
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft
File: mAzlu_LPNdYK47ByGKtcqRAULJA.mft (raw, json)
Hash identifier: J2oiwHJKB510cSIXlFXswjLgkYFNdYSPtmWEPM19mXQ=
Subject key identifier: C5:81:D5:D6:35:87:B0:3C:18:C6:14:AE:A7:EF:70:38:67:97:6E:D0
Authority key identifier: 98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90
Certificate issuer: /CN=A91CDBF5/serialNumber=980CE5BBF2CF35D60AE3B07218AB5CA910142C90
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft
Manifest number: 9C
Signing time: Mon 03 Nov 2025 06:21:19 +0000
Manifest this update: Mon 03 Nov 2025 06:21:18 +0000
Manifest next update: Mon 10 Nov 2025 06:21:18 +0000
Files and hashes: 1: mAzlu_LPNdYK47ByGKtcqRAULJA.crl (hash: HdwXoeHRtL1uSk3Aoq9ZHitY2mWkpGDxEhgRe0LVjw8=)
2: EA8CF7A8CB5311EF91F1081BC4F9AE02.roa (hash: KWihNcpG2X05jp7tO5tq+4iVwxhJjazTb7GWdPZJklM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.crl
rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:21:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDBF5, serialNumber=980CE5BBF2CF35D60AE3B07218AB5CA910142C90
Validity
Not Before: Nov 3 06:21:18 2025 GMT
Not After : Nov 10 06:21:18 2025 GMT
Subject: CN=690849df-1036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:02:b5:d3:ee:d2:73:ab:0a:2b:d6:8d:4b:14:
da:a8:79:bb:78:44:c2:a1:60:0b:16:2e:ff:56:ac:
c0:a5:d8:e6:5d:b4:4a:83:c2:7a:12:95:ca:c4:cb:
ac:1e:fe:8b:31:e3:c0:80:41:00:30:99:9f:23:39:
34:8a:62:6d:cd:0c:ee:ab:d7:d5:4b:b3:e3:5f:cc:
40:fb:a8:af:7e:12:c9:36:a8:3e:35:ec:fc:a4:d0:
63:17:7c:23:d5:ec:85:99:57:ba:63:b1:7b:86:f5:
19:2a:10:75:17:fb:2d:98:2b:de:0a:a1:0d:30:e3:
e3:25:9a:20:2b:b3:a8:24:a7:ef:78:ab:73:da:fb:
6b:ee:a2:62:37:98:8c:76:7d:db:f8:de:7b:59:a0:
d4:ae:df:1f:73:1e:82:bb:3a:e1:fa:07:85:ad:10:
f2:4d:31:2f:83:c7:aa:84:1b:1e:d3:88:9d:6e:4a:
15:bb:0b:8b:d2:e1:82:f5:02:26:a0:e4:3d:4a:8d:
52:8a:08:8e:68:e8:b8:62:eb:23:4a:a7:6f:06:04:
72:ee:c5:21:d9:1f:0c:14:3f:92:29:5a:21:66:7d:
db:16:53:c2:4c:46:5e:8e:da:cc:bc:82:53:2e:e9:
ec:da:bd:f3:6e:84:1e:5a:ac:36:3f:c2:fe:32:48:
76:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:81:D5:D6:35:87:B0:3C:18:C6:14:AE:A7:EF:70:38:67:97:6E:D0
X509v3 Authority Key Identifier:
keyid:98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5b:40:10:3f:3f:11:1a:b4:fe:a7:5a:62:f3:15:9b:5a:c4:
25:79:f3:6d:84:ab:9a:cd:9c:e4:9f:3a:a0:08:a7:46:80:af:
1b:2e:68:56:60:88:27:85:f5:bd:68:86:48:b8:f4:c3:34:c3:
40:f5:2a:9d:c5:8c:0e:38:ce:29:57:37:cb:dc:f0:06:ab:fb:
63:dc:0a:82:84:e1:34:86:e8:52:64:53:3a:68:09:e6:9d:59:
23:a8:fc:24:d7:fa:5c:41:79:1c:3a:96:51:3c:60:cd:06:7e:
fd:15:c9:6f:37:3a:92:92:03:7d:69:cb:2c:df:29:61:a7:ef:
d8:61:fd:92:f6:e1:2c:28:8c:2c:a7:33:5d:e2:4f:5d:8d:fe:
8f:25:9f:eb:a1:2a:85:eb:c6:3e:5e:16:ef:48:a6:18:d9:f0:
50:bf:c2:43:52:5e:dd:3d:36:e1:4b:b6:79:fb:25:c0:3f:4c:
31:d1:ac:25:d5:12:eb:bf:45:3c:53:8f:59:53:ee:a5:8e:92:
30:0d:2a:40:cb:f8:37:26:f5:3a:1e:4e:15:8b:d1:41:44:a0:
5f:ef:a6:e1:b1:44:9a:7a:a0:ed:dd:9a:4d:b8:69:13:b0:fb:
72:cb:98:ee:21:3f:79:79:d8:fa:70:2e:d4:b8:0b:b4:ef:73:
db:d8:38:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:23:43 2025 by rpki-client