
$ rpki-client -vvf rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft
File: yq12WnMFvBUlSxWyW1vTm2Oow68.mft (raw, json)
Hash identifier: LE4A+L/9enHo9aW4PfE9owSZjGqLv38SY0VIZBYgtpM=
Subject key identifier: C4:62:B7:C8:77:99:4C:5C:13:70:81:9F:C8:DC:C1:D6:5C:B1:79:AD
Authority key identifier: CA:AD:76:5A:73:05:BC:15:25:4B:15:B2:5B:5B:D3:9B:63:A8:C3:AF
Certificate issuer: /CN=A911082E/serialNumber=CAAD765A7305BC15254B15B25B5BD39B63A8C3AF
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft
Manifest number: 37
Signing time: Mon 03 Nov 2025 07:34:06 +0000
Manifest this update: Mon 03 Nov 2025 07:34:05 +0000
Manifest next update: Mon 10 Nov 2025 07:34:05 +0000
Files and hashes: 1: yq12WnMFvBUlSxWyW1vTm2Oow68.crl (hash: /mlf9kLV0llH/movAKj720CusX0tF5H4AwLx64P0hBA=)
2: 2CD74E4E66E311F08F05EC49C4F9AE02.roa (hash: 8+dSzRSc1+OXhRbW6N90YyrDk4oOdvcvAyZdFxbaVw0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.crl
rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 07:34:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911082E, serialNumber=CAAD765A7305BC15254B15B25B5BD39B63A8C3AF
Validity
Not Before: Nov 3 07:34:05 2025 GMT
Not After : Nov 10 07:34:05 2025 GMT
Subject: CN=69085aed-fc36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:21:17:a2:87:3c:ef:a6:db:7e:08:d0:ac:2c:
a4:97:e9:f2:92:a1:01:be:d8:38:21:69:c5:6e:65:
bb:64:c3:00:cf:f8:16:4c:74:64:aa:45:db:da:c8:
a5:d9:ca:9b:a3:b6:04:a6:68:75:2e:b0:b7:15:f1:
9b:ea:00:b6:29:73:73:22:2e:ea:37:eb:d5:7e:62:
07:b3:b9:75:8d:a6:10:17:39:6b:a7:da:59:53:17:
92:a3:ef:a1:24:0a:47:ad:e8:3a:d7:87:22:cf:1f:
56:e1:4d:48:65:4d:0a:3f:97:8e:09:71:ac:bd:c4:
ae:69:d7:81:b4:00:de:27:b3:5a:df:c0:a4:4c:e6:
fe:84:1c:8b:72:0b:7f:2e:2f:99:1c:86:10:07:5c:
e4:35:6c:c0:5c:79:1a:f2:1b:d0:bc:97:7c:6e:c7:
a9:2c:34:db:33:fe:56:cb:5b:ab:e1:00:80:fe:7f:
dc:99:00:7f:36:f0:c1:92:13:ba:01:9a:ee:ec:fc:
ed:15:2b:6c:53:21:39:31:e5:0d:11:e7:98:e2:02:
d1:fb:79:19:57:b1:9f:78:b3:d6:c2:c2:cf:c2:62:
ac:49:77:6c:74:81:65:fc:b4:f7:74:9a:7e:bb:b8:
e7:6e:73:da:a2:42:2c:d0:78:49:9d:6a:51:1e:a8:
98:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:62:B7:C8:77:99:4C:5C:13:70:81:9F:C8:DC:C1:D6:5C:B1:79:AD
X509v3 Authority Key Identifier:
keyid:CA:AD:76:5A:73:05:BC:15:25:4B:15:B2:5B:5B:D3:9B:63:A8:C3:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:40:b7:a4:12:7e:67:c4:76:63:fd:2f:3e:91:1b:2f:8f:9d:
b0:96:30:1e:5c:d4:0c:91:7f:f8:84:1b:de:79:cb:1c:11:42:
d2:56:2c:88:3f:86:4f:31:c5:73:b6:9e:5f:ad:e2:d4:c3:23:
d1:dd:8b:db:7d:8b:fd:45:15:45:83:01:82:3d:a4:f8:bd:90:
da:3c:23:ef:dd:2a:49:6a:b7:03:0c:e4:22:30:27:db:f9:e1:
25:1c:b7:2e:55:36:49:b8:dc:72:f1:48:f9:7d:6f:fb:b6:36:
0f:c3:c0:8d:20:c2:b2:8e:6e:08:ff:80:96:fb:4f:0c:2f:3a:
bb:b5:ca:b6:02:07:75:0c:2b:57:73:9d:0b:5e:e3:2d:f2:e3:
7f:ad:eb:f5:aa:0e:38:8e:3f:2c:d0:e6:29:58:5f:6a:2f:74:
13:a8:22:2f:0d:d4:f2:5c:43:ab:47:2b:4b:81:ef:dd:48:a6:
bf:c6:d1:f0:ec:af:3a:64:31:b4:67:bb:4c:68:4b:ac:fd:09:
06:cd:88:6a:79:80:c4:d2:0d:1d:d3:7d:c3:00:e4:59:f7:8e:
3a:9d:43:ce:16:c3:4e:ff:cc:36:4d:62:6d:34:d5:f4:99:97:
c0:2e:e4:3a:c5:4f:4f:42:ad:bf:cc:7c:1a:9f:ea:73:66:db:
fd:af:1c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:00:38 2025 by rpki-client