
$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft
File: RevxDdQ0xSgZEpy5XhoT7ML81e0.mft (raw, json)
Hash identifier: BxZRgLQcgQjVxOF1AekrhLjE811xSZb03VfHZ567mbU=
Subject key identifier: 11:38:6A:BD:85:AE:FC:CA:70:CB:24:18:B1:82:CC:C5:55:65:96:09
Authority key identifier: 45:EB:F1:0D:D4:34:C5:28:19:12:9C:B9:5E:1A:13:EC:C2:FC:D5:ED
Certificate issuer: /CN=A916ED2B/serialNumber=45EBF10DD434C52819129CB95E1A13ECC2FCD5ED
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft
Manifest number: F2
Signing time: Wed 05 Nov 2025 05:25:17 +0000
Manifest this update: Wed 05 Nov 2025 05:25:16 +0000
Manifest next update: Wed 12 Nov 2025 05:25:16 +0000
Files and hashes: 1: RevxDdQ0xSgZEpy5XhoT7ML81e0.crl (hash: H64fcqAnwG5e6sulwzKr3nBYPpfO15YceMeDCw3NcSE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.crl
rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ED2B, serialNumber=45EBF10DD434C52819129CB95E1A13ECC2FCD5ED
Validity
Not Before: Nov 5 05:25:16 2025 GMT
Not After : Nov 12 05:25:16 2025 GMT
Subject: CN=690adfbd-4fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:27:16:02:61:a0:23:41:b5:31:31:0d:d6:62:
61:d6:6e:34:f3:c7:6a:cf:c1:86:e9:ed:b8:47:0c:
35:45:f1:49:05:67:09:34:dc:3d:cb:ca:f2:79:ac:
78:40:c0:26:85:b4:96:98:b3:cb:07:f8:24:3a:54:
d2:bf:fd:23:f4:cc:34:37:8a:9d:84:71:0e:94:52:
2b:b6:6f:20:49:2c:fb:8c:89:f0:93:ad:aa:7a:cf:
81:2c:d5:6a:40:7c:40:58:bb:8f:e0:b3:5d:9f:af:
f3:a2:39:4d:5c:b2:cf:d2:fd:6c:e5:92:9a:5e:90:
4c:87:54:3b:57:a8:b0:0a:56:33:a7:5f:df:d6:d4:
3c:c9:c3:44:99:17:6a:40:8d:67:0b:d8:f2:fd:7e:
31:ae:2c:5e:8d:15:f6:06:85:0f:44:5d:9d:63:6c:
a5:58:1a:c7:8d:13:fb:c2:f4:67:71:cd:41:e0:9b:
d4:43:a5:6e:a7:f4:4f:1d:b3:76:8d:73:75:ca:22:
84:b9:65:f5:70:95:b8:9b:66:31:97:42:a2:e9:4e:
6e:e7:8b:16:6b:b3:ab:09:ae:81:86:41:cf:58:5e:
ce:2d:1f:ac:70:27:c6:dd:7a:42:cc:88:5c:38:bb:
ea:02:5f:75:a4:69:e9:05:32:80:55:0a:be:fb:15:
2a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:38:6A:BD:85:AE:FC:CA:70:CB:24:18:B1:82:CC:C5:55:65:96:09
X509v3 Authority Key Identifier:
keyid:45:EB:F1:0D:D4:34:C5:28:19:12:9C:B9:5E:1A:13:EC:C2:FC:D5:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:de:72:4a:63:7d:99:22:91:96:e8:af:89:2a:c4:86:77:f4:
9e:71:ab:76:88:7c:12:bd:70:20:79:9a:45:89:28:cf:a7:21:
89:a9:49:e6:b2:5e:8b:45:1e:c6:84:ea:99:40:60:f3:e6:67:
4a:45:42:43:3f:ed:2d:de:16:24:08:04:f3:b8:67:f8:69:d6:
ba:12:59:73:c8:da:97:5d:45:7e:9c:36:4c:e6:0e:2c:ca:a9:
15:28:8d:00:f8:da:59:a4:60:4f:61:8c:68:95:7b:7e:06:73:
fe:41:e7:4d:86:7b:a0:d2:1d:84:bb:ec:58:6d:be:95:b4:36:
df:8a:bd:13:02:8c:ed:22:c8:41:99:97:05:f3:f9:61:d1:d8:
78:ed:c6:0d:09:cb:f6:30:48:bd:3e:fa:cd:cc:ef:c6:66:d6:
32:56:2e:82:2e:f1:45:b3:21:af:f6:ca:a5:9f:8e:32:4f:8e:
fb:11:74:c1:f8:20:85:e1:62:4c:71:bc:dc:64:9b:28:f5:d8:
6c:7f:e7:2a:2e:15:84:d4:79:77:71:d0:d3:94:ca:40:24:e3:
f9:f2:06:f1:0f:08:8c:60:c9:a3:db:fe:cf:fe:16:65:b8:b3:
76:bf:7d:11:1e:32:d9:8f:ff:92:0c:31:71:4f:14:2a:7b:29:
22:2d:e4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:10:41 2025 by rpki-client