
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft
File: azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft (raw, json)
Hash identifier: d/IlKFp7GuVQV9RxddUlYNyGjUXxKZPsnS0+564FON8=
Subject key identifier: 41:14:60:BD:14:41:22:BF:65:BB:17:32:91:74:09:02:E0:3D:E7:BC
Authority key identifier: 6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4
Certificate issuer: /CN=A917B1EE/serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4
Certificate serial: 0169
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft
Manifest number: 0163
Signing time: Wed 05 Nov 2025 04:13:55 +0000
Manifest this update: Wed 05 Nov 2025 04:13:55 +0000
Manifest next update: Wed 12 Nov 2025 04:13:55 +0000
Files and hashes: 1: azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl (hash: 5GG8JUgTE44T6Z4lERv752pOzOi3ypc/IhCkEKSmnhw=)
2: 0F7A0CD4C72E11EEAA6B423BC4F9AE02.roa (hash: lqNFFXORI79Tp9nH7sxtcuWMLXX1DbMNSF2W2W7xgQw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl
rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:13:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B1EE, serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4
Validity
Not Before: Nov 5 04:13:55 2025 GMT
Not After : Nov 12 04:13:55 2025 GMT
Subject: CN=690acf03-47f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:38:ff:6e:22:2b:f8:3e:e8:10:aa:8a:21:6e:
36:63:1f:a7:73:fa:b6:64:3f:e4:ef:6b:a6:cb:20:
41:5a:2b:50:3e:d4:1a:70:97:42:70:2b:b8:ba:c7:
8d:ac:1a:49:bb:ec:54:49:f6:2b:c3:b0:2b:4a:66:
bd:4e:79:63:e7:14:4a:20:8a:f5:31:5e:8a:dd:17:
b2:8e:a8:66:7e:e9:1a:74:d6:4e:b4:7a:4c:a2:5f:
a2:d9:60:bb:6c:0e:1f:24:f5:12:2e:7c:36:b5:81:
f1:5c:06:b5:3d:3e:9b:6f:5e:16:e3:8c:d0:c3:b1:
31:e4:4e:2e:10:11:4f:24:c7:51:85:6e:e5:89:8f:
ae:51:98:b2:54:0f:8c:29:a2:0d:97:2d:50:12:10:
43:b6:1c:e4:87:5b:36:e0:38:49:17:1f:3d:70:95:
59:11:4c:ee:04:3d:cb:43:fc:ae:bf:f8:43:56:4f:
14:f2:49:16:73:5d:ee:e9:1d:40:e2:25:7a:0e:0b:
32:ed:e3:ef:b4:72:61:ce:82:44:3b:e7:5b:05:a8:
07:a2:b9:b5:be:ba:d1:4b:af:f9:a7:82:5f:c6:6a:
6d:68:aa:65:d6:aa:fd:59:44:72:85:d9:72:b5:d8:
f8:c8:1a:32:a4:95:da:f3:bd:7d:1d:22:03:38:96:
b1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:14:60:BD:14:41:22:BF:65:BB:17:32:91:74:09:02:E0:3D:E7:BC
X509v3 Authority Key Identifier:
keyid:6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:87:11:59:be:ba:a4:7d:17:b7:37:4b:1f:90:b5:8b:2f:40:
a6:db:ef:21:2d:97:ab:25:7c:b0:ca:24:12:1e:f8:88:fa:cb:
23:bb:e0:12:ac:69:5f:ae:ca:46:53:86:9f:f0:c4:fb:15:e4:
2b:3b:fe:80:c5:b1:68:e5:f7:2e:39:ee:f2:68:6b:85:40:e1:
af:50:72:15:2a:11:c6:fe:a8:21:6a:76:b2:b9:25:b0:0c:d8:
97:5c:a0:f1:57:93:b9:c1:48:f6:69:fd:d1:99:d2:32:1f:a8:
8b:d6:17:dc:1f:c2:f0:10:94:d7:04:0f:77:3f:b6:a9:90:d4:
bb:6f:d3:8c:ba:9f:bd:4e:31:69:85:bd:c7:30:2b:30:24:c4:
13:d1:82:c0:5d:75:18:cf:f4:c2:7c:55:cc:3a:ec:ae:f9:87:
a0:b9:bc:3e:9e:62:5b:fd:81:af:0f:77:65:e9:81:47:fc:be:
04:a3:d8:da:82:be:e1:72:98:cd:dc:bb:97:1a:5c:01:d4:3a:
35:13:3a:96:3a:66:2c:bb:4e:f6:df:b4:ff:b4:e0:b0:db:07:
09:dd:c3:57:a3:45:1d:df:a6:5d:56:2c:fd:17:7e:ec:97:22:
b2:b5:fb:b4:ef:1d:a7:34:f7:e5:00:86:70:6c:1b:34:7d:df:
7f:22:d0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:09:01 2025 by rpki-client