
$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
File: ukny4CpjXdB19WQWbxEfX63lp8s.mft (raw, json)
Hash identifier: FQ4F6Y8qaaqwtZqD3EMO2AAwfv3qTmCvprUQBiSi1iU=
Subject key identifier: 3B:7A:67:D1:7D:FD:6D:5E:C8:8E:2C:F6:1F:81:18:F4:8B:61:17:3F
Authority key identifier: BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB
Certificate issuer: /CN=A916988B/serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
Certificate serial: 06DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
Manifest number: 06C2
Signing time: Sun 02 Nov 2025 22:10:10 +0000
Manifest this update: Sun 02 Nov 2025 22:10:10 +0000
Manifest next update: Sun 09 Nov 2025 22:10:10 +0000
Files and hashes: 1: ukny4CpjXdB19WQWbxEfX63lp8s.crl (hash: EIMj/jxIcJQnVInIxDuMrbpAAgxJcmYHkAtLRhWPGUs=)
2: D1B6FD008D6D11EB9DB49A32C4F9AE02.roa (hash: B5LAg04dviX2z0y/fP3YPZo7B9FlYxyAimnZWCXnG6o=)
3: A44DBD8486F811F0BCE74679C4F9AE02.roa (hash: eVxzfgS9cLsPcTnwXfjcMYKtpEZ1POtJ4fcsIyjs2EU=)
4: D24316B48D6D11EB9DB49A32C4F9AE02.roa (hash: bQSq5ulDmleOdsxLvtgc5ASW2V63/ouOWZ5o5ZVuoR4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl
rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 22:10:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1754 (0x6da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916988B, serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
Validity
Not Before: Nov 2 22:10:10 2025 GMT
Not After : Nov 9 22:10:10 2025 GMT
Subject: CN=6907d6c2-b978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f3:3c:b7:b1:c9:8f:64:77:ad:58:50:d9:4c:
df:9f:cb:bc:61:a4:db:64:05:fc:dd:5d:69:fc:5f:
73:24:cc:0d:87:eb:70:34:02:b2:f9:c0:64:9a:f2:
87:93:79:85:ea:8d:4c:eb:c4:d5:48:36:af:b0:b3:
43:04:43:dc:d1:ae:b4:42:97:5d:15:a1:62:44:20:
9e:a0:29:32:a6:41:df:79:a6:fa:ef:9e:45:5e:14:
95:1e:0b:ca:62:5a:f2:15:17:3c:19:49:4b:3e:c5:
fd:a7:fb:a6:1f:2c:2c:ac:3a:56:11:2b:58:ad:53:
33:da:83:d4:57:47:03:d2:f1:40:b5:e5:82:82:5a:
2b:2c:be:9a:b7:a2:47:79:2f:a4:f9:f6:16:fd:b6:
63:e4:36:05:06:04:62:9f:1c:d9:5a:4e:f5:f0:18:
e0:b8:e9:44:be:0c:48:cc:46:1b:0b:54:61:15:63:
7b:65:28:d1:a3:b1:ea:79:d7:41:18:14:ad:78:e9:
b0:e6:e7:4f:80:38:5a:19:ce:ac:97:4d:5e:d7:93:
55:7d:6a:e3:39:19:fa:6f:18:10:ff:a9:b2:0d:66:
7b:1f:b1:ca:1a:77:8d:07:54:fa:c2:f4:f2:93:6b:
50:ca:3d:9a:27:62:70:9e:43:98:ea:0f:88:6c:dd:
63:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7A:67:D1:7D:FD:6D:5E:C8:8E:2C:F6:1F:81:18:F4:8B:61:17:3F
X509v3 Authority Key Identifier:
keyid:BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:31:60:bf:c3:c5:e8:55:58:0c:50:d7:c3:3d:02:b5:cb:5f:
dd:3c:4f:8a:fe:0a:e0:a9:97:be:e1:8c:10:49:25:f1:6a:bd:
2a:88:35:cb:17:b4:8d:a3:08:4a:22:8a:55:74:c4:1f:af:d6:
21:e2:8d:c6:71:df:94:25:ad:a6:10:0e:7b:4b:3e:f3:7d:33:
74:0d:82:14:ba:9c:4c:51:d6:08:ac:b9:ad:00:96:ae:82:c4:
a4:8e:5e:dd:e1:43:bf:c8:7b:2a:e6:9f:26:98:ff:0c:7f:e9:
41:64:30:9f:1f:52:9c:a0:41:b2:5d:b9:d0:50:17:dc:1c:ef:
6d:f6:84:87:c2:25:d1:38:a3:b9:18:24:4b:e5:4a:db:91:a2:
0a:54:e3:fe:31:fb:70:73:0e:a3:82:5e:ba:2d:b6:6a:45:82:
c3:64:7a:0d:ff:29:96:b2:27:2b:76:bf:cd:50:15:6f:2e:f0:
a7:6e:e2:e4:a1:39:3e:aa:bc:6f:a9:e8:b7:a6:1d:2e:cd:00:
a7:56:a8:dd:4b:0c:59:3c:0a:50:8f:c9:da:79:f7:2d:f1:8b:
ea:ab:65:dc:c9:6a:5f:ba:1b:7b:29:1d:54:f5:a5:1a:aa:18:
5b:2d:b0:91:ac:3b:a5:84:d9:a5:f5:f2:ee:dc:0d:79:f2:64:
24:e9:4e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:20:49 2025 by rpki-client