46:d8:c9:01:30:8c:5d:0c:02:40:76:83:5f:23:
34:46:f2:a1:0f:c4:a0:ea:44:2e:3c:2b:4b:56:77:f5:73:2a:
0d:f7:58:5a:9c:05:85:ec:c3:57:ab:b0:fb:0e:27:43:43:0e:
06:dc:31:70
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEyM0MxMTAvBgNVBAUTKEY3NEY3MzVGREM1QTVCOTMzNkYzMjRDMzJDQkE1NThF
QkJEMjhEOTcwHhcNMjUxMTA0MTcwOTA1WhcNMjUxMTExMTcwOTA1WjAYMRYwFAYD
VQQDEw02OTBhMzMzMS0xYzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyaNeYiEQV3KXOLtTRzUGVXEOc/5M2B9/YWb62GjSvW624WSEkpjorZF0M70Q
nDBbhM64oesUbfIgyHtpZQMFMihUV2Y/CBzuz2MRJE9htNz64DPV9WqcGoC0eugw
rnQncBtpll+eKWByecOJx4nfqNI8AOXy9S5mpuGb72EEgQ25m76XfLFlSjsKrMXc
QmO5NlWTeYf9+l5RQoPPh8k1f1i6hQLpDN8HIvW9T+/f2ipndqbL45JY2sBSZUSz
X6n6rbqB7n+gkggWDyohKJcWhqaEuRdDMcaueLoppRWkxAsVyBeUzoaAlc/jB0DI
cKxtF7PrDsoPbBhuTD9I53W+lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMyn6gK4
fqlX/rXSx12SyTTxjhAkMB8GA1UdIwQYMBaAFPdPc1/cWluTNvMkwyy6VY670o2X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTIzQy82OEY1M0YzMkNC
M0UxMUU4ODgyQ0RBM0FDNEY5QUUwMi85MDl6WDl4YVc1TTI4eVRETExwVmpydlNq
WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzkwOXpYOXhhVzVNMjh5VERMTHBWanJ2U2paYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTIzQy82OEY1M0YzMkNCM0UxMUU4ODgyQ0RBM0FDNEY5QUUwMi85MDl6WDl4YVc1
TTI4eVRETExwVmpydlNqWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBD2G0c3t6ZHQNPo+V1Su+yCpUPdPElSrQUTaHAo6Z/hbYYZeZGqdQ7
CSYeoFgWt92lHdN3KPAzpr4oHq0e6fOuhdYjXSxj+0PKkWO2DqWuUbC8/9UK89w/
VmswqiCT4WyXS4YFy/d83LtQhBxlfuuLaxKe7TWwU4F/CMrqYJKf6I9me4xAxH0e
T2RlHq12CM4yimmkCM+ir7ZKS2rEvRgoOSz1b3F++bqBtd98zWi3mWBsdSPtaOFf
EcHfDqsAZsRISsrXeYzrWT+URtjJATCMXQwCQHaDXyM0RvKhD8Sg6kQuPCtLVnf1
cyoN91hanAWF7MNXq7D7DidDQw4G3DFw
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:29:08 2025 by rpki-client