
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
File: tSxU1GporezDfV9vJyKMbepz6Fw.mft (raw, json)
Hash identifier: IywyZdq8gS3XE4kjfS/KPb2bbCF0LhAd56cdQKjt6hA=
Subject key identifier: E0:01:52:16:67:EC:78:7D:AB:AD:DC:73:AA:31:27:64:1F:F3:27:15
Authority key identifier: B5:2C:54:D4:6A:68:AD:EC:C3:7D:5F:6F:27:22:8C:6D:EA:73:E8:5C
Certificate issuer: /CN=A918E79C/serialNumber=B52C54D46A68ADECC37D5F6F27228C6DEA73E85C
Certificate serial: 0142
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
Manifest number: 0140
Signing time: Sun 19 Oct 2025 07:09:39 +0000
Manifest this update: Sun 19 Oct 2025 07:09:38 +0000
Manifest next update: Sun 26 Oct 2025 07:09:38 +0000
Files and hashes: 1: tSxU1GporezDfV9vJyKMbepz6Fw.crl (hash: F9yZ+d209mLmvojP0Rsd3THAPc6EgSTge2hMNLGzBVc=)
2: 28C6AB84C0E411EEAFFB100BC4F9AE02.roa (hash: V4rJ9+KQ3AK8oq6Dx/jnK6Kq8OonvPFz54Mtrt4dysM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.crl
rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 07:09:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322 (0x142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E79C, serialNumber=B52C54D46A68ADECC37D5F6F27228C6DEA73E85C
Validity
Not Before: Oct 19 07:09:38 2025 GMT
Not After : Oct 26 07:09:38 2025 GMT
Subject: CN=68f48eb2-cb3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:ff:de:9a:76:7f:76:a9:f3:a8:2d:c1:1a:
98:de:91:fa:96:5a:dc:8c:09:2c:18:fb:e5:16:a8:
31:8d:69:d5:89:86:bd:5e:c1:ea:1c:5b:59:d6:78:
6f:aa:76:e7:58:e5:8c:8d:22:ab:06:70:eb:ce:9a:
54:e3:5a:4e:d3:6c:b6:6b:cb:d5:14:db:01:e4:93:
07:bd:de:69:8d:15:d3:5c:a5:80:2d:72:bb:cb:13:
cd:b0:12:47:b5:20:96:45:29:dc:52:10:5a:b7:fe:
76:78:0b:ac:16:45:3b:d1:53:d3:60:7c:f4:7d:f1:
7d:22:6f:c7:38:a1:b6:02:8a:00:34:eb:2b:5b:c0:
8c:60:83:43:ef:9c:8e:2a:9e:2b:f7:4e:66:6a:3c:
06:5f:61:43:27:89:6d:a8:0c:8a:16:31:92:da:5a:
38:36:99:ad:0e:7f:c4:9d:cf:1a:a8:5b:b8:69:38:
c7:27:35:81:01:b6:14:ce:28:2b:ce:6f:12:2c:d2:
16:90:fc:9c:41:62:99:3d:cf:93:83:12:ed:d5:60:
f6:21:c6:22:f9:7b:82:eb:08:99:4f:58:ce:8c:85:
01:8d:a3:4c:ed:24:59:a9:7d:86:cd:6a:8e:65:95:
c8:82:13:88:8e:49:67:50:28:d5:57:ae:bf:a6:7f:
8c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:01:52:16:67:EC:78:7D:AB:AD:DC:73:AA:31:27:64:1F:F3:27:15
X509v3 Authority Key Identifier:
keyid:B5:2C:54:D4:6A:68:AD:EC:C3:7D:5F:6F:27:22:8C:6D:EA:73:E8:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f7:3f:41:f0:ad:bf:92:cb:ad:5d:cc:22:de:39:e0:6d:fe:
41:9d:6c:13:3b:bb:32:f6:41:e4:22:f2:90:5d:09:24:84:c8:
0d:0e:42:af:e0:c7:7f:67:68:94:00:25:08:56:c1:98:ec:e1:
96:56:11:8e:7d:11:a9:60:7f:6a:6c:ae:e0:9c:fa:b3:73:09:
ae:3a:23:00:8f:eb:0d:ee:65:74:5a:34:3d:8b:d6:c9:9a:06:
d6:cc:40:d7:8c:be:9f:83:62:9c:2e:05:95:d2:1a:ee:6e:cc:
8e:ab:4e:9f:87:ff:9e:d5:e7:4e:db:ac:9b:12:52:2a:5c:28:
2e:72:e8:d7:9b:08:5e:7e:24:57:1f:38:e2:9b:05:36:08:2c:
6f:a8:84:12:c8:2b:0b:a6:6c:b6:52:fc:1a:8e:86:65:90:25:
a2:b7:96:1d:ce:cd:5c:8d:b7:69:ec:61:4e:ce:91:de:3b:97:
86:c4:af:0a:0b:40:ef:b9:61:b6:5b:63:d2:83:7c:9e:65:66:
a8:7d:f9:b8:ab:b9:16:1a:b2:28:b7:65:57:ff:00:fe:0a:ea:
2a:a4:73:a7:cf:41:58:bd:9b:5f:8d:98:04:f1:b7:8c:e6:33:
ab:04:1d:df:7f:9a:04:13:df:e5:f5:29:ef:f7:68:41:6a:a3:
b0:6d:66:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:01:14 2025 by rpki-client