
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.mft
File: dzzFL61HXymuNv14yBJ3Et_SFUI.mft (raw, json)
Hash identifier: 5xWqnYhQ5PM4//mbAT43GglBgmngYZjB9aCDc0NSUik=
Subject key identifier: CD:C9:0C:4F:7A:17:FD:D8:2F:CE:94:20:FE:96:CF:51:8E:26:E7:DA
Authority key identifier: 77:3C:C5:2F:AD:47:5F:29:AE:36:FD:78:C8:12:77:12:DF:D2:15:42
Certificate issuer: /CN=A9125864/serialNumber=773CC52FAD475F29AE36FD78C8127712DFD21542
Certificate serial: 87
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dzzFL61HXymuNv14yBJ3Et_SFUI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.mft
Manifest number: 87
Signing time: Wed 23 Sep 2026 07:21:53 +0000
Manifest this update: Wed 23 Sep 2026 07:21:53 +0000
Manifest next update: Wed 30 Sep 2026 07:21:53 +0000
Files and hashes: 1: dzzFL61HXymuNv14yBJ3Et_SFUI.crl (hash: SxazXLoH6CMTyt/33i4e44CUrUC2WnXLW8p2p7ZPYJ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.crl
rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dzzFL61HXymuNv14yBJ3Et_SFUI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:21:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125864, serialNumber=773CC52FAD475F29AE36FD78C8127712DFD21542
Validity
Not Before: Sep 23 07:21:53 2026 GMT
Not After : Sep 30 07:21:53 2026 GMT
Subject: CN=6ab37e11-1f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:85:71:c8:d1:20:7d:31:1d:9a:d3:71:08:cb:
e2:7a:da:ef:bb:e6:ac:19:cf:39:32:0e:d6:67:58:
8e:ea:92:49:c1:97:95:a5:40:c4:aa:be:cd:cd:91:
d4:ff:6e:85:65:c3:50:2b:97:37:9c:3f:f7:3c:89:
a9:c4:a4:98:46:08:6f:65:ce:a8:58:1a:d0:a0:df:
dd:46:7a:89:b0:42:03:b1:b5:23:90:f1:16:b6:33:
f5:ab:f0:62:90:57:94:6b:f8:52:36:0c:79:a8:56:
1b:83:ab:37:38:79:c2:1e:a2:95:d3:a9:0b:58:d0:
76:f7:4d:9f:f4:e1:65:6e:70:c6:1c:72:07:34:0f:
13:a8:7a:5d:ad:e8:1b:05:9f:b8:64:98:b3:1f:c6:
e3:54:a5:4a:7a:0a:f4:f0:a5:cb:70:0c:b6:52:9e:
9c:a0:34:05:ae:e4:01:7f:8c:21:99:d7:76:65:7f:
c3:45:05:c2:3a:df:bb:dc:25:f9:6c:12:67:f9:7a:
29:87:48:90:f3:19:6f:9b:4d:c5:de:81:a4:6f:c2:
08:3b:72:91:a5:34:e0:e1:d4:36:9f:da:cb:49:b8:
2e:c4:09:ff:25:95:12:ed:66:a0:68:52:99:4a:56:
a8:06:0e:94:06:c9:75:58:ef:87:c8:ed:2d:23:e7:
cc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C9:0C:4F:7A:17:FD:D8:2F:CE:94:20:FE:96:CF:51:8E:26:E7:DA
X509v3 Authority Key Identifier:
keyid:77:3C:C5:2F:AD:47:5F:29:AE:36:FD:78:C8:12:77:12:DF:D2:15:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dzzFL61HXymuNv14yBJ3Et_SFUI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:73:08:b9:56:ca:9d:9c:28:19:77:2e:4b:15:6b:33:da:8e:
b7:a6:7d:a1:db:fd:4d:10:0c:d1:24:2d:e6:eb:f0:66:d4:f2:
77:9f:1c:b5:e9:fa:e3:73:d2:72:49:73:05:9f:ad:ae:96:61:
11:83:3d:91:cc:a6:44:50:3b:99:5b:e3:b9:73:73:f0:bb:20:
d6:e5:79:07:c9:39:93:49:46:c4:2d:67:f9:0e:42:25:73:21:
00:8a:79:4e:83:c2:31:3e:bd:a4:9a:2e:c3:24:55:1e:e4:85:
07:f8:a5:d2:b8:db:8d:5c:e1:0e:60:50:d4:8b:b5:90:ad:f9:
e5:da:65:23:27:8b:51:d5:8e:8b:51:41:8f:92:e5:eb:e9:d3:
1c:4e:37:2d:7b:87:71:ab:49:6a:f4:74:78:33:4d:5f:c3:a8:
55:30:82:41:6d:a1:6d:f0:8a:7a:46:38:48:d8:e9:61:16:0f:
f2:1f:81:a8:9a:18:c0:de:df:a7:a1:ae:00:a7:13:5e:d3:69:
c4:d6:ef:7d:ef:73:1e:7b:77:64:16:21:3a:3f:e3:e9:83:90:
71:10:b8:32:3c:5f:30:64:ca:d1:15:b6:81:6d:00:44:f2:d3:
f6:86:ec:f3:21:ba:fa:ac:60:20:5a:0f:79:86:7c:87:3b:5f:
7b:be:1b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:54:26 2026 by rpki-client