
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
File: uc1X4v9PWLuVmpVBoxz99ml2GLI.mft (raw, json)
Hash identifier: kXVIjfuSaOt+PpK8VO0txw+5rFAuDLJ/wZ169uhGPpE=
Subject key identifier: 06:E0:02:CD:2C:4E:8E:4B:58:29:EB:52:B2:81:EB:CB:D0:2A:35:5A
Authority key identifier: B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2
Certificate issuer: /CN=A918E023/serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
Certificate serial: 6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
Manifest number: 6D
Signing time: Wed 05 Nov 2025 07:07:46 +0000
Manifest this update: Wed 05 Nov 2025 07:07:45 +0000
Manifest next update: Wed 12 Nov 2025 07:07:45 +0000
Files and hashes: 1: uc1X4v9PWLuVmpVBoxz99ml2GLI.crl (hash: tLtOJL/SK0FHRsuI+cSQEP0z5Jq5SjkV8RUqxBcIvD4=)
2: C420B2B6111D11F0BE9ABA7AC4F9AE02.roa (hash: BmMWgtMQ3PCdQlZ5TlrzvWUUVUt35N0MZwh0nPjZPiY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl
rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 07:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E023, serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
Validity
Not Before: Nov 5 07:07:45 2025 GMT
Not After : Nov 12 07:07:45 2025 GMT
Subject: CN=690af7c2-6256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:b9:4c:cc:e7:2e:b8:01:42:82:8b:7a:c3:
da:16:66:74:d8:8b:2e:e5:6f:be:cb:48:f1:ae:70:
39:c0:83:25:67:de:a2:60:37:a4:ac:16:54:5b:34:
51:0a:8c:3b:8f:9d:9b:78:42:43:14:db:92:16:1f:
67:9a:d5:ed:00:7a:b5:f5:39:12:80:42:74:b9:86:
37:48:ed:ac:5a:52:18:55:c8:b8:d5:d4:c6:b8:e8:
b8:7f:9b:c1:93:b3:b2:d2:7b:7b:10:83:33:5b:99:
70:d9:bb:ac:6b:4d:f6:50:1b:1e:c1:9d:35:f2:14:
0f:28:a1:40:59:c5:fd:22:0e:99:d1:67:13:79:b7:
44:b7:e5:54:8d:e8:70:36:4c:da:c1:a7:aa:2b:ba:
e5:07:b7:07:d5:42:de:bd:e7:14:88:d3:bf:ef:1d:
81:84:e2:b2:7c:15:0e:53:05:eb:ba:1f:b4:a4:1d:
42:54:f5:a7:e8:31:19:1f:10:34:82:53:a9:7e:41:
b7:9f:5b:e6:52:fc:a5:91:c9:4d:3d:ca:36:af:ed:
12:f1:6a:fb:02:98:35:c1:25:18:a6:18:4d:95:da:
72:ec:7c:33:42:73:1d:1a:73:8a:b0:a8:f2:fd:9b:
eb:12:09:5e:44:86:a1:f1:4a:28:af:ae:15:63:18:
0a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E0:02:CD:2C:4E:8E:4B:58:29:EB:52:B2:81:EB:CB:D0:2A:35:5A
X509v3 Authority Key Identifier:
keyid:B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b0:61:52:31:4f:62:27:f6:86:3c:66:47:b8:2c:03:ac:ed:
12:e1:10:17:9d:58:65:51:27:38:8d:18:08:8e:bd:41:c3:11:
bd:2d:f1:62:99:32:58:a1:00:8c:da:68:e3:e7:31:77:18:55:
7d:1a:ed:1f:a1:5f:87:23:aa:9c:82:60:b1:f6:0c:5c:6a:e2:
0b:86:c1:41:43:7b:8e:7e:74:11:e7:bf:e2:44:a0:b0:93:27:
fa:d8:aa:7d:8c:a1:2f:79:cf:c1:4e:64:4a:67:63:46:bc:a5:
f3:b5:40:9b:e5:db:e1:3a:e7:db:4b:9b:5c:59:cf:6e:65:29:
cc:55:37:b8:43:26:3d:e8:ab:ba:1c:05:59:f7:3e:b0:5f:de:
c2:f3:cc:31:8f:93:4a:e9:06:df:9b:a6:a1:80:54:4d:c1:68:
04:8a:aa:32:43:e1:bd:6f:f1:62:00:7e:ea:c3:3a:ff:13:d9:
c2:3f:50:91:d5:97:a3:a4:98:40:7a:67:f1:ac:35:1b:d9:f6:
a8:ea:56:22:25:16:59:64:66:8e:30:59:78:02:17:38:72:ea:
07:81:30:86:48:ba:53:c8:f8:ff:ff:d2:fc:7d:f8:11:ce:a4:
b1:cf:35:8f:30:3c:f7:e1:55:4a:bd:dc:49:f6:69:54:89:c6:
dc:cf:3b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:23:51 2025 by rpki-client