
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
File: mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft (raw, json)
Hash identifier: eCVdAnobtIgNflW8CBnPs0ilEC6lkzuX2lTQpV0Hwo4=
Subject key identifier: 2E:DF:EF:D7:53:39:9D:D3:A6:35:66:14:AF:69:2A:23:4E:98:9B:C6
Authority key identifier: 98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24
Certificate issuer: /CN=A9136429/serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24
Certificate serial: 041F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
Manifest number: 0417
Signing time: Wed 05 Nov 2025 00:28:41 +0000
Manifest this update: Wed 05 Nov 2025 00:28:40 +0000
Manifest next update: Wed 12 Nov 2025 00:28:40 +0000
Files and hashes: 1: mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl (hash: 5omRQVACpJchNS+yN3/7X8UyHg9qUqOB4ZKg+3K78Hs=)
2: A3FBC4668A3511ECB4502D0DC4F9AE02.roa (hash: EHGFFNKYLhkroKhaSJxD35WEinaxk7mhvnsD4zQjF4g=)
3: 3A51C4061DF211ED95A51A3EC4F9AE02.roa (hash: h8JGD2TX2zCZAvoeCATDFLy5kT17CJ7zwhERt61Mof0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl
rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:28:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1055 (0x41f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136429, serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24
Validity
Not Before: Nov 5 00:28:40 2025 GMT
Not After : Nov 12 00:28:40 2025 GMT
Subject: CN=690a9a39-12d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:df:ce:42:75:92:1b:f0:af:8c:6d:96:04:e5:
82:e5:c1:23:d0:23:61:34:b5:fd:4a:21:12:1e:9b:
c3:33:64:54:13:45:00:6d:e5:95:02:bd:3e:9d:77:
e4:aa:c4:d7:f3:09:c9:01:79:9a:6f:6c:2c:3d:bb:
c3:10:79:40:81:e8:c6:88:78:ef:9d:e0:34:60:e0:
bb:4e:37:0b:23:54:2a:e0:43:3a:ec:5d:fb:83:56:
23:3a:98:7d:c5:e9:92:d0:6d:3f:9b:e5:42:52:7a:
08:6d:5b:90:9d:d3:b2:5a:cd:e7:96:68:ac:c1:c8:
1e:52:64:73:57:b5:5d:d6:71:69:2f:f1:0f:f6:63:
24:43:9c:97:35:8e:52:bf:ec:60:13:af:93:1d:13:
44:1b:be:46:b3:8f:59:29:c7:c9:2a:58:94:8f:01:
62:0a:eb:f3:93:66:6f:b2:b7:59:9d:5d:c4:c7:0d:
11:3d:f8:57:6e:28:3a:99:46:a7:3e:07:3b:9f:98:
f8:74:f8:e0:fc:4d:1c:e5:68:e9:bd:09:9f:50:a9:
36:50:9f:11:19:ad:17:4a:16:65:f2:ad:5a:be:ff:
d3:69:54:c2:40:68:c9:8f:40:6d:74:93:90:3c:82:
53:cb:fd:a1:79:31:7f:0d:bc:7e:6d:77:e2:c8:a8:
a8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DF:EF:D7:53:39:9D:D3:A6:35:66:14:AF:69:2A:23:4E:98:9B:C6
X509v3 Authority Key Identifier:
keyid:98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:1c:90:41:72:c4:f4:8b:13:df:47:db:1c:ed:2b:32:9a:28:
02:40:b7:5d:b3:cb:33:50:ba:95:9e:88:ee:fc:1d:62:22:c6:
25:1c:57:84:9b:b7:52:66:62:f7:e9:63:64:14:76:cf:5e:24:
25:63:a4:33:cd:96:0d:b8:f3:20:9f:bf:c2:6a:8f:2e:5d:a3:
6f:14:1b:d9:21:15:00:89:4e:06:8a:85:d3:7f:ee:64:96:2d:
72:e7:31:11:32:c9:e2:b9:87:58:78:6b:a0:a7:59:c3:f9:e2:
d8:a6:09:40:53:82:d4:b7:23:27:b7:fc:fd:e2:b4:7a:66:79:
a0:33:3f:66:2b:eb:c5:c3:ac:36:32:38:b5:bf:a6:07:7f:04:
cb:bb:b1:b6:3e:f8:0d:a3:d4:f1:b0:1c:16:d0:15:c1:c8:3c:
9a:2f:c2:31:d1:89:02:fe:f1:68:79:34:ed:6c:79:48:13:1d:
44:d7:09:0a:b8:82:4c:e0:fb:f0:53:5d:1d:be:18:16:02:0f:
ca:1d:54:e1:a5:cf:7b:01:f1:49:41:48:db:8c:c9:c0:8c:f2:
7a:60:94:49:7d:f5:b0:6a:8e:34:ce:25:60:4b:df:fb:65:db:
43:9d:e1:9f:eb:d0:70:59:8a:35:50:cc:b8:1e:44:b5:c9:d0:
83:f4:99:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:03:04 2025 by rpki-client