
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
File: mZujdBECimL7UV3PAozaLcmrydE.mft (raw, json)
Hash identifier: 12mIgqHZXkastjcL+2yUnDuBmnvi9uqwRyJMVche08A=
Subject key identifier: 27:44:8F:B1:D9:A4:9B:D0:1B:C1:DB:9C:C4:B8:D7:4A:80:3F:BD:CE
Authority key identifier: 99:9B:A3:74:11:02:8A:62:FB:51:5D:CF:02:8C:DA:2D:C9:AB:C9:D1
Certificate issuer: /CN=A9184359/serialNumber=999BA37411028A62FB515DCF028CDA2DC9ABC9D1
Certificate serial: 01DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
Manifest number: 01D8
Signing time: Mon 03 Nov 2025 02:43:21 +0000
Manifest this update: Mon 03 Nov 2025 02:43:21 +0000
Manifest next update: Mon 10 Nov 2025 02:43:21 +0000
Files and hashes: 1: mZujdBECimL7UV3PAozaLcmrydE.crl (hash: 9G98G8IYkcTK0zH8hIia7sIJQIdQLyjp0LNetVuuK50=)
2: F27BE0E2E4CC11EDBAFF045BC4F9AE02.roa (hash: FcVq7MapsG0tiRr/INQ1mEf1XPC8HnzEbnMHkTHPq4w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.crl
rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 02:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184359, serialNumber=999BA37411028A62FB515DCF028CDA2DC9ABC9D1
Validity
Not Before: Nov 3 02:43:21 2025 GMT
Not After : Nov 10 02:43:21 2025 GMT
Subject: CN=690816c9-5a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:03:d1:61:6d:c9:cf:40:f3:b6:07:9b:98:b8:
53:4f:59:5b:71:64:0c:c5:64:cc:bb:a7:7d:c4:58:
fc:38:fb:23:67:50:3f:b7:1e:d5:26:f0:33:75:bc:
6b:f9:fc:6d:f4:2a:c1:ed:3a:08:21:3b:f7:18:cf:
9d:6b:b2:40:30:2b:6b:c5:c2:f6:29:55:7c:44:f8:
5d:a7:22:d7:75:c0:f7:c0:c3:9b:e2:5d:6c:50:05:
f3:c6:fb:43:a7:5c:85:0e:6f:93:fe:d9:4d:1f:20:
1b:88:92:a7:62:8b:82:fb:d8:1e:13:da:eb:e5:e3:
66:2f:17:85:88:1c:dd:e3:36:09:3b:2b:92:7f:f8:
f9:68:bd:b9:60:c3:d6:db:45:bb:82:a9:84:be:89:
e1:36:2d:a8:32:e8:4c:bc:51:ec:81:ba:18:a2:71:
98:85:45:af:15:8a:c1:4f:15:d9:5e:b7:c5:d0:01:
76:1d:2b:db:37:ec:24:bd:df:dd:94:49:50:52:04:
12:30:58:c2:25:d7:c0:d2:e6:68:75:e0:20:54:b3:
2d:eb:ef:b1:cf:4f:7b:7e:40:a7:31:de:73:ca:ae:
fd:50:a7:ac:e0:cf:82:27:6f:17:bd:f2:9b:98:5d:
9a:ab:7f:e7:d1:85:3b:a6:ad:b9:40:12:b5:ee:fe:
e4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:44:8F:B1:D9:A4:9B:D0:1B:C1:DB:9C:C4:B8:D7:4A:80:3F:BD:CE
X509v3 Authority Key Identifier:
keyid:99:9B:A3:74:11:02:8A:62:FB:51:5D:CF:02:8C:DA:2D:C9:AB:C9:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:1a:8b:6a:9e:d4:bd:bb:fe:b3:ac:eb:a7:5a:c9:1f:cc:ee:
78:fe:8d:e6:d5:af:b3:9c:7b:1c:ed:de:97:11:5e:54:48:1e:
d9:7f:c0:d6:d2:54:4d:05:d6:64:1d:9b:93:69:c8:33:f3:ec:
af:41:3b:b1:e1:b4:ee:2a:b3:b3:42:ee:3a:26:fe:91:c4:d2:
b1:b6:f5:8d:7a:f6:61:5a:b8:f7:e7:44:47:c9:22:77:cb:fc:
ff:0e:40:0a:19:3e:b6:8d:f6:28:cd:66:b9:b8:af:ed:d1:f0:
bc:0e:cc:22:de:b0:1a:78:8b:68:00:1d:3f:d6:0c:76:e7:ac:
e8:bd:1b:7d:ed:16:9e:31:92:69:99:2d:d6:02:0f:c2:eb:fd:
2d:6b:2d:49:23:e3:7b:5d:a8:7f:b1:75:fb:5a:fe:5a:6c:d9:
b5:69:8e:ce:0d:5d:35:0c:dc:cd:d7:17:06:21:35:4f:d0:35:
b7:e9:fb:5c:ba:6b:97:f1:b1:a6:b7:41:4f:54:38:d6:8b:df:
ab:17:48:4d:22:eb:6d:26:52:28:de:bc:b2:14:74:bb:0f:46:
88:9c:66:fc:4d:fb:85:6c:63:3b:f2:94:c7:c4:9c:34:92:fb:
1f:86:ff:86:29:8d:68:6a:1a:5b:a9:d9:80:16:7f:9a:28:ca:
e0:1c:31:44
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQzNTkxMTAvBgNVBAUTKDk5OUJBMzc0MTEwMjhBNjJGQjUxNURDRjAyOENEQTJE
QzlBQkM5RDEwHhcNMjUxMTAzMDI0MzIxWhcNMjUxMTEwMDI0MzIxWjAYMRYwFAYD
VQQDEw02OTA4MTZjOS01YTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9QPRYW3Jz0DztgebmLhTT1lbcWQMxWTMu6d9xFj8OPsjZ1A/tx7VJvAzdbxr
+fxt9CrB7ToIITv3GM+da7JAMCtrxcL2KVV8RPhdpyLXdcD3wMOb4l1sUAXzxvtD
p1yFDm+T/tlNHyAbiJKnYouC+9geE9rr5eNmLxeFiBzd4zYJOyuSf/j5aL25YMPW
20W7gqmEvonhNi2oMuhMvFHsgboYonGYhUWvFYrBTxXZXrfF0AF2HSvbN+wkvd/d
lElQUgQSMFjCJdfA0uZodeAgVLMt6++xz097fkCnMd5zyq79UKes4M+CJ28XvfKb
mF2aq3/n0YU7pq25QBK17v7kSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdEj7HZ
pJvQG8HbnMS410qAP73OMB8GA1UdIwQYMBaAFJmbo3QRAopi+1FdzwKM2i3Jq8nR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDM1OS8zMzVFNjU2MkU0
QzgxMUVEQkFBQkM1NUNDNEY5QUUwMi9tWnVqZEJFQ2ltTDdVVjNQQW96YUxjbXJ5
ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21adWpkQkVDaW1MN1VWM1BBb3phTGNtcnlkRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDM1OS8zMzVFNjU2MkU0QzgxMUVEQkFBQkM1NUNDNEY5QUUwMi9tWnVqZEJFQ2lt
TDdVVjNQQW96YUxjbXJ5ZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCfGotqntS9u/6zrOunWskfzO54/o3m1a+znHsc7d6XEV5USB7Zf8DW
0lRNBdZkHZuTacgz8+yvQTux4bTuKrOzQu46Jv6RxNKxtvWNevZhWrj350RHySJ3
y/z/DkAKGT62jfYozWa5uK/t0fC8Dswi3rAaeItoAB0/1gx256zovRt97RaeMZJp
mS3WAg/C6/0tay1JI+N7Xah/sXX7Wv5abNm1aY7ODV01DNzN1xcGITVP0DW36ftc
umuX8bGmt0FPVDjWi9+rF0hNIuttJlIo3ryyFHS7D0aInGb8TfuFbGM78pTHxJw0
kvsfhv+GKY1oahpbqdmAFn+aKMrgHDFE
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:25:02 2025 by rpki-client