
$ rpki-client -vvf rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
File: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft (raw, json)
Hash identifier: fr65n/1Zlx016eU744b7ps/Udro1nOfDVns8EteMgqs=
Subject key identifier: B5:3D:68:FB:EE:0C:47:53:4E:A1:4D:0F:45:9F:94:97:F6:F6:79:08
Authority key identifier: DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C
Certificate issuer: /CN=A915201D/serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
Manifest number: 7A
Signing time: Wed 05 Nov 2025 07:01:15 +0000
Manifest this update: Wed 05 Nov 2025 07:01:14 +0000
Manifest next update: Wed 12 Nov 2025 07:01:14 +0000
Files and hashes: 1: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl (hash: HSfZoUpIYyN2RAyZ9LxPvCyC3t6MTYJm+RUU0GoDcCw=)
2: 69AF571603F211F09BC45354C4F9AE02.roa (hash: dT/BONoh4iz/mCrFUa2bnRPY+g4+rGXpyhnWzue1M3M=)
3: C0FB557E03F211F08D0A9566C4F9AE02.roa (hash: R+1VP9LHiaevMYdKlJuk8iImqVduU78fQg6WO1Eu+k0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl
rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915201D, serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C
Validity
Not Before: Nov 5 07:01:14 2025 GMT
Not After : Nov 12 07:01:14 2025 GMT
Subject: CN=690af63a-8854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ff:cb:34:da:00:26:88:64:af:e0:cd:d9:28:
e9:66:1a:80:76:f6:ca:f3:bb:d0:23:e7:4a:c4:58:
f9:50:47:76:66:d1:ca:58:30:04:b2:75:61:cb:be:
95:0e:50:8b:a2:a3:47:0a:b8:f9:38:ab:f3:ca:0b:
0f:c5:2b:96:64:3b:d3:ce:c6:5a:25:19:f1:68:d1:
e2:94:8b:63:6f:55:9f:e3:bd:95:14:2c:c4:df:d7:
50:5c:1a:79:4f:ce:e4:07:4b:8d:24:7e:b4:13:61:
fb:52:9d:02:77:5d:ba:83:6d:cb:75:ec:a6:a6:bc:
3b:3d:ed:53:61:5d:ef:a4:da:68:ca:f8:9b:3a:9a:
6b:34:55:ba:e4:12:99:36:57:bc:49:56:10:e6:f0:
b9:2e:be:51:04:78:32:78:fd:e1:8c:fd:e5:d9:82:
6d:c2:49:2e:c7:7f:c6:97:98:b9:fd:91:0f:b3:ca:
91:ac:9b:da:6e:3b:85:bc:08:f9:aa:ae:fe:25:84:
0e:c1:d5:4b:44:f7:37:bc:73:39:91:5b:57:13:10:
a7:7e:31:3e:46:ff:9a:76:b4:25:47:ee:7c:1d:9b:
d3:42:56:db:8b:ca:22:28:5d:d0:f9:f6:0d:4e:01:
55:26:75:db:32:0c:8a:24:02:87:06:5a:5c:a2:a9:
51:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3D:68:FB:EE:0C:47:53:4E:A1:4D:0F:45:9F:94:97:F6:F6:79:08
X509v3 Authority Key Identifier:
keyid:DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:f3:af:e7:71:78:51:1f:3f:96:32:a9:87:c8:f4:82:88:bf:
08:33:fd:ce:42:15:e1:0e:03:22:de:1f:0a:9f:f4:aa:69:f2:
aa:1d:04:19:ab:af:84:49:c1:d0:7e:e4:ce:7a:4f:5a:d0:49:
b5:dc:e5:94:b9:76:89:2f:11:08:a5:48:fd:3f:f3:8b:89:5f:
9d:f0:c2:67:84:77:01:6f:b7:2b:95:da:ef:51:f4:31:d6:d0:
ee:db:24:d0:77:7d:44:ae:1b:1e:9b:92:10:d6:d8:e7:b9:61:
2f:ad:89:4d:82:f0:06:55:00:ad:66:7f:89:62:27:58:65:b2:
9a:25:37:09:d9:fb:58:be:f6:86:7e:3e:5f:e1:2e:f1:c8:b4:
ca:ce:32:9d:5e:b0:f3:4d:1f:76:03:8d:1c:e0:91:cf:de:2a:
06:cc:d2:13:a2:98:8d:f5:cb:bf:5d:8d:e8:9c:d1:3a:96:11:
db:72:6d:72:4f:7b:5b:e4:c0:4b:11:81:14:f7:2f:99:34:e7:
c2:aa:31:ab:c4:1a:00:f8:49:06:4a:f5:c3:ea:1e:fb:b8:91:
d9:84:81:b7:2a:82:a4:c0:9c:ed:f1:83:37:5b:69:c5:0a:7b:
d4:08:1f:9d:20:8c:52:0d:d5:c4:c1:7d:a6:a5:37:d0:e6:70:
dc:d5:e8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:23:38 2025 by rpki-client