
$ rpki-client -vvf rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
File: cu8y2vToP5AZKWMgh047RFAI7Dk.mft (raw, json)
Hash identifier: dpD8FxUHHytTu0p0ImfPSozMGuNw4T3RH8hs/XyM6R4=
Subject key identifier: E9:2E:01:96:CE:07:4E:68:8C:B2:B1:26:C0:C1:9B:8C:A4:F0:C0:74
Authority key identifier: 72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39
Certificate issuer: /CN=A919ED93/serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
Certificate serial: 0194
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
Manifest number: 018B
Signing time: Wed 05 Nov 2025 03:46:58 +0000
Manifest this update: Wed 05 Nov 2025 03:46:57 +0000
Manifest next update: Wed 12 Nov 2025 03:46:57 +0000
Files and hashes: 1: cu8y2vToP5AZKWMgh047RFAI7Dk.crl (hash: KXRFrQbtiH7HH06GHZ5sBMOE1kq1+6XElDo4IcX0HBc=)
2: 9436AC3668C711EE8C53A031C4F9AE02.roa (hash: 8nvmxVIwac+Dd4D7Yv+aIk8/f+8QK2+2Gm1YJNxdKII=)
3: 94A6144A68C711EE8C53A031C4F9AE02.roa (hash: +fTInFBTWg679k5VOcYrApdvSBqjIbZRDI3BvDZYAvE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl
rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:46:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919ED93, serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
Validity
Not Before: Nov 5 03:46:57 2025 GMT
Not After : Nov 12 03:46:57 2025 GMT
Subject: CN=690ac8b2-05e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:0d:80:ff:99:ac:6c:cb:a5:2e:6d:38:ca:
2b:68:b2:97:d7:d0:1b:c1:18:ae:67:a6:13:22:5d:
d6:89:d8:c2:d1:9e:c5:d9:c7:9f:08:76:8f:68:ec:
48:8f:f0:56:99:70:21:ec:64:44:92:22:d2:9e:bd:
bb:a3:f1:70:43:d1:18:cd:40:38:5a:d7:c9:a0:61:
a2:16:f3:c6:d8:93:a1:38:52:62:d5:55:26:ae:02:
6f:f8:eb:26:19:5e:a0:17:28:d5:41:69:96:c8:e4:
de:7c:df:a4:32:84:2e:77:e0:46:b1:e3:3f:af:9a:
ce:5c:83:f5:e2:70:db:95:f0:6a:36:a2:8d:74:63:
b0:4b:48:b5:16:8e:f0:76:84:86:33:0d:86:05:c5:
92:38:d9:1c:24:f2:f3:a8:3f:31:f3:ce:09:c8:b9:
ec:19:88:97:59:18:ec:f6:9c:68:4b:fe:d2:48:86:
bc:33:2f:db:fa:e7:b5:06:1a:64:7a:40:52:e3:7d:
42:a6:5d:34:b1:81:d7:54:a9:08:4e:08:b6:2b:0b:
06:4f:6f:ca:92:5c:25:74:4f:11:61:3c:87:66:b9:
65:3c:fc:db:79:4e:26:9a:ab:4b:af:8c:dc:23:8b:
ca:04:18:31:6c:f5:0c:21:7b:9f:de:47:c9:72:ae:
b3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2E:01:96:CE:07:4E:68:8C:B2:B1:26:C0:C1:9B:8C:A4:F0:C0:74
X509v3 Authority Key Identifier:
keyid:72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:06:1d:6d:4d:ac:91:1e:84:a2:8a:07:50:26:45:ce:1f:0b:
72:2a:28:86:f0:83:ea:55:72:41:37:a4:b2:07:cc:e0:ed:28:
b8:60:62:93:54:bf:0f:9a:37:6c:1b:ff:fb:0a:c7:fe:7e:ff:
9d:10:f2:7f:a0:2c:95:10:ef:cf:25:6d:87:fc:29:fd:2a:9b:
99:b4:70:8c:15:af:98:58:97:81:0a:31:9c:6d:4b:a6:53:aa:
a9:d8:62:70:a5:74:88:f3:59:6b:5b:59:9f:57:7c:70:c2:e0:
c6:79:62:ab:43:e9:4d:d6:e2:ef:39:e8:f3:fa:70:1c:a4:52:
d9:83:43:0d:30:a8:1c:f0:8c:89:cd:a1:72:a4:de:47:e4:96:
bc:60:41:e1:84:aa:51:a2:5e:c5:24:dd:c1:f2:25:37:98:d6:
bd:a7:63:2d:bf:56:6c:5b:12:24:0a:31:a0:93:1b:8b:28:cd:
ad:ae:28:93:37:07:0a:df:9e:89:a9:98:8e:80:ff:5f:1d:30:
23:c4:dc:ee:e1:84:b4:84:aa:3b:63:cc:1f:42:6d:44:83:0e:
dc:4e:01:ed:27:cb:84:53:60:7e:0b:a5:c2:f9:dd:bd:75:33:
13:d1:63:c0:54:1a:c4:df:df:d6:dd:33:2c:3b:c2:af:da:95:
0c:e3:8b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:45:30 2025 by rpki-client