
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
File: 9ncWp9N92wPcVtA6uQKnIDfqGdk.mft (raw, json)
Hash identifier: 3OV+NaszIDL6t7KV87D2yEn9MiPHyY77htyvPv90YX4=
Subject key identifier: 81:10:E7:8D:B0:5E:9B:57:CC:51:60:04:4D:01:93:32:8F:A3:C7:7F
Authority key identifier: F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9
Certificate issuer: /CN=A918F1EE/serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9
Certificate serial: 88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
Manifest number: 88
Signing time: Mon 03 Nov 2025 06:34:58 +0000
Manifest this update: Mon 03 Nov 2025 06:34:57 +0000
Manifest next update: Mon 10 Nov 2025 06:34:57 +0000
Files and hashes: 1: 9ncWp9N92wPcVtA6uQKnIDfqGdk.crl (hash: u8Bo5sjN/Vu4CmhRo6wJaasE4EboOO7g6l3/pKoG684=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl
rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:34:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F1EE, serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9
Validity
Not Before: Nov 3 06:34:57 2025 GMT
Not After : Nov 10 06:34:57 2025 GMT
Subject: CN=69084d11-527c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e7:dc:37:4d:93:43:96:a9:89:85:b6:00:33:
7f:e6:0b:1d:4a:a0:5b:68:e7:9d:23:55:57:f5:53:
4d:73:03:d1:6a:f4:1a:7b:fa:74:cd:c2:02:d0:50:
9a:13:5a:23:16:14:69:96:a6:d8:d0:59:7b:0e:5b:
4b:5d:7b:4c:24:9b:09:31:73:08:8e:fe:0a:b6:9e:
32:dc:e3:b1:9c:6c:05:56:d0:60:10:f8:6b:24:ec:
0f:09:0d:e4:7b:48:3b:60:ae:ec:ff:d4:b2:4d:f7:
5d:29:67:d1:da:9f:56:06:49:94:f2:87:d1:6f:14:
d6:f8:db:8a:3d:4e:db:47:cc:c0:3d:b4:a8:a2:ef:
3d:71:b6:54:1a:4a:d1:3e:dd:32:ab:f5:55:60:32:
45:38:92:43:a2:ef:d7:5f:72:6f:e3:58:50:a9:da:
be:e0:06:1d:04:7a:88:99:01:c2:bf:31:0b:53:83:
83:35:f5:c6:0b:0a:e4:63:d4:bf:cd:24:f3:d2:38:
f4:99:cc:07:07:db:2e:c6:94:df:d0:96:e6:11:e4:
3f:b0:6b:d3:cb:8b:0b:1a:47:76:fb:ae:90:c1:a5:
d9:7c:3b:33:64:8a:9d:b4:67:ac:0a:41:86:fd:4b:
d9:03:62:db:6b:65:fc:ad:84:e8:87:39:5c:75:23:
de:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:10:E7:8D:B0:5E:9B:57:CC:51:60:04:4D:01:93:32:8F:A3:C7:7F
X509v3 Authority Key Identifier:
keyid:F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:cf:f5:60:13:6d:2b:c9:3b:61:7c:00:6a:c6:9f:b1:f9:a1:
80:23:36:4b:30:3e:59:33:c3:a2:4b:79:16:c6:52:67:3f:a3:
1c:71:be:d3:00:ce:65:0e:0f:bd:40:c4:9d:43:5b:2f:ba:f0:
05:c9:c3:32:ff:d0:61:3f:3c:88:d8:38:13:f7:68:b9:75:85:
f6:7a:ae:06:a3:92:e5:3c:64:71:51:f2:0b:66:f7:38:7c:f4:
f2:80:c7:75:d1:cd:dd:bf:35:af:aa:58:f5:94:88:4e:2b:7b:
ba:4e:ef:2e:37:5f:df:4e:ec:2f:4d:82:d6:67:0f:e6:c3:6e:
5d:ea:64:fb:44:51:b7:b7:e2:3c:ca:23:66:6f:e6:f0:ba:60:
b2:c5:aa:60:88:7c:53:4a:a1:a6:f7:32:45:54:89:44:8d:22:
b2:3c:8f:76:e7:42:dc:3b:9b:87:e0:b6:d8:76:02:c2:ea:27:
b1:66:86:67:4d:fa:8e:32:76:d1:6b:b6:a9:7d:e1:05:a4:ad:
f0:3d:38:96:1d:f4:7e:de:b7:a4:65:07:93:0d:b3:28:7b:d7:
e9:5d:22:6e:3c:e2:e8:07:c1:d7:af:14:4c:c1:36:8c:b3:10:
1b:0f:f2:82:84:05:04:0f:50:63:39:01:0e:fd:52:49:ce:42:
ed:68:81:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:13:29 2025 by rpki-client