
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
File: Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft (raw, json)
Hash identifier: 5VmSpDqA6Z1iBeUaL42VgF8sIzFOE+yLxa9iaEhz678=
Subject key identifier: F7:D6:0A:85:40:D8:FC:4E:6E:1B:46:F6:C2:F9:2A:14:85:35:EB:4C
Authority key identifier: 63:FC:2F:5D:E0:94:C8:39:6D:C8:BC:97:44:ED:68:2F:F4:B2:38:81
Certificate issuer: /CN=A9118689/serialNumber=63FC2F5DE094C8396DC8BC9744ED682FF4B23881
Certificate serial: 014C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
Manifest number: 0149
Signing time: Wed 05 Nov 2025 04:28:18 +0000
Manifest this update: Wed 05 Nov 2025 04:28:18 +0000
Manifest next update: Wed 12 Nov 2025 04:28:18 +0000
Files and hashes: 1: Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl (hash: eBAImcgyePAq2UOPg9KevwsgRNVWWgJUYobzRXII4yA=)
2: D1D880A6C4FB11EEA30ECF34C4F9AE02.roa (hash: sXO9LSsf3fJyHZpoHAHnJgUx+BT7oOg1NHM6hli9qcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl
rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:28:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 332 (0x14c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118689, serialNumber=63FC2F5DE094C8396DC8BC9744ED682FF4B23881
Validity
Not Before: Nov 5 04:28:18 2025 GMT
Not After : Nov 12 04:28:18 2025 GMT
Subject: CN=690ad262-3d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:aa:39:c6:e5:36:7b:7b:e6:70:cf:0e:2c:
3b:32:44:65:cb:fc:60:92:a7:e1:b5:ca:da:38:97:
bb:02:54:b8:38:d8:de:41:7b:bf:e3:a3:4b:0a:ae:
72:42:6f:3d:d0:cb:4e:94:9b:93:c7:0f:4c:fb:ca:
a9:84:4f:1a:cd:7a:f0:cc:e6:59:88:4e:c7:4a:c5:
a7:eb:18:01:3e:34:41:6b:7c:14:48:cc:c3:cb:aa:
70:c3:0b:b8:c7:69:c5:e6:ae:2f:19:2d:22:31:e5:
1d:84:eb:e3:c3:84:53:d8:ef:ec:54:76:10:28:f7:
c1:1c:2a:9f:8d:bd:36:50:9e:dc:cc:4e:64:2c:bf:
c1:0a:84:eb:f7:4e:64:c2:5d:ab:74:96:aa:ba:f2:
a3:83:15:cd:0c:81:69:75:ad:c3:8c:31:92:42:a5:
49:a3:d6:b1:9c:fa:59:22:71:a1:2b:69:ba:93:83:
40:2e:3c:f0:1c:15:51:a8:6a:a3:cb:61:15:fa:64:
a5:bc:22:6b:1f:af:4a:31:27:f0:25:5b:b7:87:f9:
7f:12:06:c5:0b:f0:b9:38:05:cc:2e:7b:6f:ad:d7:
41:ed:8b:cd:c7:95:6b:49:08:64:79:6b:47:e3:2d:
34:37:c5:33:4f:11:19:39:bf:7e:06:88:e7:4b:c5:
4f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D6:0A:85:40:D8:FC:4E:6E:1B:46:F6:C2:F9:2A:14:85:35:EB:4C
X509v3 Authority Key Identifier:
keyid:63:FC:2F:5D:E0:94:C8:39:6D:C8:BC:97:44:ED:68:2F:F4:B2:38:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:51:5a:25:af:c4:14:ab:8f:6c:78:07:7b:db:8c:d4:91:e4:
86:9a:f6:19:c6:69:40:b0:4c:0d:4f:7a:a6:f5:93:80:03:53:
9a:2a:10:56:6c:b0:be:ea:f1:4f:8e:af:fd:ee:7b:37:1d:0a:
2a:08:59:e2:7f:c1:1e:e7:2c:4e:7e:1f:d3:e2:db:69:93:eb:
2a:7c:cc:b1:55:25:0c:c6:6d:0f:c4:fc:47:b6:b5:61:e9:94:
db:2f:77:5b:af:54:e7:99:81:02:c3:14:86:5e:8d:6f:d3:e1:
7a:73:9c:cf:4e:02:36:10:b2:4a:53:6a:e2:70:29:a3:d3:42:
6c:54:c1:12:16:73:82:33:7c:50:be:be:65:d3:c9:45:b2:8e:
79:f4:78:35:80:01:fa:62:cc:2b:f8:3d:82:6e:99:64:bc:1d:
44:f5:51:5d:4e:bf:8a:aa:e3:bf:34:c8:ea:97:dd:84:6f:f6:
5a:a4:85:00:ac:6f:c0:cc:8d:06:a6:18:d9:63:4c:3d:84:aa:
b8:7f:f6:26:11:1d:cd:cc:b3:fd:9d:d4:39:92:b2:4d:39:57:
94:4f:77:6e:37:a3:7d:ea:41:a5:bf:fc:82:54:ff:37:02:7c:
57:31:da:07:cb:de:80:3f:6e:4d:bd:fb:cc:20:59:13:a2:af:
e5:1d:bd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:25:44 2025 by rpki-client