
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft
File: pZqv2bOxSIduExDPGyR6mnybbJg.mft (raw, json)
Hash identifier: HkFFMQ119oLk5Xrz2niFZsBC1weH99pjPURlgtL7Qks=
Subject key identifier: E9:B2:F4:09:08:96:A2:E3:54:24:DF:CA:33:C0:F4:74:51:90:CD:F8
Authority key identifier: A5:9A:AF:D9:B3:B1:48:87:6E:13:10:CF:1B:24:7A:9A:7C:9B:6C:98
Certificate issuer: /CN=A9169E54/serialNumber=A59AAFD9B3B148876E1310CF1B247A9A7C9B6C98
Certificate serial: 46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZqv2bOxSIduExDPGyR6mnybbJg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft
Manifest number: 46
Signing time: Wed 05 Nov 2025 07:33:48 +0000
Manifest this update: Wed 05 Nov 2025 07:33:47 +0000
Manifest next update: Wed 12 Nov 2025 07:33:47 +0000
Files and hashes: 1: pZqv2bOxSIduExDPGyR6mnybbJg.crl (hash: Quo7fCLvg/0GaMpPd//oU7JPv70rg91glwWIy1cgl1Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.crl
rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZqv2bOxSIduExDPGyR6mnybbJg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 07:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169E54, serialNumber=A59AAFD9B3B148876E1310CF1B247A9A7C9B6C98
Validity
Not Before: Nov 5 07:33:47 2025 GMT
Not After : Nov 12 07:33:47 2025 GMT
Subject: CN=690afddb-f513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:e4:4d:b2:f7:d2:87:2d:4c:64:b6:20:c7:
6a:1a:6e:2f:e2:40:45:a6:31:bc:eb:df:4e:5f:8e:
ca:f7:78:7d:1f:ab:93:ed:be:a9:16:e1:4d:27:b5:
b6:23:ef:59:94:19:63:91:41:93:0a:b2:1f:49:24:
ce:cf:34:44:82:81:e7:b7:7e:d1:8b:a8:30:d5:49:
00:25:95:65:81:c1:20:20:62:75:3f:cf:c4:53:ef:
e1:49:d9:ce:96:6a:a3:49:45:9c:e5:c4:b8:61:3a:
fa:2c:4c:eb:14:b8:2a:5c:36:79:28:38:3b:8e:1a:
66:d5:a8:d6:2a:de:9c:16:50:87:81:28:04:8c:6e:
3b:49:02:d6:64:bc:6e:c7:c8:0f:a2:9b:f4:18:36:
13:0e:a3:97:a9:af:0f:96:74:36:ad:73:a2:d4:30:
6a:bb:64:1c:18:a9:38:9c:60:6f:84:f5:34:a3:0d:
39:b5:4e:d0:0b:a1:c2:de:f5:6f:c5:3f:64:92:e1:
79:df:9c:1f:3e:61:eb:9e:63:ea:13:a9:b7:55:dd:
4a:ec:ee:46:da:f0:2f:de:6f:d7:08:66:79:a7:f6:
a5:4e:4d:52:5b:97:8c:5e:14:0d:1f:95:2f:19:dd:
c5:11:98:ee:db:1f:61:0e:b8:c2:2f:63:ff:40:b9:
97:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B2:F4:09:08:96:A2:E3:54:24:DF:CA:33:C0:F4:74:51:90:CD:F8
X509v3 Authority Key Identifier:
keyid:A5:9A:AF:D9:B3:B1:48:87:6E:13:10:CF:1B:24:7A:9A:7C:9B:6C:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZqv2bOxSIduExDPGyR6mnybbJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:d4:20:5d:45:e3:a2:75:2e:65:30:03:b6:c8:d2:88:99:2b:
f0:3a:91:e4:35:46:fd:13:2e:36:45:c7:b7:07:8b:93:25:bf:
8a:88:79:02:a7:60:92:4b:f3:c3:a5:37:21:03:af:70:c8:86:
30:74:9c:73:ca:29:f5:65:05:02:85:e5:97:e0:6c:a3:99:e7:
47:c3:8a:bf:c4:52:51:3e:6c:eb:11:cb:3f:0d:3a:9c:d8:1b:
0a:ef:99:22:d2:ba:e4:5d:32:9d:7f:46:a6:5d:fb:7f:f9:70:
4e:ab:ee:5d:60:ce:c3:20:d6:d6:e1:c6:45:37:71:04:43:3a:
5d:74:91:c0:bc:82:22:09:ef:24:44:84:a3:4c:e8:6d:16:c2:
32:cf:ae:33:89:e7:c6:8f:8f:ea:5a:bf:01:70:21:14:e6:04:
b2:36:54:a8:5f:70:f1:07:9b:26:4e:e5:21:00:36:d8:4f:50:
18:17:0d:40:aa:77:68:e0:45:cc:ac:ee:02:06:7b:69:e1:2d:
83:3f:c1:32:08:00:fc:e7:8b:9d:b2:81:a2:8f:23:f7:3a:c0:
a6:fd:51:60:2f:dc:80:9f:23:31:1e:ad:27:c1:f4:59:67:8a:
e7:0e:72:4c:be:61:3c:59:c4:3f:3e:b2:b8:72:c2:d6:37:86:
f2:d9:bf:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:28:34 2025 by rpki-client