
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
File: SXu3JxgnnbzJhdum05s2Vn9E56o.mft (raw, json)
Hash identifier: EPpiZd1W5EgpWJvaGkYr8RDOIhsBUZGdOdkCcOwzu7U=
Subject key identifier: C5:B6:F9:5C:EE:23:EF:D4:EC:98:FD:0B:5B:6F:22:D3:4E:80:32:E2
Authority key identifier: 49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA
Certificate issuer: /CN=A9123059/serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA
Certificate serial: 25
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
Manifest number: 24
Signing time: Sun 19 Oct 2025 11:18:27 +0000
Manifest this update: Sun 19 Oct 2025 11:18:26 +0000
Manifest next update: Sun 26 Oct 2025 11:18:26 +0000
Files and hashes: 1: SXu3JxgnnbzJhdum05s2Vn9E56o.crl (hash: wHFzgfPdpqMfA1fx9EDeNntvPJLYd1TzaE4MRhzrGWw=)
2: 1A52B0BA8A8811F0A0F59D1FC4F9AE02.roa (hash: eUyFtijE7ulYYeR6FE4HWasF4D8cnPdrEPGMIUGgb2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl
rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 11:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123059, serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA
Validity
Not Before: Oct 19 11:18:26 2025 GMT
Not After : Oct 26 11:18:26 2025 GMT
Subject: CN=68f4c902-7245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9f:83:1f:3a:32:df:0a:5a:f3:03:a8:9d:f7:
e7:90:86:6c:fc:c8:89:ba:43:0b:0e:27:5f:f7:1d:
d6:f6:da:85:86:c3:d6:fb:68:3b:43:b9:ec:4b:ca:
27:b1:c7:44:f3:7c:d0:9e:53:1c:b5:6a:52:41:0a:
01:86:97:a1:27:7e:b9:17:bd:a6:af:03:ce:b2:3e:
b3:a5:4e:81:73:51:ba:cd:dc:6b:30:35:ed:d6:d7:
68:ab:37:fc:0c:99:61:4e:ef:0d:6a:b7:85:37:15:
38:73:39:b1:4b:80:a1:f1:04:b5:10:98:e0:2c:53:
5a:a5:ba:2c:97:de:f3:71:c4:de:f4:5f:c4:f8:e4:
80:03:2f:cd:98:8f:ea:bd:e3:85:76:27:e2:8f:f2:
58:df:d7:83:da:7e:f7:33:a0:4d:93:6c:dd:fd:20:
15:47:4c:cf:75:72:c0:2e:eb:c3:b0:f9:23:99:18:
19:c4:48:5e:8a:e5:24:ba:58:8b:78:47:f1:9e:b7:
87:ba:62:4d:03:66:7f:33:da:d0:fb:80:d5:30:87:
bd:61:ea:67:68:5b:1e:7e:1d:a1:ac:90:1c:57:3c:
09:94:26:24:84:ee:69:96:0b:08:34:a1:b3:50:e8:
f1:52:a0:e0:a5:68:d2:58:08:83:e2:66:8d:fa:b5:
84:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B6:F9:5C:EE:23:EF:D4:EC:98:FD:0B:5B:6F:22:D3:4E:80:32:E2
X509v3 Authority Key Identifier:
keyid:49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:60:13:b0:d4:13:c0:cd:22:3a:10:d5:af:d9:a2:3a:32:26:
0b:09:7a:e7:6f:14:b4:bd:2d:8e:12:a8:3f:5f:29:19:32:85:
4c:70:5f:7a:b6:fc:b2:dc:15:17:97:6a:0b:3a:a3:c4:e6:5d:
fd:d0:d5:0d:c0:7c:3f:2b:0d:7d:8c:6c:31:76:7c:44:fb:2e:
59:6f:fa:ad:bd:4c:f7:75:f7:36:93:4b:c2:a8:ac:91:44:28:
d1:78:d0:f9:c3:16:8d:22:5d:d9:b3:0a:1e:c0:92:e3:7e:cb:
49:30:5d:af:61:29:a5:4e:72:85:1e:c0:c7:c1:fe:6a:a0:e3:
7a:ef:78:c8:09:9b:e9:4b:fc:5b:f6:0b:17:53:c9:45:bd:74:
25:36:c8:c2:0e:f9:f9:bc:a0:e6:20:74:69:4a:83:08:d9:86:
05:55:a2:e0:82:20:19:b4:2a:3d:f6:32:78:d9:09:61:2b:80:
cf:a0:13:8d:36:db:ff:f0:93:74:b0:87:be:ac:a5:2a:bb:4e:
00:9b:30:ce:ed:7a:82:16:4f:e4:25:39:50:36:5d:2c:fd:0e:
d0:45:5e:35:23:bb:e9:9e:e7:eb:ef:76:ed:85:ac:34:18:07:
b0:83:4e:d9:04:5b:ce:42:02:8c:1f:b4:81:b8:32:34:43:15:
da:61:92:28
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
MzA1OTExMC8GA1UEBRMoNDk3QkI3MjcxODI3OURCQ0M5ODVEQkE2RDM5QjM2NTY3
RjQ0RTdBQTAeFw0yNTEwMTkxMTE4MjZaFw0yNTEwMjYxMTE4MjZaMBgxFjAUBgNV
BAMTDTY4ZjRjOTAyLTcyNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQn4MfOjLfClrzA6id9+eQhmz8yIm6QwsOJ1/3Hdb22oWGw9b7aDtDuexLyiex
x0TzfNCeUxy1alJBCgGGl6EnfrkXvaavA86yPrOlToFzUbrN3GswNe3W12irN/wM
mWFO7w1qt4U3FThzObFLgKHxBLUQmOAsU1qluiyX3vNxxN70X8T45IADL82Yj+q9
44V2J+KP8ljf14PafvczoE2TbN39IBVHTM91csAu68Ow+SOZGBnESF6K5SS6WIt4
R/Get4e6Yk0DZn8z2tD7gNUwh71h6mdoWx5+HaGskBxXPAmUJiSE7mmWCwg0obNQ
6PFSoOClaNJYCIPiZo36tYS3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxbb5XO4j
79TsmP0LW28i006AMuIwHwYDVR0jBBgwFoAUSXu3JxgnnbzJhdum05s2Vn9E56ow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMDU5L0IyQ0VBN0Y2NzlG
NjExRjA5Q0U5QzMyOEM0RjlBRTAyL1NYdTNKeGdubmJ6SmhkdW0wNXMyVm45RTU2
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvU1h1M0p4Z25uYnpKaGR1bTA1czJWbjlFNTZvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz
MDU5L0IyQ0VBN0Y2NzlGNjExRjA5Q0U5QzMyOEM0RjlBRTAyL1NYdTNKeGdubmJ6
SmhkdW0wNXMyVm45RTU2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJ9gE7DUE8DNIjoQ1a/ZojoyJgsJeudvFLS9LY4SqD9fKRkyhUxwX3q2
/LLcFReXags6o8TmXf3Q1Q3AfD8rDX2MbDF2fET7Lllv+q29TPd19zaTS8KorJFE
KNF40PnDFo0iXdmzCh7AkuN+y0kwXa9hKaVOcoUewMfB/mqg43rveMgJm+lL/Fv2
CxdTyUW9dCU2yMIO+fm8oOYgdGlKgwjZhgVVouCCIBm0Kj32MnjZCWErgM+gE402
2//wk3Swh76spSq7TgCbMM7teoIWT+QlOVA2XSz9DtBFXjUju+me5+vvdu2FrDQY
B7CDTtkEW85CAowftIG4MjRDFdphkig=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:23:44 2025 by rpki-client