
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft
File: _y7elNMHvCOJpLc5WSplf3FhzKI.mft (raw, json)
Hash identifier: by4oW4oYJ8Jx+W7oi9seGN7lF59wc8mgHbvvisBX+Es=
Subject key identifier: 85:5F:E2:DA:87:10:19:17:44:3C:08:CC:1D:5C:94:4A:8F:24:E8:95
Authority key identifier: FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2
Certificate issuer: /CN=A911A7C2/serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2
Certificate serial: 0172
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft
Manifest number: 016C
Signing time: Mon 03 Nov 2025 03:55:04 +0000
Manifest this update: Mon 03 Nov 2025 03:55:04 +0000
Manifest next update: Mon 10 Nov 2025 03:55:04 +0000
Files and hashes: 1: _y7elNMHvCOJpLc5WSplf3FhzKI.crl (hash: F3akG98xae6FywsQA4FEL6MSsT4Gk19AAyOVnscVbbM=)
2: BFA5084C8E9011EEAD56911CC4F9AE02.roa (hash: fV5G2JHx/0fBFcbcRO1EqGSRjg68YJvhatHDOdfRaJ8=)
3: 020CCB128E9011EEB7C5651BC4F9AE02.roa (hash: Ftqlgd8k9h+7jvDiAqF4wkjpcUSN8GhKRQccLRNHlws=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl
rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370 (0x172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A7C2, serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2
Validity
Not Before: Nov 3 03:55:04 2025 GMT
Not After : Nov 10 03:55:04 2025 GMT
Subject: CN=69082798-449b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:7e:8a:94:fc:db:9a:19:26:1c:8e:49:7e:
0b:b2:28:21:9d:40:af:74:29:5e:c1:24:be:c2:69:
07:87:45:ad:54:b8:46:eb:70:13:3d:21:ff:92:f4:
de:36:24:71:ac:08:94:45:bb:a6:da:cb:cf:6d:cf:
dc:4f:05:73:88:1d:1d:37:db:33:a7:1d:fa:a8:31:
a8:e8:25:e4:d9:7b:59:47:20:89:a7:cb:1d:51:fd:
cc:96:98:db:2d:89:61:57:56:c3:19:21:77:20:cd:
a0:d1:2e:7e:9e:74:e8:8e:35:2c:06:14:7c:49:ae:
f1:9f:ef:85:5c:fd:af:e7:80:2d:29:7c:ba:44:86:
a8:17:12:25:dc:4a:8a:3c:ef:4d:af:a6:80:20:31:
83:58:6e:42:67:d0:f1:3d:af:e1:d0:97:ab:2f:e3:
40:a7:17:47:80:86:93:97:7e:a3:16:1e:06:73:9e:
6a:41:92:e4:5a:7e:5f:eb:76:d4:2a:fc:a7:2c:de:
5a:a6:dc:e0:a3:da:44:b7:78:92:89:d8:a0:bd:bc:
67:35:56:b4:e7:26:1f:bc:46:10:46:7e:7f:2d:81:
12:05:da:4a:fc:97:d0:a4:d0:3a:c3:93:ab:6f:d8:
60:b5:40:b9:df:25:04:7e:aa:a2:ec:48:c7:67:fc:
34:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5F:E2:DA:87:10:19:17:44:3C:08:CC:1D:5C:94:4A:8F:24:E8:95
X509v3 Authority Key Identifier:
keyid:FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:dd:ae:43:d7:4e:a2:f7:d4:5d:d0:6e:5b:6c:4d:ad:38:b5:
f6:23:64:ab:b6:69:da:a0:1f:dc:5c:c6:97:cd:54:40:e0:e6:
0e:4d:39:40:e3:12:bd:2b:ec:a1:3a:a8:c9:2a:1b:78:0d:13:
a1:8d:ee:be:4c:a9:8e:d0:ab:2c:dc:d4:88:2f:73:4b:d1:e6:
e3:d1:65:c5:01:b0:b0:ab:86:e8:26:be:21:bc:e8:5a:a3:b9:
cf:f4:10:37:c8:ee:d4:a6:ff:c0:29:c6:ef:c7:c1:7c:5e:df:
9d:b1:e9:ae:69:1f:d0:e3:d7:28:90:8a:c5:9f:e4:9e:06:44:
cd:9b:c5:92:a6:d4:de:cd:20:5d:25:48:af:6a:7d:5a:38:f1:
4a:57:ff:b7:40:12:b2:5f:66:75:03:d3:6a:68:ed:7c:51:59:
5b:5c:89:81:c8:13:c8:79:a6:48:b9:72:94:49:52:e4:08:4b:
f1:7d:0a:d2:e2:05:e0:05:e6:e1:dd:a7:0c:02:5e:f8:5c:ca:
39:3f:d2:9c:f8:43:b0:82:cf:06:49:a5:cb:99:ec:b0:83:fd:
cc:10:2e:42:19:71:8a:94:18:78:ed:a5:66:89:e0:51:65:36:
b8:6c:29:32:a6:82:be:6d:b9:91:ac:33:de:bc:b5:a1:90:e1:
a5:0d:0b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:04:55 2025 by rpki-client