
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
File: t88LJwp_2x1xeui5edHuD_iL1E8.mft (raw, json)
Hash identifier: cWvTM0YpM+t0at3KnBUSNQcn24mbgFQIRZD7qIhG8y8=
Subject key identifier: C3:6F:15:86:01:A4:D9:F9:C0:63:00:19:F2:0D:18:B0:AB:C9:27:40
Authority key identifier: B7:CF:0B:27:0A:7F:DB:1D:71:7A:E8:B9:79:D1:EE:0F:F8:8B:D4:4F
Certificate issuer: /CN=A915B50D/serialNumber=B7CF0B270A7FDB1D717AE8B979D1EE0FF88BD44F
Certificate serial: D2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t88LJwp_2x1xeui5edHuD_iL1E8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
Manifest number: CE
Signing time: Sun 19 Oct 2025 08:51:59 +0000
Manifest this update: Sun 19 Oct 2025 08:51:59 +0000
Manifest next update: Sun 26 Oct 2025 08:51:59 +0000
Files and hashes: 1: t88LJwp_2x1xeui5edHuD_iL1E8.crl (hash: jj4nNYIKtt0WlBVYVWSlfkXCVrdnIj21lWUMRBTwaEo=)
2: 85CDB6087C1211EF8E490677C4F9AE02.roa (hash: dg3/bJiVaiz5v44anOkDfbtlZGRX3EFlzFQApjSj5Nw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.crl
rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t88LJwp_2x1xeui5edHuD_iL1E8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 08:51:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B50D, serialNumber=B7CF0B270A7FDB1D717AE8B979D1EE0FF88BD44F
Validity
Not Before: Oct 19 08:51:59 2025 GMT
Not After : Oct 26 08:51:59 2025 GMT
Subject: CN=68f4a6af-7fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a3:b7:1d:cd:78:1e:4f:dd:96:83:ef:51:0d:
95:7c:d6:7d:e5:e3:5c:5a:90:3f:96:cd:43:d6:24:
ac:bb:00:82:8b:d2:ad:e6:cd:a5:16:9f:01:1d:ce:
99:55:c5:46:f7:de:33:80:5e:21:a2:02:ed:b8:cd:
1f:27:fa:87:f2:d8:e5:4a:0f:5a:78:30:26:8c:b9:
f6:09:9a:a3:14:a7:dd:17:02:1d:5c:27:78:f2:77:
d2:40:d1:be:8c:80:ac:f6:b7:81:e3:78:3d:d4:bb:
f6:ca:0e:8f:65:eb:72:09:f1:8e:f0:bf:28:5d:33:
50:8a:ec:65:e5:d9:e5:a3:a5:df:b1:63:90:f2:2f:
7e:dd:30:ee:3a:50:10:a0:2a:95:58:19:13:f1:bb:
fc:43:71:38:69:13:a8:61:45:6a:2b:bb:fa:00:eb:
08:c0:82:95:7a:a9:91:eb:c6:df:d8:9c:cd:5f:11:
d4:9d:73:ff:89:39:6b:82:88:7c:f2:b9:e3:62:b6:
be:e3:67:29:d5:51:b4:5c:5b:39:5a:b5:25:74:18:
36:0e:36:a4:bc:87:10:ce:62:22:e5:fc:5f:a2:cd:
6b:fa:00:79:23:4c:d9:a8:8b:31:b4:ef:f1:b7:9c:
3a:99:b5:2f:b4:73:a1:1d:68:59:76:de:82:79:e5:
e9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6F:15:86:01:A4:D9:F9:C0:63:00:19:F2:0D:18:B0:AB:C9:27:40
X509v3 Authority Key Identifier:
keyid:B7:CF:0B:27:0A:7F:DB:1D:71:7A:E8:B9:79:D1:EE:0F:F8:8B:D4:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t88LJwp_2x1xeui5edHuD_iL1E8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:c4:44:b8:c0:07:57:3f:f1:da:23:67:fa:ea:03:db:3d:72:
4f:cb:0f:62:b2:cc:62:a1:79:b1:ea:08:e7:82:76:89:07:34:
42:39:ec:ab:fb:d4:18:b9:ae:af:c0:4e:f6:9b:1a:84:d6:cf:
ac:ca:2e:4b:9a:cd:c3:79:36:b4:78:f9:3c:75:97:6b:c8:b1:
df:6a:f0:8f:7c:f8:7f:8f:a3:ac:15:bb:47:38:bb:84:2c:19:
1f:8d:90:86:7a:f2:1d:47:90:1e:46:b4:47:e4:1a:5e:ce:8c:
f1:95:81:96:c4:60:18:72:fe:cc:dd:b6:5c:25:ee:0c:18:75:
3d:02:b5:b0:11:5c:e5:32:4e:91:19:bb:ec:cc:15:15:a7:c0:
42:b2:89:18:87:25:21:dc:2f:19:1f:2f:16:2a:7a:15:ce:b6:
b5:28:ac:70:42:c4:ad:57:49:1f:97:7d:d5:23:1d:3e:08:2d:
45:17:82:23:a3:7d:85:f1:0c:3f:23:31:d2:0d:18:64:6c:52:
f6:72:f1:3d:60:53:9d:50:8e:8b:37:27:9e:51:21:72:c6:47:
d2:49:ed:4a:cc:23:23:d4:03:53:2a:3a:8e:f7:d5:f8:c3:9a:
b6:6a:5f:d4:ee:bd:5c:4f:21:5a:1e:57:65:7b:a9:87:51:aa:
03:c1:ea:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:36:40 2025 by rpki-client