
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
File: 9HpCypKdg34XkyvKB9ZfgiyWRMs.mft (raw, json)
Hash identifier: RBmdr1L0Bs5/ks7iTKhL7t6ZMBt20r9wQy2sw0vMPC4=
Subject key identifier: 02:A8:17:28:39:08:88:73:29:7B:9F:D8:39:09:DF:D4:DE:A8:24:AA
Authority key identifier: F4:7A:42:CA:92:9D:83:7E:17:93:2B:CA:07:D6:5F:82:2C:96:44:CB
Certificate issuer: /CN=A9169A9C/serialNumber=F47A42CA929D837E17932BCA07D65F822C9644CB
Certificate serial: 0153
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
Manifest number: 0150
Signing time: Mon 03 Nov 2025 03:19:08 +0000
Manifest this update: Mon 03 Nov 2025 03:19:07 +0000
Manifest next update: Mon 10 Nov 2025 03:19:07 +0000
Files and hashes: 1: 9HpCypKdg34XkyvKB9ZfgiyWRMs.crl (hash: QI66TyC1xhps3oY4+4XOpsa18K5Zchgsh9b8BRBSBP0=)
2: 183B0B384E6A11F08A1BF84DC4F9AE02.roa (hash: Dmmpxo/YJEMbai3LZXF50f2qPKmpjF90qTq1CudRiYE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.crl
rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 03:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169A9C, serialNumber=F47A42CA929D837E17932BCA07D65F822C9644CB
Validity
Not Before: Nov 3 03:19:07 2025 GMT
Not After : Nov 10 03:19:07 2025 GMT
Subject: CN=69081f2b-0f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:da:e4:d2:2f:45:07:3e:85:dc:18:ff:97:
de:5a:86:bc:90:f6:2f:c2:9f:83:7b:d3:04:78:6a:
a9:78:5e:98:32:75:bb:48:57:1f:ef:7d:5b:e5:8f:
e8:13:26:f7:d5:f8:34:c6:fb:c6:94:75:81:be:7e:
b0:d4:eb:4d:cd:0c:09:b2:ca:b3:25:c3:0c:e3:4c:
6e:f8:8d:3b:40:57:98:39:4d:de:5e:0a:d2:c1:b2:
0e:98:4e:7c:4a:15:5a:3a:ad:7d:81:e2:de:cc:1d:
83:fc:33:63:1d:25:93:c2:13:0f:2b:80:b3:f1:46:
3c:4d:6a:0a:87:10:82:c4:7b:c4:c9:44:9b:28:f0:
41:01:3f:bb:db:34:91:13:d7:8d:09:92:67:d9:90:
f5:40:40:0d:4b:11:9c:a9:67:73:22:7f:80:d1:6e:
6c:21:9a:3e:ff:96:68:64:a5:43:60:10:a4:cb:f6:
8e:17:94:98:d6:c7:50:0d:69:49:fa:b6:c9:3a:58:
ae:69:b9:28:4a:74:ff:bc:0e:cf:a6:71:82:77:15:
8b:92:f0:be:ae:86:60:a3:ca:2c:ee:72:9e:46:b2:
8a:b3:46:a9:18:98:e5:41:9a:2f:45:f3:68:ca:65:
a3:4a:75:b5:b3:65:13:ef:b1:d1:4c:66:75:b1:ff:
9e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A8:17:28:39:08:88:73:29:7B:9F:D8:39:09:DF:D4:DE:A8:24:AA
X509v3 Authority Key Identifier:
keyid:F4:7A:42:CA:92:9D:83:7E:17:93:2B:CA:07:D6:5F:82:2C:96:44:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:ea:34:13:ba:31:1d:78:97:0e:ad:45:1e:00:3f:37:b0:5b:
85:e7:46:0f:04:a4:08:3d:da:35:cb:e5:71:c5:29:2a:83:ca:
4c:79:c0:e3:23:b6:5e:4f:1b:ff:d8:42:62:f1:2b:e8:53:e7:
2a:dc:2d:0a:38:fe:18:8a:23:7a:ff:af:d2:89:5f:37:d8:6e:
f9:64:cd:cd:7c:29:38:1f:24:de:91:da:0a:1a:fb:59:39:13:
18:4b:1c:29:5d:25:74:0e:5a:5c:1c:9f:d6:81:fa:eb:e6:d3:
d9:95:17:10:68:40:50:95:2b:09:2d:e2:19:a1:bb:87:42:75:
75:0e:ad:44:d9:d9:54:a2:ba:b0:fe:6f:cd:7b:3c:73:2f:dd:
86:99:ea:c7:81:c8:58:04:0f:cd:c7:fc:31:69:f2:f9:b2:9e:
17:94:7b:ca:c0:1b:c6:80:5d:53:e5:15:3b:a1:b9:b0:d5:13:
e5:5c:ea:b8:3b:a7:b3:9f:0e:fb:00:73:1b:22:be:05:4f:eb:
52:f8:f6:98:68:07:6a:91:43:37:54:4d:e9:b5:c7:60:c4:65:
76:fc:d0:e0:29:f4:f0:6b:7c:21:56:87:12:50:5c:ab:2d:75:
a3:33:78:44:ce:fc:cc:83:a4:d0:1d:b5:fe:ae:11:64:f9:b2:
a5:e1:66:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:15:49 2025 by rpki-client