
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
File: bkWq8A0m8fB31nRzkUTUuMOU87g.mft (raw, json)
Hash identifier: 1UoDnBPv1NZDmIFR0Q4Yy3LukwTWwZkFYkycd8R6hu0=
Subject key identifier: 28:41:A5:FA:5A:EF:C2:59:F6:40:08:10:E2:E9:C4:E6:1F:25:C3:39
Authority key identifier: 6E:45:AA:F0:0D:26:F1:F0:77:D6:74:73:91:44:D4:B8:C3:94:F3:B8
Certificate issuer: /CN=A919F0DA/serialNumber=6E45AAF00D26F1F077D674739144D4B8C394F3B8
Certificate serial: 2430
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
Manifest number: 6127
Signing time: Tue 04 Nov 2025 14:15:24 +0000
Manifest this update: Tue 04 Nov 2025 14:15:24 +0000
Manifest next update: Tue 11 Nov 2025 14:15:24 +0000
Files and hashes: 1: bkWq8A0m8fB31nRzkUTUuMOU87g.crl (hash: I5NqrmMSiMZqRctIh0kB3crns4kA5aFuMttEPq650Nc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.crl
rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9264 (0x2430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F0DA, serialNumber=6E45AAF00D26F1F077D674739144D4B8C394F3B8
Validity
Not Before: Nov 4 14:15:24 2025 GMT
Not After : Nov 11 14:15:24 2025 GMT
Subject: CN=690a0a7c-48ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:52:0b:bb:0d:14:52:ce:76:5b:53:ff:6e:a1:
d6:57:2c:ac:01:83:08:57:74:5f:90:23:ef:25:75:
11:fe:42:e8:0d:51:9f:ec:37:bb:27:bf:e6:fa:07:
64:82:ad:0e:6f:f0:3f:d1:90:50:be:12:ba:3d:09:
ae:4c:93:19:1f:d1:5c:96:af:5f:af:99:ba:cb:74:
fb:53:5e:8e:84:63:b2:15:3d:db:31:5f:7f:58:20:
ab:5b:54:61:9d:df:c4:f4:67:71:b8:9a:e2:b5:da:
51:be:2a:20:bc:a2:49:cd:da:70:f9:f9:76:87:e0:
f3:8b:09:60:a3:cb:2a:57:89:2c:f9:9f:f7:bf:fa:
9a:56:6d:13:e0:0f:e3:25:a4:d8:4a:2e:c9:5e:5d:
23:04:91:0f:25:c7:b3:a6:94:bd:37:b2:65:c8:cb:
42:f7:bb:95:40:80:4b:96:d0:82:a1:bb:5c:0d:04:
ba:0c:13:b1:ec:ca:c4:17:6b:67:5e:d4:9e:d8:74:
1e:25:b0:7d:6c:1a:8c:c3:e7:f6:3f:fc:7f:72:c9:
98:b6:36:82:c0:3c:23:d2:7d:8c:d8:a8:60:a5:a4:
91:43:da:d5:73:da:a8:c0:c0:4b:53:b8:bb:ed:49:
e4:3c:00:5b:82:5b:19:28:c4:a1:5b:21:78:f7:47:
5d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:41:A5:FA:5A:EF:C2:59:F6:40:08:10:E2:E9:C4:E6:1F:25:C3:39
X509v3 Authority Key Identifier:
keyid:6E:45:AA:F0:0D:26:F1:F0:77:D6:74:73:91:44:D4:B8:C3:94:F3:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:9a:67:2c:c5:70:e4:9a:21:fe:46:64:e2:2e:6a:7e:44:15:
2a:b9:53:73:8e:45:3e:ff:7e:34:98:4f:11:b2:40:ed:4f:b7:
09:b2:f8:e2:ba:3c:0a:46:85:2d:3c:da:ec:98:83:14:84:0c:
c7:2e:03:40:24:27:52:5f:3f:a0:0f:94:e5:35:00:b1:c7:77:
f6:11:f6:00:59:24:05:35:07:55:a0:9f:89:68:43:ff:85:66:
c2:95:2d:6e:40:4a:56:b5:b1:85:17:82:dd:1f:2b:4a:f1:93:
d9:a7:1e:6c:b4:80:80:a1:75:a3:54:bf:5d:c0:78:43:54:23:
eb:3b:00:1a:c4:88:ef:0d:dd:4a:f1:6b:40:4b:18:c1:e8:57:
c8:ad:16:7f:63:d9:40:69:37:c6:40:07:0b:5c:b8:cb:10:d0:
6e:bc:60:52:73:02:6c:32:89:25:7c:f6:8b:3b:07:59:9b:73:
bd:17:06:88:fc:2f:b1:d3:07:9c:aa:fb:5c:c9:a1:23:34:aa:
1a:ec:5b:33:cc:84:f9:c7:fa:60:d8:54:41:d0:5b:89:bd:39:
c0:50:70:cc:80:2c:9f:95:ea:09:15:86:92:5c:69:6c:9b:1e:
75:07:f5:b2:75:38:c1:3c:fd:1d:c1:c1:0b:37:c7:32:ac:bd:
6a:16:b6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:21:39 2025 by rpki-client