
$ rpki-client -vvf rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft
File: ux3tVEsnoTcZtI-wA3PNSeDehRc.mft (raw, json)
Hash identifier: pS+e0gLTuf/zPsQ/3k27aG2UM/58Kky4wDWvL5CT/cM=
Subject key identifier: 9E:0A:43:C9:58:47:88:81:74:26:E6:56:A9:7F:58:5B:B5:23:20:67
Authority key identifier: BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17
Certificate issuer: /CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517
Certificate serial: 0910
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft
Manifest number: 0904
Signing time: Sat 18 Oct 2025 21:25:40 +0000
Manifest this update: Sat 18 Oct 2025 21:25:39 +0000
Manifest next update: Sat 25 Oct 2025 21:25:39 +0000
Files and hashes: 1: ux3tVEsnoTcZtI-wA3PNSeDehRc.crl (hash: CsrXo/cpu3/H6eruYrJlVx1rP6zuxN3xgc5r3ITYz8Y=)
2: 2B7215E2B54B11EA85EE266DC4F9AE02.roa (hash: HHCFckY7O591LILqzlA5i+TVYe0u7mT2Ya4XZsY3L5w=)
3: 2A7A051EB54B11EA85EE266DC4F9AE02.roa (hash: vv1GYbA2AyqRD7ZSBeebG8Ws0r4NHNq0J0Vkh/R0ypw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl
rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 21:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2320 (0x910)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919123C, serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517
Validity
Not Before: Oct 18 21:25:39 2025 GMT
Not After : Oct 25 21:25:39 2025 GMT
Subject: CN=68f405d3-3053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:98:fb:b6:13:b0:23:2f:12:fc:86:f4:9d:
ae:8b:44:83:14:90:a9:c0:3d:95:a4:ae:3d:9f:ca:
39:3a:af:ed:f8:e3:59:69:b8:c2:aa:b3:55:58:de:
bb:5c:0a:50:be:40:0f:f7:71:a7:a9:da:f0:63:f3:
fe:45:69:00:c4:cd:c1:84:06:48:ef:fb:f6:9a:70:
8c:eb:6f:0e:b9:85:2e:72:e8:be:3b:68:99:bf:2d:
13:c4:04:31:a6:3c:03:b3:3b:ab:54:5a:ec:79:c3:
71:0b:57:da:ac:52:4a:15:10:8a:fc:4c:cf:d4:38:
c8:fc:83:48:c5:29:2f:37:9c:e5:29:03:60:5e:91:
50:08:ae:ce:23:6f:73:1f:a0:11:e2:9c:77:46:18:
09:e0:22:2e:bd:09:9d:b4:eb:40:57:0d:76:c1:90:
a7:91:0d:cb:83:d4:3a:9c:04:c5:2f:c5:49:b8:41:
47:9a:b1:69:52:dc:7b:6a:7c:2a:8d:b2:b0:40:bb:
bc:a5:eb:86:b4:ec:22:c1:43:f5:ed:f3:fb:8c:4f:
03:4d:37:ea:79:d7:c9:55:90:8c:cb:ba:55:8a:6c:
a6:42:2c:55:9d:3d:0d:98:88:0b:7f:8d:82:99:d3:
65:9b:93:09:d2:9a:5e:47:f4:6d:f1:24:d5:62:76:
1d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0A:43:C9:58:47:88:81:74:26:E6:56:A9:7F:58:5B:B5:23:20:67
X509v3 Authority Key Identifier:
keyid:BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:88:34:aa:dc:62:0f:72:f9:81:61:bc:d5:ec:6a:c5:8d:a2:
05:ec:1f:4c:f7:15:09:58:a7:62:06:a8:2b:c9:6e:fa:07:8a:
eb:53:cd:94:10:87:a3:13:46:a1:80:bd:f0:4f:80:65:d7:1c:
b2:97:47:b3:c5:a3:02:67:13:ec:a3:32:23:c9:27:07:2a:83:
ba:7f:14:5a:89:1d:0e:cd:2a:47:a2:93:a5:72:42:58:47:7c:
fa:46:73:3c:36:c8:68:7a:ec:11:7d:da:22:95:26:67:81:df:
bb:cc:18:d8:1d:21:e1:37:56:96:a7:b4:1f:11:7f:3d:6e:02:
69:ca:85:02:4c:ff:c6:19:9b:41:7d:cc:83:d6:bd:41:66:60:
4c:fc:eb:3f:af:93:f9:16:66:29:a9:36:45:9e:b9:ac:e5:5b:
9d:2c:a0:2b:21:7a:d9:3a:72:c2:82:72:c4:48:5d:db:b8:d0:
e1:d1:0b:24:1c:ba:f2:d9:90:19:90:41:97:41:f9:14:b3:48:
ed:0a:22:59:76:ef:5d:7a:8d:49:7e:41:ba:25:20:33:f8:7a:
7b:e5:a9:38:a8:93:51:84:b8:07:28:1e:b3:cf:32:1b:c9:97:
ce:c0:39:7e:3b:a5:4d:2a:e9:86:6e:94:ad:f0:8d:ff:39:13:
2f:81:be:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:26:25 2025 by rpki-client