
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft
File: ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft (raw, json)
Hash identifier: VOBM3QrZAt1gCoGtVSIiDagbS7jxGRzgNLGNvMEZ3YI=
Subject key identifier: 18:86:13:97:CA:F0:81:E1:6D:71:59:B3:7E:A4:3A:59:E9:B4:14:D4
Authority key identifier: CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8
Certificate issuer: /CN=A9113683/serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8
Certificate serial: 0921
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft
Manifest number: 090C
Signing time: Tue 04 Nov 2025 20:24:39 +0000
Manifest this update: Tue 04 Nov 2025 20:24:39 +0000
Manifest next update: Tue 11 Nov 2025 20:24:39 +0000
Files and hashes: 1: ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl (hash: fJRlcIJYadEUJMJ1aEdkBtj43kFa0v1lgZeiSslibpg=)
2: E43CFABEB67611ECACB17C42C4F9AE02.roa (hash: xFhwmyCR50XOerYq8iSgMgO+SIsbHjR9sIw6IGAYvWU=)
3: A778E94E598911EBA7B14777C4F9AE02.roa (hash: Z21NxB4s+kOX44LQC1mykWpLjv30/E11cYoVZ/qqS00=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl
rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 20:24:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2337 (0x921)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113683, serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8
Validity
Not Before: Nov 4 20:24:39 2025 GMT
Not After : Nov 11 20:24:39 2025 GMT
Subject: CN=690a6107-72dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:19:93:1e:e3:7c:ba:1a:f6:95:e4:84:22:87:
a6:bc:14:a1:56:5e:1b:3e:4a:d5:2a:a1:e5:71:58:
30:64:ff:97:33:ec:5e:66:fc:3d:86:54:bd:1b:6d:
8a:36:3c:b4:8a:b6:c2:e4:49:4c:19:39:2b:ac:cc:
68:ea:cc:93:7a:78:aa:f6:96:53:ae:a4:48:a3:af:
a4:cf:2e:61:f8:93:e6:23:be:27:db:80:da:6f:91:
5d:d6:7c:85:83:d2:8d:3a:28:9a:d1:24:cb:31:1d:
bf:78:a1:75:a6:25:5b:76:6c:ca:5c:20:7a:9b:ba:
f6:d5:6c:7e:bf:38:fe:6c:bb:18:51:9a:da:34:db:
09:bc:f2:31:9d:6e:0f:ff:70:d7:ce:ed:aa:1d:92:
16:53:e3:e9:5a:0f:cf:5a:b2:73:6b:1b:b2:45:cf:
75:0e:ff:bc:15:94:a1:40:bc:73:57:40:03:f6:3a:
6a:54:e2:3f:1e:65:2d:a4:b1:07:6e:3b:50:a8:be:
6d:70:fb:d8:71:58:06:32:ef:74:28:59:1b:fa:bb:
fb:2d:ef:d2:d8:92:55:fc:a6:b5:ff:c9:90:0c:97:
1d:e1:89:14:d0:37:6d:ed:44:5c:9f:28:84:2b:42:
4b:cd:05:19:f1:74:a0:77:aa:c0:03:25:6a:14:b7:
1f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:86:13:97:CA:F0:81:E1:6D:71:59:B3:7E:A4:3A:59:E9:B4:14:D4
X509v3 Authority Key Identifier:
keyid:CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:ab:c6:44:60:d5:8f:8b:65:29:98:ea:34:f0:62:eb:ac:ee:
f4:82:8d:9b:5d:ba:01:a4:d2:49:14:96:c7:72:3c:7f:87:eb:
5c:74:2b:52:b0:0d:5d:6d:e3:2d:da:4e:f3:ee:88:6f:6f:45:
7c:d1:3a:1c:cf:1e:97:98:d5:67:67:b5:85:2f:e1:3c:4a:a4:
d9:35:0b:16:b3:97:ec:73:8e:f3:f2:be:da:80:bd:94:36:dc:
95:b5:29:2a:ec:68:f3:10:c3:3d:d3:f3:15:13:04:d8:71:ce:
ab:48:cc:ce:d1:31:19:d9:f2:2f:3b:ec:51:bc:2c:00:c2:ae:
25:d3:30:1c:db:05:12:62:61:1f:a1:3b:3b:df:a7:03:e4:da:
81:62:3f:c2:78:b1:bf:7c:e0:ff:85:23:f9:02:84:aa:29:36:
47:07:10:e6:cc:ac:f3:ff:93:c1:53:dc:e6:57:56:fb:1d:60:
13:72:ca:f3:e6:32:b2:c3:39:f7:b0:20:93:a0:1f:a8:1f:b4:
9a:e0:aa:81:59:ba:55:44:67:58:cc:8d:cf:c9:e6:9f:e4:09:
5d:3e:c0:c8:63:91:c9:1a:f0:86:42:f7:66:d4:cb:34:e8:33:
7a:01:88:5f:91:ce:64:7a:bc:05:59:88:a2:93:90:d3:80:6d:
2d:33:27:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:20:47 2025 by rpki-client