
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft
File: U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft (raw, json)
Hash identifier: EgOKnq4q9b7NSFfrogQSUbzbQyBt1IyJH6SgHNnOMo8=
Subject key identifier: 26:09:4F:FF:BD:93:75:93:94:12:62:3F:DF:36:34:12:5F:AD:7D:19
Authority key identifier: 53:EC:8F:4F:10:A9:40:64:46:28:23:AA:29:9B:B2:86:60:0E:DF:09
Certificate issuer: /CN=A9180838/serialNumber=53EC8F4F10A94064462823AA299BB286600EDF09
Certificate serial: 8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft
Manifest number: 8C
Signing time: Mon 03 Nov 2025 06:34:33 +0000
Manifest this update: Mon 03 Nov 2025 06:34:32 +0000
Manifest next update: Mon 10 Nov 2025 06:34:32 +0000
Files and hashes: 1: U-yPTxCpQGRGKCOqKZuyhmAO3wk.crl (hash: WoLdT0aasU58dTm6BUH+ZJmYzgE9qHPuF77GYQxDfgk=)
2: 30CC092AE53011EFA140503EC4F9AE02.roa (hash: +368O4g5op3NFEyPxMy/g2aKCfQYvcEtTWG1Z/mxGSQ=)
3: DB1C7FA0E52F11EF8A7DB63DC4F9AE02.roa (hash: zY2HFqsbJ8/jLQBMjPpHRfGu9g3E8mXkzh/HPX8tacQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.crl
rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:34:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180838, serialNumber=53EC8F4F10A94064462823AA299BB286600EDF09
Validity
Not Before: Nov 3 06:34:32 2025 GMT
Not After : Nov 10 06:34:32 2025 GMT
Subject: CN=69084cf9-e64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:45:c5:47:ab:f2:78:d4:c1:94:51:13:52:db:
e4:18:c9:bf:01:bf:ce:e3:07:ea:92:5d:8c:f4:0b:
2d:af:01:63:3a:e7:33:76:2c:bf:90:ca:40:09:e5:
e4:c6:4d:f4:e0:b4:b3:f6:81:da:ab:b6:66:1c:98:
30:ba:ed:48:ca:d8:66:b0:f0:cb:40:c1:d3:e8:e0:
6c:7b:94:26:79:55:31:25:c4:4d:f8:73:50:b5:9b:
97:86:4f:c3:b8:83:d5:5c:4a:87:90:e8:cb:07:14:
0e:e5:5b:f0:d9:0b:0c:c3:da:2d:7a:53:2d:3d:13:
6d:b9:f7:54:c2:8d:89:71:a0:40:03:d3:86:eb:6f:
a6:02:bf:ce:e8:c6:8d:9e:36:e2:c7:b3:ce:49:27:
ea:16:c2:ef:6d:fd:db:73:99:66:f4:9f:78:30:7b:
98:44:ac:67:80:55:7e:7e:c2:36:f0:40:8f:86:31:
d9:7a:83:f2:41:ff:4a:27:6b:6e:e9:07:ff:9c:2b:
e3:ec:8e:7c:03:57:d8:66:a7:94:9e:23:d6:48:82:
0e:4c:97:ad:d6:1d:b5:db:d9:08:e1:71:45:fd:ee:
1c:47:90:cf:70:70:7a:80:49:c9:c3:f7:57:4c:7d:
66:6c:3c:b4:1c:79:80:e4:01:59:87:1f:1a:12:8b:
41:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:09:4F:FF:BD:93:75:93:94:12:62:3F:DF:36:34:12:5F:AD:7D:19
X509v3 Authority Key Identifier:
keyid:53:EC:8F:4F:10:A9:40:64:46:28:23:AA:29:9B:B2:86:60:0E:DF:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:cb:be:93:10:5a:76:fd:f2:a3:5b:02:3b:c1:6d:52:25:db:
7f:9c:c8:91:19:a0:93:dc:c9:c0:d4:07:9a:a2:2e:0b:b7:0e:
8c:f1:ca:c0:e8:80:17:bb:c9:0f:01:7f:63:76:a2:cc:41:d5:
20:58:42:d7:5e:fa:64:62:e8:0b:52:35:11:ea:d7:e2:47:f3:
3e:99:6b:bb:db:2a:01:82:43:1c:e8:7f:43:2d:05:af:1d:f5:
8c:10:05:35:7b:a4:6c:13:74:7e:81:f1:57:6b:e6:da:c2:ad:
c2:2a:e2:c7:02:c3:a2:98:24:45:1c:a6:96:b7:6a:b0:10:3c:
a4:80:54:dc:f6:8b:44:5e:82:5e:ee:5a:d2:90:27:35:70:91:
ba:29:97:61:c7:41:69:5c:3e:e8:c0:d5:7f:dc:d9:e5:8a:a4:
79:79:5d:b8:c1:32:04:c6:a2:43:08:04:06:ae:33:ea:3c:6f:
1a:90:33:a4:9e:45:67:99:d8:36:92:33:0e:e3:b3:07:91:d1:
77:c6:a4:40:90:a6:dc:46:e5:17:74:ff:4f:59:d0:bc:8e:48:
ef:ae:73:20:ba:16:fc:0c:33:79:20:13:24:29:fe:e0:f6:83:
97:be:6f:62:35:1c:4c:a3:cf:5d:c6:24:f5:b7:3c:60:97:6f:
5e:dc:a8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:31 2025 by rpki-client