
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
File: xPbJMOCbga9ejADnmlhCqnJz0Q8.mft (raw, json)
Hash identifier: 0YTpXLhxzig25oXXVDW5+FwsUZkE6R0r8xOrq5V8yMY=
Subject key identifier: 95:08:6A:58:4E:A9:2F:E0:61:6F:29:D9:1C:7F:9A:5F:23:33:AB:03
Authority key identifier: C4:F6:C9:30:E0:9B:81:AF:5E:8C:00:E7:9A:58:42:AA:72:73:D1:0F
Certificate issuer: /CN=A9180488/serialNumber=C4F6C930E09B81AF5E8C00E79A5842AA7273D10F
Certificate serial: 0834
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
Manifest number: 0829
Signing time: Tue 04 Nov 2025 20:55:19 +0000
Manifest this update: Tue 04 Nov 2025 20:55:18 +0000
Manifest next update: Tue 11 Nov 2025 20:55:18 +0000
Files and hashes: 1: xPbJMOCbga9ejADnmlhCqnJz0Q8.crl (hash: COHtsV87pcpCyH5IZyBacQJ7uQ6sNoyZBGWms6vYD4s=)
2: E2E11B669E5811EEAFEC8E0EC4F9AE02.roa (hash: Y1XODsYMVyKyWg/5bFmuk9Xe0SDzwsDCSzbtwlv6QeM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.crl
rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 20:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2100 (0x834)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180488, serialNumber=C4F6C930E09B81AF5E8C00E79A5842AA7273D10F
Validity
Not Before: Nov 4 20:55:18 2025 GMT
Not After : Nov 11 20:55:18 2025 GMT
Subject: CN=690a6836-a004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:4f:2a:ec:fd:45:40:e1:d5:ad:b3:c3:08:
e0:3b:af:d1:85:01:20:19:89:25:b2:3e:80:83:d0:
6c:97:38:ed:62:01:ba:c8:27:27:73:e5:59:a8:ee:
74:ea:c2:aa:ba:4f:36:64:8c:0d:83:42:34:92:ee:
d9:fc:41:bb:67:dd:78:3c:dd:1c:c5:cc:80:45:09:
36:a4:56:4f:a3:76:4b:b0:9f:fd:34:c2:a8:7f:40:
66:62:ad:9c:17:60:2f:13:3a:05:8a:8e:de:b5:47:
2e:34:1d:5d:1a:eb:4d:2c:a3:d0:56:53:77:d5:42:
df:98:fc:76:a0:3a:07:eb:81:61:7a:96:3d:50:c1:
0e:80:9d:8e:a0:d7:3a:9e:11:80:ac:7f:8d:95:29:
b1:89:58:45:8a:5a:1d:25:71:35:d5:7f:31:c4:c2:
c4:67:a8:b8:97:02:17:31:13:24:4f:7d:d3:33:5f:
30:f8:57:d4:53:7a:af:01:dc:08:64:30:cb:26:40:
29:39:14:8e:91:9d:b3:c9:d7:5b:2e:ac:ca:c0:e5:
87:69:1b:1c:5a:cf:2a:68:84:1b:01:57:84:af:f9:
fc:a5:3b:fd:73:e7:cd:68:ab:f0:22:35:0a:66:da:
09:5b:8a:b9:f1:27:18:a8:2b:e4:fe:65:82:39:59:
78:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:08:6A:58:4E:A9:2F:E0:61:6F:29:D9:1C:7F:9A:5F:23:33:AB:03
X509v3 Authority Key Identifier:
keyid:C4:F6:C9:30:E0:9B:81:AF:5E:8C:00:E7:9A:58:42:AA:72:73:D1:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:ea:fc:f4:07:8a:e7:ea:47:f5:69:a8:93:71:14:49:9a:a0:
b9:55:18:1b:da:4f:9d:6e:16:11:95:fb:63:a0:d4:6c:eb:8a:
8b:d9:77:fc:e3:09:94:eb:00:88:d7:87:17:24:10:5f:40:d9:
21:1f:d1:18:47:d3:95:5e:8d:0f:ad:66:f2:b5:2d:00:a9:b6:
20:bb:97:81:e5:d0:68:42:19:aa:73:c8:9f:b6:63:ff:17:ce:
38:e9:f6:b7:b9:88:f8:a7:87:41:b4:7b:27:a5:42:ba:ce:b6:
e2:2d:7f:76:f6:60:e2:12:73:a7:75:dc:4c:d8:3b:fd:36:11:
f7:05:1e:50:20:eb:6b:a4:b0:8e:82:5d:c5:c1:fa:4f:21:64:
ce:8e:ad:80:e4:5d:81:3a:68:d9:15:94:38:13:b7:65:46:1e:
b3:64:b6:e2:0b:a7:2e:23:be:5c:d2:69:b1:d8:46:ad:fa:8e:
ed:94:d5:46:a8:1a:27:1b:66:41:99:2b:88:79:fe:a2:2e:58:
13:8d:b3:06:8a:db:0d:c8:c5:5c:36:8e:b4:75:1f:33:62:06:
94:7c:83:24:78:f5:ec:d3:85:b4:70:b3:e5:e8:40:ef:38:6d:
1e:92:30:47:0a:9c:2f:8a:34:9d:f3:1c:25:ee:11:f4:73:1a:
95:4e:51:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:35:11 2025 by rpki-client