
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.mft
File: uDJLQvvF8hOdeQHkF94hA5slJdw.mft (raw, json)
Hash identifier: FyUuaog5ToU1vWXMTAOWpQtt+um2H7v14uARDkLyrNI=
Subject key identifier: FF:41:22:CC:E8:1D:82:7B:80:0C:A2:DE:83:49:3F:7F:22:26:97:D8
Authority key identifier: B8:32:4B:42:FB:C5:F2:13:9D:79:01:E4:17:DE:21:03:9B:25:25:DC
Certificate issuer: /CN=A913AFD2/serialNumber=B8324B42FBC5F2139D7901E417DE21039B2525DC
Certificate serial: 0724
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDJLQvvF8hOdeQHkF94hA5slJdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.mft
Manifest number: 071D
Signing time: Sun 02 Nov 2025 21:48:45 +0000
Manifest this update: Sun 02 Nov 2025 21:48:45 +0000
Manifest next update: Sun 09 Nov 2025 21:48:45 +0000
Files and hashes: 1: uDJLQvvF8hOdeQHkF94hA5slJdw.crl (hash: ZlbMpMs/wo7W6vYgfXYfYrYEQrOcBIv5mr/OdGfMg94=)
2: A74A1698590A11EB9ECF402AC4F9AE02.roa (hash: 4eRzOG2I//7TY5ChgdSvpUtnnyrP9LtDGhTYUfmfKh0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.crl
rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDJLQvvF8hOdeQHkF94hA5slJdw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1828 (0x724)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AFD2, serialNumber=B8324B42FBC5F2139D7901E417DE21039B2525DC
Validity
Not Before: Nov 2 21:48:45 2025 GMT
Not After : Nov 9 21:48:45 2025 GMT
Subject: CN=6907d1bd-d16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:68:66:4d:ed:a0:41:37:f3:d0:88:85:61:
d4:92:47:ee:63:02:fe:4d:55:24:a4:44:12:7d:f7:
2f:46:02:15:38:e7:52:a6:6e:8f:50:9f:14:c9:bd:
0a:1d:90:3d:54:46:a8:79:01:27:f5:e1:5f:33:91:
f2:7f:f3:6b:0e:63:70:9e:80:11:10:43:d9:b5:d2:
74:06:dc:5d:fe:13:9c:5a:ea:bd:b1:56:dd:58:de:
a6:d2:cf:6a:2e:76:47:32:2f:69:51:ff:0e:fe:f0:
42:bc:68:46:6e:2a:39:28:37:be:53:21:c9:48:d1:
58:1e:00:a8:94:93:e7:df:78:66:fe:0b:ea:04:27:
88:2f:9c:c7:fb:b0:66:15:42:20:38:af:7c:8b:d1:
5e:ea:6e:d8:96:8b:9b:b0:45:2d:9e:84:70:d3:36:
51:fa:e7:dc:f6:98:17:42:44:8f:e4:31:c4:ee:ae:
30:8c:e9:33:4d:0d:6f:73:d0:e2:6e:3b:15:7e:47:
6a:cc:d1:1f:35:b2:71:75:54:2e:e5:f1:c4:a8:6a:
2f:da:0f:49:42:d6:c8:de:00:27:e6:c2:48:18:33:
12:e6:4e:0b:19:f1:b1:cc:ae:ab:88:8e:b0:be:71:
81:6f:71:7b:4e:e1:63:17:e6:e7:36:8c:43:99:df:
ea:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:41:22:CC:E8:1D:82:7B:80:0C:A2:DE:83:49:3F:7F:22:26:97:D8
X509v3 Authority Key Identifier:
keyid:B8:32:4B:42:FB:C5:F2:13:9D:79:01:E4:17:DE:21:03:9B:25:25:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDJLQvvF8hOdeQHkF94hA5slJdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f1:79:4c:fa:ae:04:d5:9f:6d:2d:1e:8a:04:64:fd:ab:fe:
69:a3:51:86:e0:ca:51:c3:37:44:93:cd:bc:f7:11:27:39:d2:
2f:c2:1b:77:59:42:6e:e5:5a:5a:4d:82:14:de:0a:98:51:31:
8f:4f:2b:21:42:2d:3f:92:6c:ba:13:8d:bc:29:00:3a:f6:b3:
f5:1b:2b:5e:a7:14:1d:e0:86:ee:a7:ec:35:8f:db:0c:5b:70:
ec:d6:b7:c3:d0:30:e9:05:7a:c1:0f:30:48:f1:72:9e:6c:b6:
32:7e:53:b7:45:a9:4b:22:9d:9e:af:46:7b:26:4d:73:90:65:
89:0a:bc:4a:0a:f6:00:02:a2:6c:e5:b7:9e:48:05:36:8e:04:
10:1c:78:19:d1:f3:48:71:3d:03:d7:4c:46:8e:cb:03:c1:be:
90:14:1b:eb:43:a3:bb:c9:0c:7f:c8:db:aa:16:d7:cd:0f:5e:
65:88:6a:b0:3b:ba:97:14:c6:f6:8b:0f:d2:51:c2:c9:1b:fa:
9e:9c:a0:49:8e:69:3d:f0:63:d8:e8:b9:3f:f4:a8:5e:6d:e9:
98:d0:f0:59:81:70:5d:c4:3b:7d:91:88:a7:31:52:8b:48:45:
8e:d5:44:7a:b7:2e:e7:74:8f:bd:0d:f8:4d:81:ee:79:4a:2c:
08:e0:8d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:41 2025 by rpki-client