
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
File: uH-tZU7EIXxlANDwaxm-MZ09rfc.mft (raw, json)
Hash identifier: nXFRO680GQvrJN+fObFyJzeLOxq3bl99Tf47hqJbJ2M=
Subject key identifier: 69:65:5E:BA:38:99:75:F7:9B:5D:F5:30:7E:16:5A:0C:91:09:97:31
Authority key identifier: B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7
Certificate issuer: /CN=A9155725/serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
Manifest number: 7B
Signing time: Mon 17 Nov 2025 04:29:24 +0000
Manifest this update: Mon 17 Nov 2025 04:29:23 +0000
Manifest next update: Mon 24 Nov 2025 04:29:23 +0000
Files and hashes: 1: uH-tZU7EIXxlANDwaxm-MZ09rfc.crl (hash: ycfdrlayg9FuA1ycT4vvphZzNGrvAqxPlogGc4u0MUU=)
2: 7621BEA0084611F08BEB2E2DC4F9AE02.roa (hash: aySEvRngppKs/Lyekhtc0uzM27zK/l0cRA6UmOeIzlU=)
3: 753F0588084611F08BEB2E2DC4F9AE02.roa (hash: v1ibDjxmzIv2LQG97YVedEX5wevRpNJDRuNHyDfGpBg=)
4: 75A4B2D4084611F08BEB2E2DC4F9AE02.roa (hash: JronbENc2C4chw8Lr5GoQXHOGuejfoIjiKRSNDdiR4Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl
rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 24 Nov 2025 04:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155725, serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7
Validity
Not Before: Nov 17 04:29:23 2025 GMT
Not After : Nov 24 04:29:23 2025 GMT
Subject: CN=691aa4a3-4234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:97:03:0a:5f:37:6b:83:e7:d2:18:a1:c5:77:
6a:06:52:0e:44:a2:61:ac:7a:8c:97:01:fb:fc:ed:
7f:af:05:2f:01:b6:24:34:89:1f:cc:2d:8e:2b:de:
c1:0c:79:4e:0e:2d:d1:91:2e:6b:3f:cf:4c:f0:ef:
66:96:10:03:38:40:0b:ee:6d:7c:b3:6b:2e:ed:c4:
3a:60:04:a2:77:99:15:4e:94:10:25:06:8d:2a:82:
16:2c:c6:0c:f7:02:5a:17:e6:f0:95:fb:ad:d4:37:
5e:59:7e:22:dc:47:89:bb:81:9a:54:7e:f4:52:d0:
fc:48:ef:9e:f2:2f:7a:85:48:12:8b:4f:4f:84:a3:
61:46:8b:11:5b:65:38:23:21:66:21:f8:80:d2:91:
75:28:e2:51:b6:a9:ad:57:08:7b:c2:b6:ce:bc:d4:
75:22:90:23:f0:cf:d0:25:4d:d9:d0:7c:87:d1:a3:
88:c8:d5:1e:73:87:77:c9:cf:d4:f3:35:8c:e3:35:
d7:8c:9c:8e:97:49:e7:0c:2c:87:66:71:38:ce:aa:
1e:b0:c3:d2:4e:27:1a:28:63:6c:88:fe:16:da:57:
5b:31:11:c3:8d:97:77:2f:b4:f3:14:ae:20:32:31:
aa:72:b6:6b:da:47:79:bc:bc:e0:7f:c2:67:ac:38:
6b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:65:5E:BA:38:99:75:F7:9B:5D:F5:30:7E:16:5A:0C:91:09:97:31
X509v3 Authority Key Identifier:
keyid:B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2a:18:49:d2:1a:47:2f:d3:1b:32:42:c3:de:ec:d5:b0:ff:
b2:d9:ad:d3:98:f7:f7:00:8d:99:c7:37:e1:f7:6f:23:27:f1:
59:b2:ff:37:08:d4:98:a3:bd:e2:71:36:89:fe:75:f8:a9:69:
69:fe:f2:b6:9c:a5:a4:e9:0d:93:16:a7:b9:3d:b4:5b:97:05:
52:99:6d:5f:3f:1c:34:54:fc:af:75:89:32:a5:c4:ec:b9:ec:
33:4e:43:41:82:ad:b6:53:23:f0:e5:61:c0:07:69:ce:60:d0:
3f:bf:5f:ac:99:0b:52:20:98:7d:d4:1b:78:8d:46:8c:48:24:
45:e9:db:df:83:31:e6:69:26:a6:c9:b5:ea:b3:06:25:24:f8:
b7:54:a8:06:6f:a3:53:91:f3:a5:e5:20:ad:e1:6b:e0:be:a3:
db:65:8f:d5:1f:ff:30:89:49:e2:78:5c:a3:d4:94:6a:4a:d4:
44:96:97:5f:ee:7e:4b:c2:65:39:e2:1b:f6:2a:11:f0:df:ff:
98:fb:51:58:70:5d:b2:81:79:9c:34:b5:de:79:84:8b:74:2d:
2a:cb:28:c2:be:8d:45:34:7e:c9:3c:de:a8:e8:c9:56:5a:f2:
cf:de:99:5c:05:0b:f4:02:b3:86:97:a8:37:02:30:7d:88:e5:
ba:fb:30:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 07:02:50 2025 by rpki-client