
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.mft
File: dzzFL61HXymuNv14yBJ3Et_SFUI.mft (raw, json)
Hash identifier: 1OJzLmoVKwFXL7cUt8ftVWwqlUK7fee7BGgAdYozmA0=
Subject key identifier: 04:6A:B3:B4:29:18:F2:67:71:C8:EB:E2:8A:B7:90:18:AC:2D:84:45
Authority key identifier: 77:3C:C5:2F:AD:47:5F:29:AE:36:FD:78:C8:12:77:12:DF:D2:15:42
Certificate issuer: /CN=A9125864/serialNumber=773CC52FAD475F29AE36FD78C8127712DFD21542
Certificate serial: 1F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dzzFL61HXymuNv14yBJ3Et_SFUI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.mft
Manifest number: 1F
Signing time: Tue 03 Mar 2026 08:31:41 +0000
Manifest this update: Tue 03 Mar 2026 08:31:40 +0000
Manifest next update: Tue 10 Mar 2026 08:31:40 +0000
Files and hashes: 1: dzzFL61HXymuNv14yBJ3Et_SFUI.crl (hash: 8zj57vicOkbxXlsTAfNGE3Sy+R5JXL10t2VePBYpHvs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.crl
rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dzzFL61HXymuNv14yBJ3Et_SFUI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125864, serialNumber=773CC52FAD475F29AE36FD78C8127712DFD21542
Validity
Not Before: Mar 3 08:31:40 2026 GMT
Not After : Mar 10 08:31:40 2026 GMT
Subject: CN=69a69c6d-83a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:01:88:a2:a8:9d:3c:9c:6b:7f:1c:50:76:e5:
ca:8f:24:db:28:2e:53:a9:68:1c:e8:0e:40:e5:42:
3e:6f:3e:25:c6:5a:97:4b:88:d3:5e:8c:bc:f1:8d:
26:46:4f:30:a0:6f:50:d0:52:e4:13:86:61:ae:db:
72:f7:4e:74:30:eb:1e:c3:90:82:ab:7d:0c:25:b2:
4f:ed:86:a8:44:af:1f:a5:ca:92:af:b5:2c:7d:19:
dd:ec:cc:bf:ae:c1:60:17:64:05:33:32:a7:90:36:
dc:71:37:97:b6:da:58:28:5f:e8:f7:0c:c9:05:f9:
5a:b8:3d:44:35:5f:92:65:ab:a4:16:9a:03:58:2e:
cb:24:56:73:6b:0e:16:bb:e9:e7:01:be:06:07:8b:
dd:6a:d0:8b:a3:36:29:c9:a8:52:c3:72:84:8f:82:
8c:bd:22:8e:3f:bf:49:73:6d:e2:d6:de:56:83:a5:
03:cb:75:76:b2:c9:ec:17:21:ea:1c:36:49:85:49:
8e:71:1c:48:77:b1:db:c1:dd:78:c2:e8:ba:c7:0b:
5f:f1:2d:ae:96:9e:d2:0e:cc:0b:5f:0b:9c:c7:04:
f3:82:77:41:a0:39:83:bf:4d:e2:00:a1:5b:30:54:
97:ee:f4:67:23:d0:a4:94:7a:c8:58:58:a9:f9:55:
88:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6A:B3:B4:29:18:F2:67:71:C8:EB:E2:8A:B7:90:18:AC:2D:84:45
X509v3 Authority Key Identifier:
keyid:77:3C:C5:2F:AD:47:5F:29:AE:36:FD:78:C8:12:77:12:DF:D2:15:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dzzFL61HXymuNv14yBJ3Et_SFUI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:79:5b:b4:18:ac:ff:ce:b5:b4:8a:e0:22:d4:9e:a1:89:cf:
8e:48:4e:da:19:1a:ca:37:ea:bf:50:bd:9e:3b:13:b9:95:79:
0c:f4:08:b6:d9:53:24:b1:0b:53:a8:e5:5e:6b:66:81:40:e9:
7f:59:40:7f:2f:81:6b:11:a8:af:77:a6:7d:bc:ad:ca:34:c4:
b2:a2:2b:9f:ed:04:4e:61:28:fa:22:66:d8:50:ec:92:02:ec:
a8:12:8a:c5:36:38:c9:5b:53:d6:da:cd:54:5a:b1:6a:af:5b:
9e:31:89:30:14:2a:7e:0f:50:96:4a:d3:3c:77:6b:c3:4e:2e:
83:6c:86:d5:b9:c0:a2:36:40:64:56:12:c3:2b:11:01:e4:89:
9c:ea:5c:74:1f:e9:02:7a:f4:67:01:65:f4:61:74:49:1c:22:
15:6e:d1:96:47:67:f0:d9:2f:4b:d2:ed:ac:3c:ad:e4:ca:45:
db:59:2e:f6:5a:74:02:95:0b:b8:0e:f3:19:7c:35:9e:23:3d:
73:e9:59:5b:ed:58:c5:da:12:13:ba:53:a8:55:83:e1:15:86:
8c:dc:2d:cb:48:23:f1:10:01:a4:6d:41:d6:b8:84:aa:4c:a5:
52:9f:3d:85:48:93:4f:c2:4b:f0:df:a2:08:60:93:ae:05:ec:
be:f8:c7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:38:32 2026 by rpki-client