
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
File: MtNTdDyP4vCOl7IuW2CavBTM_js.mft (raw, json)
Hash identifier: VyRJ50to1JYIXh53R845NRXgOp6SLajcUbl7xqgeTyk=
Subject key identifier: 03:8C:8A:44:58:8B:BE:F8:F3:37:01:80:3B:5F:70:CC:7D:CD:12:1F
Authority key identifier: 32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B
Certificate issuer: /CN=A9179F64/serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
Certificate serial: 0108
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
Manifest number: F8
Signing time: Wed 05 Nov 2025 05:39:39 +0000
Manifest this update: Wed 05 Nov 2025 05:39:39 +0000
Manifest next update: Wed 12 Nov 2025 05:39:39 +0000
Files and hashes: 1: MtNTdDyP4vCOl7IuW2CavBTM_js.crl (hash: 2Zflrp8q7a7w8m7p1tYO2BgkdhOFIF3pVw7hfGmyvyg=)
2: F0CEC2E2663811F089040A3DC4F9AE02.roa (hash: 4eCQXPIoXqLFis62/nmMgnZplG75TTG2mCb5ZkTz7as=)
3: 144D9AA823F011F0B0D6F263C4F9AE02.roa (hash: lyaciBaHQ7wicHWM/adA9CDhCXcjs8ttP7h7VzDSE2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl
rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179F64, serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
Validity
Not Before: Nov 5 05:39:39 2025 GMT
Not After : Nov 12 05:39:39 2025 GMT
Subject: CN=690ae31b-50b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:97:4b:8d:12:63:2b:8e:7a:43:19:3c:11:0b:
4a:41:a4:4e:3f:c0:4e:7a:a7:26:7f:b4:3d:cb:f4:
92:60:4c:84:51:d4:8d:28:75:07:fb:05:c5:39:04:
e4:94:29:96:85:e3:0c:0f:64:97:1a:05:5c:88:46:
22:38:51:cc:61:c4:46:59:64:33:0a:16:45:4a:35:
bf:46:3d:58:84:ec:f6:f7:48:8c:e3:11:b2:09:2c:
fa:ef:db:4c:0a:bb:9f:0c:59:ca:f6:00:70:e5:76:
b3:a3:31:b2:0b:44:c8:2a:8a:84:b1:aa:3b:6b:35:
31:08:f7:10:bd:24:cc:20:d5:db:0c:b2:35:23:08:
f4:20:a6:bf:25:7b:5a:ed:7c:83:da:67:36:2d:09:
79:e1:38:8d:99:e0:56:52:d7:bc:02:ee:9c:d0:a4:
b8:03:c4:92:0b:c4:e4:e0:af:8e:ba:c5:f6:ee:cc:
99:d3:97:98:ea:0e:0c:b3:b5:14:3a:ec:d5:75:39:
95:c6:26:f7:1b:b0:20:ff:5b:bc:ad:38:12:a4:7c:
08:83:be:a7:77:1f:27:50:d9:a1:bf:61:68:9c:f6:
88:3f:f3:90:2d:74:5b:7d:2f:1c:49:06:80:64:73:
2f:f2:83:ac:41:af:d2:c7:79:73:7a:47:46:50:c8:
8e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8C:8A:44:58:8B:BE:F8:F3:37:01:80:3B:5F:70:CC:7D:CD:12:1F
X509v3 Authority Key Identifier:
keyid:32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f3:a7:e5:04:df:ea:88:d3:e3:90:e8:96:6f:3f:5f:03:66:
c6:71:2f:85:b2:e3:f1:8d:a0:44:2f:40:da:dd:44:78:03:b5:
ae:30:54:77:2e:54:43:83:a9:2c:26:7c:ec:fe:15:3a:56:d6:
c3:c9:91:cc:80:f8:19:bc:46:31:91:69:25:dd:fa:68:92:93:
3f:62:3a:08:e7:cf:c6:d5:e0:bc:f0:fc:31:a8:1a:86:3d:a9:
b0:5d:be:66:55:eb:8c:b1:bb:7e:0e:c8:18:14:1f:9e:20:fd:
04:91:c4:bb:b9:43:c8:c0:76:ad:d3:db:dd:47:5f:46:c3:68:
e4:d6:2e:5f:20:81:88:0d:76:a3:3f:63:e7:72:d5:bf:91:b8:
55:f5:06:a4:55:a7:07:cf:87:e5:0a:d9:5d:d2:c5:39:05:5d:
fa:17:47:d7:e0:c5:da:f0:d2:e5:5a:f5:eb:41:0f:73:1f:0a:
fc:5d:1a:93:3c:d5:3f:8d:49:e6:69:84:00:76:a9:97:2b:f5:
d6:c1:63:9a:7e:e6:c1:75:21:50:27:83:f1:df:92:56:81:7d:
24:66:2a:cd:3e:f6:95:47:0b:76:65:e4:9a:89:02:0a:7d:41:
d6:d6:d1:00:86:83:90:8e:f7:54:44:a3:c3:ed:ac:3e:6d:fd:
be:ff:64:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:51:12 2025 by rpki-client