
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.mft
File: u-ULDcHkp69YCVjW19dBR67ZDG4.mft (raw, json)
Hash identifier: 4as4gFyxvkvOuaY+kzvbsPuNW2LCefiS8XU69cn3gvE=
Subject key identifier: 5D:55:1D:C0:09:AF:00:CB:91:18:4E:40:C4:E1:07:A8:A9:28:E7:A1
Authority key identifier: BB:E5:0B:0D:C1:E4:A7:AF:58:09:58:D6:D7:D7:41:47:AE:D9:0C:6E
Certificate issuer: /CN=A9130626/serialNumber=BBE50B0DC1E4A7AF580958D6D7D74147AED90C6E
Certificate serial: 0E4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-ULDcHkp69YCVjW19dBR67ZDG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.mft
Manifest number: 17F0
Signing time: Tue 04 Nov 2025 17:52:18 +0000
Manifest this update: Tue 04 Nov 2025 17:52:17 +0000
Manifest next update: Tue 11 Nov 2025 17:52:17 +0000
Files and hashes: 1: u-ULDcHkp69YCVjW19dBR67ZDG4.crl (hash: 1M37/6EsQy3BV9pwU6mM2z9t/y4ZBzMkxcnhmUelmdM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.crl
rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-ULDcHkp69YCVjW19dBR67ZDG4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 17:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3658 (0xe4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130626, serialNumber=BBE50B0DC1E4A7AF580958D6D7D74147AED90C6E
Validity
Not Before: Nov 4 17:52:17 2025 GMT
Not After : Nov 11 17:52:17 2025 GMT
Subject: CN=690a3d51-8d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e0:c7:a2:ee:1a:c7:da:a5:ba:c6:fc:6f:9f:
5a:01:08:03:17:78:d9:5d:7e:35:b4:c4:2f:12:18:
1d:3d:0c:84:de:ac:3b:28:41:5a:50:8f:1a:67:db:
9d:f4:0a:4f:21:43:04:74:31:86:68:9d:ff:c5:53:
2d:4e:7f:59:7e:dc:9b:f0:3d:1c:be:41:8f:99:bf:
d7:fa:70:10:02:aa:99:9d:ed:ac:6c:7e:e8:de:4c:
62:1e:57:0a:3f:67:37:e2:c0:02:60:4e:07:61:1b:
7b:2f:fb:8e:a7:68:ee:de:ee:68:7f:f8:2d:b6:6a:
dd:86:83:af:39:a8:b3:67:e7:8b:be:91:c7:8c:4a:
3d:e6:66:9a:7a:18:c3:31:4e:ec:31:78:40:8f:e5:
a1:15:87:6f:a9:c0:50:17:f9:60:a6:5e:16:27:02:
91:bf:70:39:be:2a:c5:d7:31:3d:6b:e5:ac:c7:a4:
eb:91:f1:8c:0d:2e:ad:19:87:0d:de:6d:e6:c8:5e:
5d:2d:b2:a3:61:8b:28:9c:b5:79:85:5b:e4:7c:b1:
ec:de:f4:01:16:3a:eb:02:ba:8b:a8:43:51:c3:6a:
e8:cb:9a:e2:13:cf:78:34:6d:47:a7:df:7a:18:cd:
7a:69:49:1c:33:de:d9:f0:39:8c:9e:c9:3d:f3:97:
54:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:55:1D:C0:09:AF:00:CB:91:18:4E:40:C4:E1:07:A8:A9:28:E7:A1
X509v3 Authority Key Identifier:
keyid:BB:E5:0B:0D:C1:E4:A7:AF:58:09:58:D6:D7:D7:41:47:AE:D9:0C:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-ULDcHkp69YCVjW19dBR67ZDG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:05:e7:60:04:37:ae:cb:5e:1b:5e:2d:9c:94:c5:9d:bf:8f:
86:00:cd:ab:43:d4:38:a9:ba:1e:18:f2:56:d4:68:2b:0b:79:
63:4d:d0:86:17:c7:b3:ec:91:c8:b9:9d:e7:c2:8f:04:32:32:
8a:71:57:d6:d9:9c:24:14:bc:74:f0:ed:01:ef:08:c2:32:35:
e5:d5:0b:db:e8:a9:73:3c:e7:d5:69:5c:58:b3:3d:96:88:c1:
e7:00:d0:f8:5f:24:5d:81:a8:55:c4:a3:41:4d:ce:14:e3:bd:
22:e7:90:55:ea:a8:27:f9:8a:4f:6e:ca:6d:2c:c3:93:5c:ec:
15:60:eb:ba:08:75:cc:86:ed:ef:ff:2c:d3:89:d6:fb:0c:9f:
02:64:5e:2d:b4:70:e3:00:98:d2:3b:6a:70:c8:89:05:05:d5:
a4:21:65:ed:d8:49:2c:4a:7e:48:3b:8e:00:7c:1a:f0:f8:9a:
f8:31:63:82:47:1c:33:84:bc:06:b8:c9:c5:b5:28:60:8f:ed:
c7:c8:b8:42:92:6e:df:82:a1:36:31:84:a6:ff:b1:8f:5f:e0:
6c:fd:a9:a6:da:9a:83:8e:12:55:9f:32:ad:2c:85:11:bc:20:
39:95:35:35:e9:14:e7:0a:72:d4:18:ac:fb:14:2c:41:e2:55:
4b:bb:0e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:07:32 2025 by rpki-client