
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
File: mtNJ9FSFO7GJKv72BIwYclgFd2E.mft (raw, json)
Hash identifier: XZ6nby+Wb2M/PxcPLV5zjo7DhEHso8uXF2r7agqGTrY=
Subject key identifier: 43:20:4A:26:8C:95:A2:3A:BE:F8:67:88:CC:73:4C:82:A1:95:51:8C
Authority key identifier: 9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61
Certificate issuer: /CN=A9169591/serialNumber=9AD349F454853BB1892AFEF6048C187258057761
Certificate serial: 0171
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
Manifest number: 016E
Signing time: Wed 05 Nov 2025 04:01:38 +0000
Manifest this update: Wed 05 Nov 2025 04:01:37 +0000
Manifest next update: Wed 12 Nov 2025 04:01:37 +0000
Files and hashes: 1: mtNJ9FSFO7GJKv72BIwYclgFd2E.crl (hash: AQXawJB3/IXLrZlZcCSKf6c/+T0donN6h5RwyzcJLoM=)
2: 448983A8892D11EEB4AA276EC4F9AE02.roa (hash: WCeA5fOBWFOKkLb8P073mp5LsBAsFbEzZHlJDI60+6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl
rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169591, serialNumber=9AD349F454853BB1892AFEF6048C187258057761
Validity
Not Before: Nov 5 04:01:37 2025 GMT
Not After : Nov 12 04:01:37 2025 GMT
Subject: CN=690acc22-a83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:38:b9:f5:32:09:45:30:b9:88:8a:2a:e9:d8:
98:fc:a7:47:13:4b:14:95:9e:d8:43:87:83:53:04:
25:7d:82:3e:15:e6:3a:1a:4f:04:93:fa:c5:6f:16:
c2:4b:9f:3b:bf:3b:2c:4f:c6:51:e2:b3:77:44:98:
38:05:4f:60:ed:93:10:13:4f:f0:8d:fd:fd:31:45:
73:7e:a0:e2:4f:9b:58:d7:78:79:e3:2c:5a:3e:ff:
99:b7:cc:2d:97:98:03:bf:a4:ae:67:4b:c1:be:93:
3b:61:bb:50:53:66:95:41:1d:12:8c:a6:49:7a:4c:
a7:a0:a4:ca:46:f2:a5:c4:10:e0:de:c0:3f:f2:4c:
3a:47:76:02:23:31:93:09:f3:6d:bb:82:61:cd:f6:
6d:de:2c:2a:3a:34:c7:af:e1:9f:8c:0a:8d:59:54:
d1:37:93:30:cd:0f:a3:cf:ff:ec:6e:e6:d8:3d:02:
48:15:f4:39:d0:6f:ad:ec:aa:f8:34:23:92:1a:bb:
db:e9:1f:0b:d2:23:57:8b:59:c4:4e:36:fb:c3:39:
5c:6f:60:cf:d2:4d:2e:c2:87:ee:6c:78:30:c3:3a:
d4:c1:54:51:a0:b1:88:40:a5:bd:06:2c:14:da:8e:
7d:3c:de:a9:76:4f:63:40:34:4a:6a:73:ca:d9:13:
78:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:20:4A:26:8C:95:A2:3A:BE:F8:67:88:CC:73:4C:82:A1:95:51:8C
X509v3 Authority Key Identifier:
keyid:9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8c:d7:fa:3c:64:77:68:db:45:d4:b8:86:f7:da:73:02:5f:
8b:6d:46:45:f9:a1:e6:c8:6f:a0:f5:1b:96:12:79:78:87:2c:
28:47:ab:0b:c8:19:f4:0f:1c:9d:79:9e:d5:84:a4:e3:c8:d1:
bf:91:72:fb:ee:b0:ec:1a:81:fe:fe:3b:62:94:32:21:8f:64:
52:da:e9:d2:87:13:e9:10:b5:a5:5d:33:09:fb:50:e2:ea:6b:
6a:0c:8a:23:81:dd:72:20:92:0d:e9:06:6b:49:1c:cf:95:19:
3b:f6:19:fb:3c:0f:7e:5a:7e:b4:41:13:62:42:d4:a8:c5:39:
87:8e:99:7a:c7:75:4f:98:28:8e:d0:88:d8:fd:03:da:f9:ca:
e8:47:45:f9:01:87:e1:f1:12:85:46:85:ce:ff:a5:c7:a3:c2:
05:08:c5:53:08:e9:ba:51:e0:d4:00:1a:f0:6d:bf:fb:9f:41:
16:83:1d:6f:8f:ae:06:2f:56:6a:b8:13:2e:8f:d5:18:97:fe:
20:a1:50:9d:73:f9:98:cb:2f:f7:bd:ed:fd:cc:df:61:72:e2:
5e:72:09:bc:f0:fd:ae:4e:a8:8a:b8:bb:d6:ef:a6:f6:ee:ad:
fd:4f:55:1f:18:67:30:b0:e2:43:8f:6f:ae:57:8c:19:22:08:
4b:ff:8a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:29:52 2025 by rpki-client