
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft
File: J5ydeYJLogRvE4r2zbijsI8DvrM.mft (raw, json)
Hash identifier: qGLg2LC9F6Hk8YjA2mfhAh/34k3lg9DYoLaM7eTdSOI=
Subject key identifier: 81:5B:DB:C9:AD:A7:FF:A5:63:82:E0:4B:9D:B1:E0:CF:7A:C1:89:AF
Authority key identifier: 27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3
Certificate issuer: /CN=A9170927/serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3
Certificate serial: 84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft
Manifest number: 7E
Signing time: Mon 03 Nov 2025 06:50:47 +0000
Manifest this update: Mon 03 Nov 2025 06:50:46 +0000
Manifest next update: Mon 10 Nov 2025 06:50:46 +0000
Files and hashes: 1: J5ydeYJLogRvE4r2zbijsI8DvrM.crl (hash: KKR2kWVtkiuqJFA4WFg5M+f+8Wf3Qf0S2hkCmkZ42ts=)
2: 6D8A3DC29DCD11F0A412CC62C4F9AE02.roa (hash: 6dbULfL3W6yAaGvVmi4JRp24GJKnWO0Bw/N0jVvMnLg=)
3: F31C1B909D3C11F097272925C4F9AE02.roa (hash: SWDeMxklFh5rJoztqSSMHcLOo+zW7hCc5nM3df/2df0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl
rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170927, serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3
Validity
Not Before: Nov 3 06:50:46 2025 GMT
Not After : Nov 10 06:50:46 2025 GMT
Subject: CN=690850c6-08a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:53:e0:4f:21:4c:86:3f:bd:ef:61:c0:4f:40:
45:17:8b:67:61:b6:00:21:1f:6e:47:84:eb:c6:1d:
52:01:25:f1:e0:15:91:43:ac:b6:46:fa:9a:52:db:
94:40:49:a2:7c:91:d1:fd:d7:a2:0e:a7:b5:51:3c:
49:20:c6:4b:ea:aa:de:aa:c4:c0:4d:52:01:1d:1a:
25:b5:4d:46:7c:83:40:d5:b4:f4:b1:db:a4:2e:c0:
96:b3:39:9b:cf:f5:12:86:79:c4:f1:56:a7:22:de:
2d:d6:0c:3c:ff:27:0f:bc:e0:ef:12:8d:62:3f:cd:
b3:dd:45:53:6b:24:34:48:bf:b7:6f:2e:86:dc:1b:
75:3e:c5:33:0a:1b:52:a1:37:3b:bf:02:7c:5e:cd:
82:f5:83:af:ce:cc:f5:26:92:e5:04:3f:98:1b:8e:
df:3d:a4:50:7a:76:3e:65:08:96:9d:24:d9:c0:ea:
21:2d:04:8d:2a:b8:30:62:82:8c:3e:c9:2a:87:bf:
c6:1a:7a:0d:eb:b4:98:ea:01:50:c5:2e:83:e5:84:
53:09:d6:44:e6:00:02:8a:97:64:1e:28:8d:f1:70:
c1:4d:cc:ab:bd:dc:e7:34:73:7a:f0:8d:63:2a:26:
9d:ed:0c:77:27:0e:c3:67:6a:2e:42:89:d3:d2:87:
f1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5B:DB:C9:AD:A7:FF:A5:63:82:E0:4B:9D:B1:E0:CF:7A:C1:89:AF
X509v3 Authority Key Identifier:
keyid:27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:fa:be:e6:87:55:55:55:64:94:d9:51:ab:2e:01:31:68:53:
df:43:57:fe:f3:c8:3d:42:51:34:28:25:39:14:86:6b:37:68:
be:55:51:d7:5c:1e:07:27:51:b8:ad:89:63:03:75:f8:a2:07:
48:93:78:ef:e9:52:c6:94:6d:ee:af:3b:37:53:9d:56:0c:21:
f8:66:12:17:97:b9:5d:30:82:f2:8b:75:6f:f5:25:fc:9a:7a:
a1:d3:27:0e:ea:d7:7f:e5:96:e7:5c:12:ee:bb:13:9e:b3:c8:
d2:5b:4c:2e:d0:ae:26:7d:44:20:ac:c5:7a:87:19:12:71:99:
57:52:f1:1c:07:58:22:da:ef:3e:7a:04:7b:09:ca:ab:52:fe:
3e:c9:6c:c5:b2:d5:a9:1f:4b:e1:2b:05:49:c0:55:10:d2:40:
a3:c1:6a:49:40:ec:2f:33:13:52:5f:43:6c:9e:54:33:72:ea:
37:5d:1d:c9:ef:d0:d9:fa:ff:93:60:99:01:b1:c4:e1:88:ae:
c2:45:2a:18:15:22:6a:91:76:d7:e7:cc:19:88:32:ac:a2:3e:
5c:58:5b:d2:16:33:22:80:8e:52:83:ce:22:bd:d5:60:9e:af:
81:7f:10:54:87:ad:03:93:6c:5d:54:ce:68:9c:30:f1:bb:ec:
81:a8:94:64
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA5MjcxMTAvBgNVBAUTKDI3OUM5RDc5ODI0QkEyMDQ2RjEzOEFGNkNEQjhBM0Iw
OEYwM0JFQjMwHhcNMjUxMTAzMDY1MDQ2WhcNMjUxMTEwMDY1MDQ2WjAYMRYwFAYD
VQQDEw02OTA4NTBjNi0wOGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvlPgTyFMhj+972HAT0BFF4tnYbYAIR9uR4Trxh1SASXx4BWRQ6y2RvqaUtuU
QEmifJHR/deiDqe1UTxJIMZL6qreqsTATVIBHRoltU1GfINA1bT0sdukLsCWszmb
z/UShnnE8VanIt4t1gw8/ycPvODvEo1iP82z3UVTayQ0SL+3by6G3Bt1PsUzChtS
oTc7vwJ8Xs2C9YOvzsz1JpLlBD+YG47fPaRQenY+ZQiWnSTZwOohLQSNKrgwYoKM
Pskqh7/GGnoN67SY6gFQxS6D5YRTCdZE5gACipdkHiiN8XDBTcyrvdznNHN68I1j
Kiad7Qx3Jw7DZ2ouQonT0ofx8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFb28mt
p/+lY4LgS52x4M96wYmvMB8GA1UdIwQYMBaAFCecnXmCS6IEbxOK9s24o7CPA76z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDkyNy9DMTA2RDMzQzA0
REMxMUYwQjZCMjVBNDNDNEY5QUUwMi9KNXlkZVlKTG9nUnZFNHIyemJpanNJOER2
ck0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0o1eWRlWUpMb2dSdkU0cjJ6Ymlqc0k4RHZyTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDkyNy9DMTA2RDMzQzA0REMxMUYwQjZCMjVBNDNDNEY5QUUwMi9KNXlkZVlKTG9n
UnZFNHIyemJpanNJOER2ck0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCH+r7mh1VVVWSU2VGrLgExaFPfQ1f+88g9QlE0KCU5FIZrN2i+VVHX
XB4HJ1G4rYljA3X4ogdIk3jv6VLGlG3urzs3U51WDCH4ZhIXl7ldMILyi3Vv9SX8
mnqh0ycO6td/5ZbnXBLuuxOes8jSW0wu0K4mfUQgrMV6hxkScZlXUvEcB1gi2u8+
egR7CcqrUv4+yWzFstWpH0vhKwVJwFUQ0kCjwWpJQOwvMxNSX0NsnlQzcuo3XR3J
79DZ+v+TYJkBscThiK7CRSoYFSJqkXbX58wZiDKsoj5cWFvSFjMigI5Sg84ivdVg
nq+BfxBUh60Dk2xdVM5onDDxu+yBqJRk
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:06:44 2025 by rpki-client