
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
File: mZujdBECimL7UV3PAozaLcmrydE.mft (raw, json)
Hash identifier: VY9lM++566OTtGWmPfBqIMR7YdoCzVImWbY66MeuGs0=
Subject key identifier: DA:F2:AC:5D:EE:08:72:DD:AD:B7:C7:F2:08:D4:72:F4:BB:39:23:E2
Authority key identifier: 99:9B:A3:74:11:02:8A:62:FB:51:5D:CF:02:8C:DA:2D:C9:AB:C9:D1
Certificate issuer: /CN=A9184359/serialNumber=999BA37411028A62FB515DCF028CDA2DC9ABC9D1
Certificate serial: 01DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
Manifest number: 01D9
Signing time: Wed 05 Nov 2025 02:51:39 +0000
Manifest this update: Wed 05 Nov 2025 02:51:38 +0000
Manifest next update: Wed 12 Nov 2025 02:51:38 +0000
Files and hashes: 1: mZujdBECimL7UV3PAozaLcmrydE.crl (hash: 5zFaheVYiPKJsfomJbrdj9txE1ZrcSak6x0HNCOcFOo=)
2: F27BE0E2E4CC11EDBAFF045BC4F9AE02.roa (hash: FcVq7MapsG0tiRr/INQ1mEf1XPC8HnzEbnMHkTHPq4w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.crl
rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:51:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476 (0x1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184359, serialNumber=999BA37411028A62FB515DCF028CDA2DC9ABC9D1
Validity
Not Before: Nov 5 02:51:38 2025 GMT
Not After : Nov 12 02:51:38 2025 GMT
Subject: CN=690abbba-f85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:80:3a:52:5d:83:d7:27:bb:7f:56:88:92:bd:
99:f2:d2:02:22:5b:71:11:e9:bf:2b:45:09:2c:02:
d6:92:8c:36:f5:03:1a:43:dd:ac:68:83:ee:b6:3d:
3c:32:c0:e9:3a:ce:fc:86:52:a9:6e:78:0c:05:23:
2c:67:67:af:df:ec:87:55:25:8e:7f:d8:38:0a:78:
e8:c3:a3:e8:9a:3d:e5:a1:99:f6:39:a9:1c:76:c4:
75:a8:88:34:83:1c:17:8f:37:c9:e0:8d:75:f5:30:
57:11:a4:58:d6:50:5e:0b:b6:ac:d8:cd:ba:e4:47:
c5:1a:1a:85:37:94:af:23:81:48:78:38:39:71:a3:
8b:f1:e4:d9:9f:d1:ad:c5:02:4e:9e:73:35:34:57:
50:13:b8:ac:70:f2:eb:51:99:b1:e7:21:02:dd:3c:
22:3f:88:7e:7a:d6:33:6b:d1:9a:4b:77:03:2d:ea:
2c:19:a5:d2:2e:23:b2:ba:74:7c:61:07:2c:15:55:
61:ed:6d:b3:62:5b:7a:2f:64:c3:83:c4:6b:c6:c3:
74:0b:35:bc:68:1a:aa:81:7b:f4:68:ab:36:bb:32:
74:fa:8a:36:03:30:32:aa:4f:99:1f:c5:b6:65:2e:
aa:96:61:d4:e6:fd:db:80:32:db:f6:e0:60:a4:b8:
e2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F2:AC:5D:EE:08:72:DD:AD:B7:C7:F2:08:D4:72:F4:BB:39:23:E2
X509v3 Authority Key Identifier:
keyid:99:9B:A3:74:11:02:8A:62:FB:51:5D:CF:02:8C:DA:2D:C9:AB:C9:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:0b:75:ab:b4:3d:c3:50:e7:00:e3:e3:20:c0:7a:ac:86:a8:
8f:39:1f:f6:c0:a7:73:14:1c:ae:b0:05:06:54:28:9c:67:7c:
ae:95:4d:56:0d:b1:77:b4:1f:3b:b4:cd:38:3f:42:c5:0a:0b:
88:ce:49:f0:24:4f:b3:8e:f9:49:1e:b4:53:ce:de:92:ac:73:
6a:07:57:4e:a9:bc:5c:51:24:85:1c:19:8e:04:3d:12:c7:78:
0d:85:d1:81:a0:bd:4f:a0:4a:56:36:b4:f6:ac:69:04:d6:1f:
c1:7d:ac:54:b5:fa:f6:8e:c7:ff:d4:9c:64:5f:e7:4e:dd:59:
7e:fe:15:c7:6f:e1:04:8f:ec:5a:7c:0d:11:58:76:24:8e:d3:
45:53:53:49:f4:ea:d0:1f:f3:a1:c4:d1:ab:10:ad:aa:5d:90:
c9:93:60:03:67:68:47:bc:ad:1c:3f:cc:a3:8b:f8:de:38:40:
78:99:04:4a:73:37:88:8c:d3:6b:6d:02:ee:e3:72:7c:12:9d:
5b:46:09:10:84:5c:b8:83:ae:e2:d1:7b:35:65:7d:1b:33:d6:
fd:af:96:60:cb:89:99:0c:ce:cc:1a:71:0d:8a:e5:02:c5:5c:
a2:c7:e8:c2:4f:ff:8d:49:1b:90:8c:51:f8:b8:28:07:e4:2b:
a1:ad:72:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:29:40 2025 by rpki-client