
$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
File: MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft (raw, json)
Hash identifier: Mmx0mFJcnWZLoRswcHp/p7tU5WuE+pUtzlDLJ8BCp7o=
Subject key identifier: 72:3D:D4:49:37:C8:C3:8B:17:0D:03:2A:83:5F:45:B7:11:C7:D4:50
Authority key identifier: 31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E
Certificate issuer: /CN=A91883D3/serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E
Certificate serial: E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
Manifest number: E3
Signing time: Wed 05 Nov 2025 05:36:55 +0000
Manifest this update: Wed 05 Nov 2025 05:36:54 +0000
Manifest next update: Wed 12 Nov 2025 05:36:54 +0000
Files and hashes: 1: MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl (hash: b79t8UmUdUdjbM6KZQN90K/nePgA6MgDH3hqahPFQLg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl
rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:36:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91883D3, serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E
Validity
Not Before: Nov 5 05:36:54 2025 GMT
Not After : Nov 12 05:36:54 2025 GMT
Subject: CN=690ae276-ccc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:51:c9:b7:58:00:23:26:ca:18:68:62:d3:69:
6e:ac:35:1a:bb:a0:c5:50:2f:5e:25:e1:77:dc:12:
53:8f:3f:18:4d:e3:14:60:4d:2d:02:6e:a2:d6:10:
39:a7:2e:11:e8:64:0b:69:08:72:ff:22:17:14:9b:
c8:e1:6e:56:7d:33:5c:ef:c6:0f:85:44:29:eb:21:
42:d9:ca:03:28:3a:bb:ee:93:bd:0b:e0:a4:96:ba:
2b:4c:46:cf:2f:cd:e9:b7:71:59:22:9b:23:49:34:
a6:e4:83:c7:eb:0d:83:08:f7:44:ea:04:91:73:2f:
e8:b5:6e:dc:14:09:3f:18:3c:c0:c5:52:d9:2e:72:
22:e8:83:49:36:80:1e:52:31:ec:6d:99:8f:b0:e0:
93:d5:db:e5:87:41:7d:ef:33:3e:46:5b:19:2c:24:
bd:ef:ea:80:36:91:9d:f0:e4:0b:5a:1e:24:31:71:
f7:d6:68:73:3d:5a:ee:d7:42:c1:b2:61:17:72:ba:
18:97:6b:f2:c2:c6:33:47:4b:eb:36:c8:7c:a4:e5:
57:be:19:1d:2a:75:6c:2f:80:2b:29:39:3e:44:97:
4b:65:d1:d8:5a:aa:1c:cb:c2:ff:d9:37:0f:31:4a:
ab:1c:2d:03:a2:60:0d:d7:44:55:ef:6f:f2:55:f2:
e2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3D:D4:49:37:C8:C3:8B:17:0D:03:2A:83:5F:45:B7:11:C7:D4:50
X509v3 Authority Key Identifier:
keyid:31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:67:21:f8:71:c2:38:71:e1:8c:6b:62:e7:5c:9a:9f:c5:40:
c8:97:f9:a7:2f:54:e7:a8:14:37:99:3e:4c:75:b4:08:0a:4d:
a9:3f:3c:87:81:ae:3c:8c:c9:26:62:0e:04:4a:c9:7c:30:2a:
bf:b3:58:c3:fd:76:8f:54:14:08:77:ae:85:a7:a9:d6:aa:f8:
82:7f:6e:21:d1:e3:e4:d7:e4:08:a7:41:7a:a5:86:3d:1e:04:
41:52:a7:e3:47:ba:50:02:61:67:49:ac:35:24:b0:a9:f2:05:
de:21:6a:2d:c8:e7:6f:44:95:b5:10:68:32:27:a6:86:67:4e:
0b:f8:64:2c:d1:3a:82:eb:e3:ed:1a:32:5a:a0:00:b1:e6:51:
65:ea:8e:c5:03:96:d5:87:ec:28:c0:6a:77:38:e7:ab:99:7b:
4d:5d:6e:74:ca:09:e4:fc:6a:d7:9e:d8:75:f3:5f:48:f9:6d:
4c:c0:72:c6:db:f2:47:a2:44:88:cf:7b:14:51:80:91:9b:39:
3b:a8:95:fe:e5:f4:6d:58:4e:9e:77:dd:77:1d:ef:8e:92:cf:
84:84:be:03:84:bc:4d:b4:42:63:84:a5:1b:99:b7:f9:4c:38:
53:f1:0e:42:11:c9:fa:a8:f3:74:24:0f:cb:89:26:b5:14:d4:
cc:bf:cb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:03:28 2025 by rpki-client