
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.mft
File: dzzFL61HXymuNv14yBJ3Et_SFUI.mft (raw, json)
Hash identifier: fCcuKzRF3Enh0z0pk7Q6f06e3UodIRV6l/vGcZV7wQA=
Subject key identifier: 57:B4:2D:82:9A:6C:9A:3F:A6:BC:98:8A:A8:6B:DC:85:10:E7:60:22
Authority key identifier: 77:3C:C5:2F:AD:47:5F:29:AE:36:FD:78:C8:12:77:12:DF:D2:15:42
Certificate issuer: /CN=A9125864/serialNumber=773CC52FAD475F29AE36FD78C8127712DFD21542
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dzzFL61HXymuNv14yBJ3Et_SFUI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.mft
Manifest number: 66
Signing time: Thu 23 Jul 2026 09:56:38 +0000
Manifest this update: Thu 23 Jul 2026 09:56:38 +0000
Manifest next update: Thu 30 Jul 2026 09:56:38 +0000
Files and hashes: 1: dzzFL61HXymuNv14yBJ3Et_SFUI.crl (hash: NhVbDV/kFa03Q8NOtDp+lxYYKxne5E+2gY/GZx3k4tY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.crl
rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dzzFL61HXymuNv14yBJ3Et_SFUI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125864, serialNumber=773CC52FAD475F29AE36FD78C8127712DFD21542
Validity
Not Before: Jul 23 09:56:38 2026 GMT
Not After : Jul 30 09:56:38 2026 GMT
Subject: CN=6a61e556-1ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:53:ef:d7:7f:00:3c:9f:0b:8c:04:38:1f:b0:
3b:4b:33:99:ab:e0:34:45:2f:99:bb:b7:57:6d:78:
b5:21:dc:52:4b:9e:e6:2b:f4:25:3d:0c:2f:0f:4d:
44:f2:7d:3b:29:98:4d:50:7b:08:9f:f0:18:8f:86:
a7:a0:6a:06:e1:93:70:bf:a0:f1:06:1b:31:b8:a1:
cd:b1:23:49:61:fa:cb:1a:5e:84:fd:f0:2f:4d:7c:
b8:a6:81:59:14:38:8c:2a:66:3f:a6:c7:36:27:d3:
a9:0d:cb:2b:09:88:f5:42:cb:d8:08:85:fb:1b:a1:
a0:b7:c3:8b:5e:d7:98:8c:17:83:c1:12:82:4e:12:
6c:32:f3:52:8f:c9:95:2c:2b:c7:d3:e3:9b:02:a6:
da:f1:b2:61:b2:6e:04:9b:ca:ad:0b:f2:62:b5:cd:
5b:a8:18:70:ac:de:fa:42:c9:3d:21:e2:23:5c:17:
1c:ce:e3:6e:d0:4f:45:62:09:42:b6:1c:91:21:92:
2d:e7:b3:de:1e:cf:6e:05:96:75:09:c8:17:f8:20:
57:c1:ee:6a:37:c1:02:3a:c4:81:fb:e2:f9:ee:43:
57:3e:c1:91:95:bc:37:8f:e9:3c:9b:0c:b6:d8:ef:
2b:6b:3e:a7:84:64:db:73:f0:2f:24:b6:ed:6c:44:
c4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B4:2D:82:9A:6C:9A:3F:A6:BC:98:8A:A8:6B:DC:85:10:E7:60:22
X509v3 Authority Key Identifier:
keyid:77:3C:C5:2F:AD:47:5F:29:AE:36:FD:78:C8:12:77:12:DF:D2:15:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dzzFL61HXymuNv14yBJ3Et_SFUI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2f:ec:6f:3c:48:97:a0:5e:ed:cd:ac:3b:6f:7e:ce:ab:64:
24:b3:78:68:6b:9a:e7:db:c8:2a:8d:26:2f:df:2b:5f:d7:70:
f9:9c:fc:b5:0a:28:de:65:27:6d:25:f9:50:14:28:a8:f4:3c:
cd:77:15:67:68:80:d7:f0:fa:82:90:0e:41:e4:4a:da:e8:52:
ba:af:66:59:fd:3e:72:c3:f9:c0:73:14:92:30:07:9f:ec:f2:
6c:74:e7:c3:bf:40:55:93:61:22:97:77:a7:b0:c5:c4:fd:d4:
83:c4:5b:a4:33:e3:b7:30:94:6b:7a:38:39:e5:66:b2:b5:a2:
e0:c7:1c:3a:72:21:13:6f:c3:2c:37:95:e1:69:5d:7e:36:d7:
68:d4:d4:e0:e9:c3:f3:4f:86:1d:20:b0:b5:bf:eb:9f:01:26:
4d:44:14:5b:54:f6:a6:55:02:43:4c:06:36:9a:18:2b:80:41:
d6:8a:8d:77:06:62:76:1c:4d:13:3b:fa:f4:38:d0:25:7f:e1:
41:39:ff:33:41:7c:ce:c0:27:e7:43:c2:af:95:28:ef:18:90:
31:39:17:eb:71:5d:79:68:6e:6b:67:9f:9b:8c:e2:78:47:09:
2c:e8:22:fe:08:ff:6c:1c:f9:6e:bc:44:67:04:5f:13:d4:85:
48:ba:eb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:19:13 2026 by rpki-client