
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
File: Mu8k27J0cpaQRU_8KxGThFGcavo.mft (raw, json)
Hash identifier: 8q60zHbd01+3uUXpDCGUrtXXT3NH84PcTHqpN97Mwm0=
Subject key identifier: 67:23:29:82:C9:77:B7:1D:86:A3:F9:92:53:80:E5:92:5C:2A:5B:C0
Authority key identifier: 32:EF:24:DB:B2:74:72:96:90:45:4F:FC:2B:11:93:84:51:9C:6A:FA
Certificate issuer: /CN=A9181477/serialNumber=32EF24DBB274729690454FFC2B119384519C6AFA
Certificate serial: B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
Manifest number: B2
Signing time: Wed 05 Nov 2025 06:20:10 +0000
Manifest this update: Wed 05 Nov 2025 06:20:10 +0000
Manifest next update: Wed 12 Nov 2025 06:20:10 +0000
Files and hashes: 1: Mu8k27J0cpaQRU_8KxGThFGcavo.crl (hash: eKPQW3ChFqb21pEOFxtW63OBY65ZjKwyfInbaGeWTAI=)
2: 6ABF1108DD0C11EFBD619B85C4F9AE02.roa (hash: 9pqV/7wKXCq4SdHaR69xHgTpPRKIF3LpqAqexsGPQg8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.crl
rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:20:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181477, serialNumber=32EF24DBB274729690454FFC2B119384519C6AFA
Validity
Not Before: Nov 5 06:20:10 2025 GMT
Not After : Nov 12 06:20:10 2025 GMT
Subject: CN=690aec9a-48ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:07:76:52:8b:62:ef:d1:9d:b0:ca:98:a1:
83:fe:0d:f8:39:f9:37:ed:81:de:6e:8c:20:4a:5d:
41:e0:de:60:77:92:89:54:63:16:d7:0a:b0:8d:64:
05:5a:be:41:9c:e3:90:90:37:ca:63:4b:bc:8c:22:
f7:71:9c:ba:ff:03:13:0f:5d:84:a4:95:1e:55:de:
8b:52:18:02:04:55:c2:cb:5d:85:c0:af:35:3c:9b:
98:2e:28:ae:57:88:b0:ef:8c:eb:54:92:63:bc:68:
f4:29:70:a6:b6:8b:09:75:76:11:5f:5c:15:91:58:
45:43:db:c7:81:9a:a0:43:25:0d:94:b5:95:62:47:
f6:1e:3b:00:48:1b:a5:0f:0c:98:37:c4:ec:c9:90:
e0:ed:ad:8f:b4:b7:44:88:a3:0f:10:97:cc:b5:db:
10:b5:d4:a9:38:35:26:bc:d0:13:a4:76:71:64:5f:
18:e3:7d:3e:20:3c:cd:59:4a:b8:a7:e1:12:64:7b:
8e:a8:46:e1:2c:70:c0:9e:34:bb:d9:40:67:69:28:
78:7c:b3:da:86:b0:56:51:ed:d1:f4:fe:06:76:14:
63:1f:7a:e8:7a:cc:ac:87:7c:cd:72:fc:32:d3:e7:
7b:b2:d9:33:4c:e6:ff:82:ef:97:85:10:e4:a6:d4:
d2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:23:29:82:C9:77:B7:1D:86:A3:F9:92:53:80:E5:92:5C:2A:5B:C0
X509v3 Authority Key Identifier:
keyid:32:EF:24:DB:B2:74:72:96:90:45:4F:FC:2B:11:93:84:51:9C:6A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:dd:78:6b:aa:55:9e:f9:a1:7f:7f:82:63:c7:27:83:c8:2d:
3a:cf:52:ff:8d:8e:48:55:80:17:bf:f4:7d:61:ba:5f:f3:ba:
7e:2c:11:67:64:ec:2f:5f:08:2a:4f:70:32:3a:ac:c6:b2:7a:
4c:88:05:eb:4c:eb:a4:1c:71:d6:b9:23:e9:e7:82:37:29:b0:
59:94:fe:04:de:45:a1:8a:77:5c:61:40:a7:32:f1:74:44:bb:
82:02:88:10:c5:a5:37:f4:e4:c3:ac:3b:f2:ac:43:2b:f4:6a:
be:6e:03:3f:d0:df:bf:8f:bd:86:76:c3:2b:1e:35:da:a2:57:
c3:06:f9:19:23:66:8c:a3:25:cd:ee:c6:bd:22:a9:e8:63:73:
a6:cb:9c:07:5b:26:28:40:cd:a4:c3:5e:16:19:ac:4f:18:25:
fa:73:13:28:27:58:3d:c4:4b:41:a9:eb:a2:a4:85:51:ed:3e:
da:95:ba:78:94:6f:e8:44:f2:cc:c8:d0:43:19:7c:03:b0:ee:
bb:46:62:82:bc:d9:7f:a4:8f:78:ff:3c:b1:ff:b8:5f:bb:a9:
ad:c4:43:ac:c4:9a:92:c6:d2:ff:89:df:ce:b2:d6:3b:75:c6:
f8:ab:16:d7:59:ba:2c:f1:8a:47:f8:a5:30:45:67:79:af:0f:
4f:97:c4:96
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODE0NzcxMTAvBgNVBAUTKDMyRUYyNERCQjI3NDcyOTY5MDQ1NEZGQzJCMTE5Mzg0
NTE5QzZBRkEwHhcNMjUxMTA1MDYyMDEwWhcNMjUxMTEyMDYyMDEwWjAYMRYwFAYD
VQQDEw02OTBhZWM5YS00OGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx7sHdlKLYu/RnbDKmKGD/g34Ofk37YHebowgSl1B4N5gd5KJVGMW1wqwjWQF
Wr5BnOOQkDfKY0u8jCL3cZy6/wMTD12EpJUeVd6LUhgCBFXCy12FwK81PJuYLiiu
V4iw74zrVJJjvGj0KXCmtosJdXYRX1wVkVhFQ9vHgZqgQyUNlLWVYkf2HjsASBul
DwyYN8TsyZDg7a2PtLdEiKMPEJfMtdsQtdSpODUmvNATpHZxZF8Y430+IDzNWUq4
p+ESZHuOqEbhLHDAnjS72UBnaSh4fLPahrBWUe3R9P4GdhRjH3roesysh3zNcvwy
0+d7stkzTOb/gu+XhRDkptTSDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcjKYLJ
d7cdhqP5klOA5ZJcKlvAMB8GA1UdIwQYMBaAFDLvJNuydHKWkEVP/CsRk4RRnGr6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTQ3Ny8xMEY5NkU1MkFE
MjgxMUVGOTlFMzk0MjJDNEY5QUUwMi9NdThrMjdKMGNwYVFSVV84S3hHVGhGR2Nh
dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL011OGsyN0owY3BhUVJVXzhLeEdUaEZHY2F2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MTQ3Ny8xMEY5NkU1MkFEMjgxMUVGOTlFMzk0MjJDNEY5QUUwMi9NdThrMjdKMGNw
YVFSVV84S3hHVGhGR2Nhdm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAZ3XhrqlWe+aF/f4JjxyeDyC06z1L/jY5IVYAXv/R9Ybpf87p+LBFn
ZOwvXwgqT3AyOqzGsnpMiAXrTOukHHHWuSPp54I3KbBZlP4E3kWhindcYUCnMvF0
RLuCAogQxaU39OTDrDvyrEMr9Gq+bgM/0N+/j72GdsMrHjXaolfDBvkZI2aMoyXN
7sa9IqnoY3Omy5wHWyYoQM2kw14WGaxPGCX6cxMoJ1g9xEtBqeuipIVR7T7albp4
lG/oRPLMyNBDGXwDsO67RmKCvNl/pI94/zyx/7hfu6mtxEOsxJqSxtL/id/OstY7
dcb4qxbXWbos8YpH+KUwRWd5rw9Pl8SW
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:16:47 2025 by rpki-client