
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft
File: UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft (raw, json)
Hash identifier: x+KFOD9UlnWmQkWvfP6F3Q+MX/N646pOpAUcHtvwko0=
Subject key identifier: 9A:41:2F:90:70:F0:6B:D8:BB:05:97:56:5A:93:93:E9:80:CF:13:46
Authority key identifier: 50:3D:1B:F5:6B:22:29:B5:2A:A3:FF:68:53:46:99:F0:6F:D2:50:23
Certificate issuer: /CN=A91FBDDF/serialNumber=503D1BF56B2229B52AA3FF68534699F06FD25023
Certificate serial: 017A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft
Manifest number: 017A
Signing time: Mon 03 Nov 2025 03:42:26 +0000
Manifest this update: Mon 03 Nov 2025 03:42:25 +0000
Manifest next update: Mon 10 Nov 2025 03:42:25 +0000
Files and hashes: 1: UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl (hash: LbTu9Gk2T++uAniZGQiuM/suz9yBtMAzMRLjq9LrqV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl
rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 03:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378 (0x17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBDDF, serialNumber=503D1BF56B2229B52AA3FF68534699F06FD25023
Validity
Not Before: Nov 3 03:42:25 2025 GMT
Not After : Nov 10 03:42:25 2025 GMT
Subject: CN=690824a2-0015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:84:1e:6b:5a:6b:c4:d4:45:8e:45:fe:57:a4:
fb:d9:60:08:0e:c0:4b:3f:74:30:d3:b2:61:ee:10:
44:c7:09:97:26:85:5e:0f:2f:cb:ee:40:7f:99:8b:
4a:08:18:ab:c3:be:8c:58:e5:50:c5:32:a0:c0:df:
37:5c:09:0b:10:29:a9:9a:8d:49:ac:69:86:52:47:
72:eb:4a:c9:af:a5:12:84:95:33:21:c0:af:f0:80:
58:ab:d6:3b:8d:9c:60:6a:35:a3:fe:ea:52:34:7c:
14:17:c7:e3:0d:55:41:27:6c:b6:28:1f:be:02:68:
24:62:e3:23:b7:70:3e:92:aa:a4:a7:26:bb:ba:d2:
11:c4:e5:20:60:ee:cf:32:fe:43:88:ef:da:76:8c:
78:f7:f7:a2:8d:d8:5f:38:cd:22:0c:6a:40:93:a3:
ff:0d:61:5f:b2:44:27:fc:0f:73:54:eb:de:fc:11:
3b:cf:da:dc:47:84:06:ab:1e:70:c4:ee:e7:a9:32:
4f:2c:d1:09:40:ec:36:d5:92:1f:00:89:ea:60:9b:
34:ae:68:9f:0f:c1:1d:76:a7:fb:32:3b:27:4e:93:
53:6e:1b:98:fb:9a:87:4c:c4:19:05:41:22:7a:81:
48:fe:a5:d8:c5:38:ee:a7:73:2e:19:60:e5:de:d2:
f4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:41:2F:90:70:F0:6B:D8:BB:05:97:56:5A:93:93:E9:80:CF:13:46
X509v3 Authority Key Identifier:
keyid:50:3D:1B:F5:6B:22:29:B5:2A:A3:FF:68:53:46:99:F0:6F:D2:50:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:f2:ac:3a:39:43:42:9b:25:cd:d9:68:c9:c0:6f:97:cd:3a:
3b:14:6e:bc:06:9f:19:7f:23:95:75:55:62:a7:8f:f4:ab:18:
ff:de:11:97:44:a5:9c:95:be:e1:31:a9:96:ef:8b:90:14:eb:
3c:6e:67:b0:c6:88:b7:8a:c3:2d:62:83:47:95:53:2a:a5:26:
84:0a:64:2e:c9:b7:49:07:32:c1:b3:69:eb:3a:44:cf:14:a9:
c7:48:13:e1:c3:66:bb:e1:d1:41:d0:09:68:b8:1a:4e:16:13:
50:58:20:d4:17:58:e8:16:89:30:2c:75:2b:7c:7f:68:81:d8:
1c:10:ca:26:db:b6:2b:a3:a0:cb:4e:31:85:32:33:b2:7d:a6:
8e:21:4c:c2:a8:d5:4e:e9:a0:c8:1d:22:ce:df:90:1c:01:bf:
74:dc:c2:72:6a:b9:d1:cb:68:5a:9a:b9:70:cf:81:6e:4e:5e:
3c:8a:95:15:b4:dd:fc:b6:00:07:e8:8d:8c:50:c2:67:b1:e4:
0f:10:ec:2f:e7:80:9a:55:12:fb:25:30:50:51:57:2d:b7:d0:
e6:dd:d2:44:34:90:ff:7e:f7:b4:f0:96:02:56:d1:28:8e:28:
f0:8a:c8:a5:c1:70:d7:16:46:f3:0a:5b:9b:ec:49:2f:03:29:
a1:30:0f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:20:06 2025 by rpki-client