
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
File: 10dAEUy69PWZqn5dw0EuEi-ocUw.mft (raw, json)
Hash identifier: TJyWFrr9UpmQQxPjJxhAXDv0460FiJ9J6wrASFV+0sw=
Subject key identifier: C1:81:C6:35:60:A2:80:DA:5E:B6:22:4E:F7:D2:4F:74:32:72:F4:39
Authority key identifier: D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C
Certificate issuer: /CN=A9169BAF/serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C
Certificate serial: 0147
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
Manifest number: 0143
Signing time: Mon 03 Nov 2025 04:26:33 +0000
Manifest this update: Mon 03 Nov 2025 04:26:32 +0000
Manifest next update: Mon 10 Nov 2025 04:26:32 +0000
Files and hashes: 1: 10dAEUy69PWZqn5dw0EuEi-ocUw.crl (hash: K3tItwNzBGHsBE9ABMCXDHlAnE3PDuEZmM8pASlms6Y=)
2: 1416035CD22C11EE891B4A44C4F9AE02.roa (hash: LAsIeNhYt5BHF0IaKn+G+8QXRLdvDCA/uEEEFG9I+DM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl
rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 04:26:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169BAF, serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C
Validity
Not Before: Nov 3 04:26:32 2025 GMT
Not After : Nov 10 04:26:32 2025 GMT
Subject: CN=69082ef8-3439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:63:6b:b6:1a:b6:8a:51:16:e6:4a:c7:2a:
26:8d:91:f2:7e:67:69:18:72:6b:ac:cb:ae:d2:74:
71:4f:0f:47:9a:c9:91:b8:49:5b:ee:06:76:58:db:
ff:09:17:26:44:32:ee:fc:59:02:0e:9e:b6:19:a5:
22:bd:06:25:12:50:d4:60:12:78:af:22:61:e8:c0:
98:48:df:44:f9:24:93:a7:c1:5d:ca:87:ab:13:c4:
2e:ed:67:d1:af:c8:eb:2f:0d:50:65:56:05:a5:ea:
3c:3d:eb:e4:72:87:8a:81:59:83:13:d1:5c:20:64:
f9:51:29:75:eb:46:ab:c6:6b:f6:b0:8a:36:24:bf:
5d:72:cc:40:41:66:89:97:a2:7a:18:57:75:b6:62:
75:c0:a2:1f:24:ec:37:8c:8c:37:25:02:8c:37:b8:
31:d8:29:51:d7:cb:eb:25:d3:c5:22:2b:da:fe:1b:
c9:77:00:f4:aa:7d:95:d6:3a:59:b8:08:4f:9d:b0:
f1:fe:4a:b2:6c:38:53:60:33:77:ee:f2:0d:dd:18:
ca:c4:23:bf:24:ca:7d:5e:7f:db:00:c2:2e:34:bb:
21:db:76:83:21:06:ee:42:7b:f6:55:ea:8b:3d:30:
89:e3:82:11:2a:05:ea:cf:69:69:59:43:dd:f5:2b:
be:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:81:C6:35:60:A2:80:DA:5E:B6:22:4E:F7:D2:4F:74:32:72:F4:39
X509v3 Authority Key Identifier:
keyid:D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4e:8d:b9:23:20:31:24:dd:bf:ac:9f:e8:db:48:01:c0:29:
05:f9:8c:1d:f8:9e:a8:08:1d:80:df:21:be:5f:3b:1e:e1:10:
ad:10:cc:76:d7:b2:a6:48:72:6e:3e:3c:a9:e9:1a:ec:53:ea:
7c:8f:ce:80:99:11:fa:69:e7:bc:65:54:c6:92:95:9f:8f:8d:
21:34:8f:8e:81:96:6d:c0:87:f3:26:91:35:d5:01:21:52:62:
4e:3c:80:ed:49:eb:92:18:ba:98:45:6f:d0:a9:e7:52:41:d0:
2a:50:a2:da:22:dc:17:a2:26:38:1c:c1:f7:fc:85:74:e3:40:
0f:28:df:f9:51:8f:08:75:40:a6:61:e4:40:09:7c:38:31:e2:
63:8e:74:46:31:93:c4:35:76:22:4a:64:7b:f5:ef:30:24:02:
06:a5:9d:e4:11:e9:0d:06:d2:84:ae:bf:67:82:5b:d1:e7:86:
06:49:97:2f:f4:e0:28:6a:89:12:a1:af:b6:dd:a5:a4:c5:04:
76:6f:f2:e7:9d:ab:1a:b2:ef:c8:fb:fa:ae:f8:a7:3b:93:11:
f6:40:d5:73:fb:98:91:23:51:af:8d:63:b1:23:c0:db:be:70:
cf:b7:bb:f0:81:1d:4d:da:0a:b5:51:b4:cb:54:5b:35:b1:3a:
0f:14:69:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:15:06 2025 by rpki-client