
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft
File: racwBjpGGMJtFVQ1gZU7AYX9nIU.mft (raw, json)
Hash identifier: PekkvR3kOUhRAkF9PcW81skFTlxMlYF7UrgRJlD5Huc=
Subject key identifier: 36:C3:F0:E3:4E:47:73:CE:EC:9E:D6:3F:79:6D:2E:70:38:83:7A:5B
Authority key identifier: AD:A7:30:06:3A:46:18:C2:6D:15:54:35:81:95:3B:01:85:FD:9C:85
Certificate issuer: /CN=A9199231/serialNumber=ADA730063A4618C26D15543581953B0185FD9C85
Certificate serial: 078F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft
Manifest number: 12F9
Signing time: Tue 04 Nov 2025 19:09:27 +0000
Manifest this update: Tue 04 Nov 2025 19:09:26 +0000
Manifest next update: Tue 11 Nov 2025 19:09:26 +0000
Files and hashes: 1: racwBjpGGMJtFVQ1gZU7AYX9nIU.crl (hash: hGAzyo8YEQ+T7cF1GEd4YwFuftGvbwpXrXntoVJfeMg=)
2: 84DF7DDE361211EBACEF8647C4F9AE02.roa (hash: 3j6fcjarkwTsrFF+jI5l1fkUVOMv+A+fXywGLnEk9ME=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.crl
rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 19:09:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1935 (0x78f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199231, serialNumber=ADA730063A4618C26D15543581953B0185FD9C85
Validity
Not Before: Nov 4 19:09:26 2025 GMT
Not After : Nov 11 19:09:26 2025 GMT
Subject: CN=690a4f66-df6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:25:4e:69:85:49:6e:82:85:bc:05:f2:6d:59:
b9:71:d5:ad:d9:53:1e:73:21:04:58:e0:c1:ee:68:
c5:29:d8:f1:06:6e:c1:7c:e7:f9:ef:26:25:bb:15:
f9:e1:28:83:8a:b0:59:68:5f:fa:5d:34:83:6f:2c:
56:a0:47:80:3f:10:d5:db:af:be:c2:0e:f0:a8:32:
c6:bc:1c:4f:31:9e:fb:1f:c9:29:06:b6:36:ae:95:
37:cb:ca:f3:ad:34:ce:c2:24:2e:29:5b:c0:b6:f7:
0a:60:8d:40:f4:e2:96:eb:e0:d5:9f:45:39:f3:99:
ba:63:f8:f2:f7:ea:62:b9:1b:14:84:3d:46:4f:de:
1f:60:e6:37:aa:f9:9a:eb:6d:9f:fc:14:76:76:06:
78:4c:7e:da:d4:9d:81:49:d5:64:6e:02:87:e4:73:
2c:10:68:a3:5e:12:d4:7e:0d:7b:7d:c6:a4:96:a1:
57:7c:6a:83:04:08:38:5c:ee:ec:02:8f:65:2d:3f:
9c:df:fc:34:c2:46:74:cf:38:66:94:ce:3a:5a:c2:
33:ec:b5:57:75:bc:38:49:2f:94:82:6e:0f:cc:64:
98:c4:db:e1:5f:fc:f0:14:07:55:7e:a6:d5:82:6b:
50:2e:32:9a:16:ba:e0:9d:78:51:4c:9a:48:fc:75:
c8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C3:F0:E3:4E:47:73:CE:EC:9E:D6:3F:79:6D:2E:70:38:83:7A:5B
X509v3 Authority Key Identifier:
keyid:AD:A7:30:06:3A:46:18:C2:6D:15:54:35:81:95:3B:01:85:FD:9C:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:8e:3d:d2:fd:43:1b:3e:44:53:f6:41:25:d0:03:b7:c5:80:
bc:1a:3d:d0:7a:a2:02:4c:21:56:49:27:88:cc:be:42:10:81:
98:94:bd:ca:42:fc:ce:12:64:d9:4f:95:0d:5a:d4:a0:7a:01:
35:3d:a3:85:6e:a2:7e:4b:f7:17:6d:a0:79:26:1a:2c:dc:02:
29:05:b8:35:7a:ce:8e:84:f5:7f:2e:25:56:c1:a2:81:74:9f:
0c:2c:34:38:ce:72:40:42:7d:e4:4a:a8:d7:6a:a3:8f:81:97:
09:fb:e7:65:9b:cc:eb:14:2b:51:48:33:83:8d:de:4e:93:a5:
ec:0d:bd:9b:19:f2:eb:db:85:be:62:de:1e:c7:47:85:af:b6:
20:d9:d7:2b:9f:1e:e2:2d:e1:ff:2c:94:05:ba:b1:5b:a0:8c:
ad:e6:ab:3a:0a:77:20:ee:41:16:e4:a7:92:d6:6b:ab:d2:2d:
13:8b:ed:56:c4:f4:1b:a7:6d:4d:d9:ad:e6:70:28:e6:c5:5b:
72:bd:f6:1b:42:a8:45:ea:98:71:8c:d6:ca:3e:a5:e5:d6:83:
f4:a1:93:f4:43:bf:34:aa:51:8b:20:48:fd:87:9f:e8:65:b4:
c6:0f:6e:1d:e0:ce:31:0a:f8:a6:95:b8:13:3b:4b:50:12:80:
7e:c6:94:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:04:51 2025 by rpki-client