
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
File: 125W2VTMXAD-XW6t2N9QJypb3yk.mft (raw, json)
Hash identifier: j9siVQkDsUC5gGR5qx0l+gZ1b45brHOckCgb2o1RjAU=
Subject key identifier: 15:20:E9:D5:85:9F:8E:F4:21:2F:88:6C:19:DC:85:8E:DF:E3:AD:E3
Authority key identifier: D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29
Certificate issuer: /CN=A91ADB41/serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
Certificate serial: 07E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
Manifest number: 07E9
Signing time: Sat 18 Oct 2025 22:15:26 +0000
Manifest this update: Sat 18 Oct 2025 22:15:25 +0000
Manifest next update: Sat 25 Oct 2025 22:15:25 +0000
Files and hashes: 1: 125W2VTMXAD-XW6t2N9QJypb3yk.crl (hash: iZE1RGMHdZkMvr6D6L/UcGhkAyAe1Lm6AQLpZse3KAM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl
rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 22:15:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2025 (0x7e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADB41, serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
Validity
Not Before: Oct 18 22:15:25 2025 GMT
Not After : Oct 25 22:15:25 2025 GMT
Subject: CN=68f4117d-858b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:4c:2d:bd:16:21:9d:91:d3:63:25:42:1e:
53:e2:33:99:da:2f:c7:40:d0:38:ab:ba:4a:88:7e:
42:60:34:60:7a:10:cb:26:f1:fd:72:c9:5f:5d:60:
e5:c3:22:d0:30:e3:0a:84:a7:0b:dd:e5:2d:a7:26:
7a:f2:a2:32:ca:a0:af:67:07:3a:14:b4:30:ca:9a:
6a:95:29:c8:c7:0c:ab:eb:33:39:46:c6:7f:1c:ff:
9f:a5:39:c6:00:0c:d4:b0:3e:02:18:b1:d4:5b:45:
2f:d7:43:1e:43:07:78:d4:ee:ef:86:c4:fc:95:21:
3b:84:88:c4:30:b5:f0:a5:28:78:5c:e3:4b:6a:11:
45:da:35:97:37:fa:07:ba:b8:a1:ea:d3:f4:ba:86:
2d:b8:2f:8e:72:b4:34:fb:54:b7:43:0d:ff:0a:b8:
df:67:84:83:ad:74:4a:48:82:f7:48:04:c4:bf:86:
d6:b0:6c:47:d3:a1:c8:55:c1:9e:a4:ce:cc:3c:97:
e7:15:14:7b:64:08:2e:75:06:3a:74:e7:95:24:03:
75:21:e8:65:2a:a9:06:1b:1d:fa:17:55:52:3f:e7:
c6:2c:a5:04:57:9f:c3:67:67:cb:97:16:a0:57:ca:
56:f9:0a:d7:21:8f:93:a1:33:50:39:f8:4f:cf:40:
53:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:20:E9:D5:85:9F:8E:F4:21:2F:88:6C:19:DC:85:8E:DF:E3:AD:E3
X509v3 Authority Key Identifier:
keyid:D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:f9:e6:b1:b2:76:58:d8:1c:ab:5c:9e:b1:82:c3:d0:ef:cb:
8d:19:4c:dc:ca:1a:e8:d0:df:78:bc:56:6c:93:dc:aa:94:ff:
e1:a0:06:ab:96:11:79:cb:39:e7:83:5e:e0:2b:9e:23:ef:c6:
96:a6:be:b1:16:bf:94:80:25:42:58:3b:78:be:22:3b:31:aa:
91:e9:6f:64:41:58:2d:3e:40:ab:8e:55:2a:2f:61:c9:8d:eb:
f2:4f:e8:53:e8:ec:a7:a2:8f:78:43:92:6a:64:c6:ea:6e:9f:
89:87:c4:51:92:0b:0b:28:cd:6b:b5:2a:13:80:5d:16:f3:d3:
b1:56:a8:44:22:cb:09:60:cb:3c:dc:d7:96:b1:2f:26:72:94:
81:05:7b:e3:70:9e:b2:da:0a:b4:3e:4e:8c:e3:b1:70:8a:33:
2e:c6:5c:fc:98:ab:ca:22:e7:fd:54:c2:b7:c8:5f:0f:b9:f6:
bc:91:f9:3e:e0:3b:42:09:46:19:42:66:04:df:ad:f7:d3:76:
b1:68:ac:eb:98:87:e9:aa:80:25:31:30:63:7a:c8:5e:b4:c2:
f7:2f:c1:c1:4e:bc:e1:e5:78:2b:92:ca:8b:f6:43:7c:b7:f6:
f7:b9:88:f2:b5:45:d0:43:e2:40:f2:11:69:43:ab:ae:72:10:
ff:a1:90:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:26:38 2025 by rpki-client