
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
File: YqwbuVgKcRmBnntrbrLDUVNHh_0.mft (raw, json)
Hash identifier: Xgf30z9cFzkHMfrdj6Zmx+pGb3XR89hap4orUq+I1fU=
Subject key identifier: A5:8D:4E:13:4A:D7:95:51:F5:73:D5:ED:4B:98:FF:D1:CB:C6:C8:C2
Authority key identifier: 62:AC:1B:B9:58:0A:71:19:81:9E:7B:6B:6E:B2:C3:51:53:47:87:FD
Certificate issuer: /CN=A911DD08/serialNumber=62AC1BB9580A7119819E7B6B6EB2C351534787FD
Certificate serial: EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
Manifest number: E9
Signing time: Wed 05 Nov 2025 05:34:01 +0000
Manifest this update: Wed 05 Nov 2025 05:34:00 +0000
Manifest next update: Wed 12 Nov 2025 05:34:00 +0000
Files and hashes: 1: YqwbuVgKcRmBnntrbrLDUVNHh_0.crl (hash: HZuOpR+59JOTxh0gTZy6ICahpa8f/ucLkuvtx1UOj8g=)
2: 652283665B1A11EFA78B847EC4F9AE02.roa (hash: cRgznzypgNObdJ5+nUBdFPZbJ/XSHjedbIfP0KuyG4Y=)
3: 474934DE5B1A11EFBF0E1F7CC4F9AE02.roa (hash: Po3+3jwZqbergErT/CE07CzYXSwWNnVs3V/GDhF2/Rc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.crl
rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DD08, serialNumber=62AC1BB9580A7119819E7B6B6EB2C351534787FD
Validity
Not Before: Nov 5 05:34:00 2025 GMT
Not After : Nov 12 05:34:00 2025 GMT
Subject: CN=690ae1c9-158f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:66:fc:fe:f4:31:63:db:52:79:82:fe:9f:6b:
58:e8:73:fe:12:89:48:79:bd:a8:5a:c9:8a:d5:85:
1b:7d:ea:58:d7:45:93:73:62:02:2e:86:d4:8e:66:
b0:ad:3f:81:ca:8a:1a:e6:ba:ad:c7:01:c0:51:d7:
6d:97:57:22:91:fd:66:84:97:17:69:20:a7:a9:31:
7f:52:c8:53:0f:c6:e3:dc:3c:4a:37:bf:1b:1b:52:
78:ad:1e:a4:92:5f:da:96:1f:29:49:b4:16:b5:74:
45:4c:3e:4f:65:49:22:ec:56:8b:95:cb:59:de:05:
e2:a8:5a:dd:f3:e7:dd:a0:c7:ec:8e:b0:47:ed:11:
55:b0:92:f4:ad:70:33:90:7d:94:ca:ac:27:1d:af:
a6:7d:13:2b:dd:bf:dd:c8:0c:2b:70:92:36:93:30:
42:f1:20:de:8a:e4:5a:f1:f7:53:0e:21:30:1b:00:
7d:17:64:40:d9:8d:a0:03:15:52:63:34:86:ab:87:
d0:42:3a:3b:42:e4:09:d2:79:17:88:67:fc:f6:4d:
ea:20:d2:6a:5b:e7:10:45:3f:a5:8d:c2:d9:b6:6e:
ac:4d:54:9d:24:97:b2:e9:1c:d5:8a:d0:ec:41:bd:
fb:05:3b:c1:db:34:09:84:4b:04:cd:cb:0e:4a:c2:
a2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8D:4E:13:4A:D7:95:51:F5:73:D5:ED:4B:98:FF:D1:CB:C6:C8:C2
X509v3 Authority Key Identifier:
keyid:62:AC:1B:B9:58:0A:71:19:81:9E:7B:6B:6E:B2:C3:51:53:47:87:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:2a:2b:c3:87:58:19:56:d1:ff:50:c4:da:48:df:f6:12:09:
e4:93:5f:a1:a1:3d:e4:ff:19:cd:38:dd:93:34:5a:46:55:89:
d6:e6:7e:2c:5c:b6:5d:dd:f0:8d:b2:27:26:6e:53:f9:c5:aa:
89:09:db:58:ba:97:d0:ec:1c:f3:6b:9b:3c:2d:47:a6:e0:08:
5b:d1:c2:c5:fc:8a:c5:12:59:78:49:5e:f2:2e:3d:1d:79:94:
3c:98:0e:6b:b5:71:28:a5:5c:70:ed:9c:a1:18:25:8b:45:45:
90:38:a1:83:9e:c2:72:32:d7:4e:9a:4b:3e:ac:ff:79:a7:54:
ed:ea:c2:a7:ba:a6:97:61:44:86:27:67:bd:6d:83:7b:4f:83:
99:c8:b2:9e:18:9c:11:f5:d2:f4:ab:f9:09:d4:f8:2c:41:55:
20:36:6e:ba:ea:b6:a2:bd:0a:6b:9a:53:f4:ec:db:a9:11:02:
b7:ce:24:dd:4a:07:8f:16:55:20:c1:15:e6:4d:db:94:c1:34:
70:5f:38:5d:4a:c0:a4:13:96:13:c9:a8:a4:96:57:25:73:6e:
1a:f1:0d:0f:4b:ab:ff:3c:43:e6:7c:87:a3:7a:42:59:b9:1f:
14:f5:94:f2:51:b4:ca:76:3d:1b:9a:59:9c:36:34:e0:f2:29:
17:41:e2:85
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUREMDgxMTAvBgNVBAUTKDYyQUMxQkI5NTgwQTcxMTk4MTlFN0I2QjZFQjJDMzUx
NTM0Nzg3RkQwHhcNMjUxMTA1MDUzNDAwWhcNMjUxMTEyMDUzNDAwWjAYMRYwFAYD
VQQDEw02OTBhZTFjOS0xNThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA42b8/vQxY9tSeYL+n2tY6HP+EolIeb2oWsmK1YUbfepY10WTc2ICLobUjmaw
rT+Byooa5rqtxwHAUddtl1cikf1mhJcXaSCnqTF/UshTD8bj3DxKN78bG1J4rR6k
kl/alh8pSbQWtXRFTD5PZUki7FaLlctZ3gXiqFrd8+fdoMfsjrBH7RFVsJL0rXAz
kH2UyqwnHa+mfRMr3b/dyAwrcJI2kzBC8SDeiuRa8fdTDiEwGwB9F2RA2Y2gAxVS
YzSGq4fQQjo7QuQJ0nkXiGf89k3qINJqW+cQRT+ljcLZtm6sTVSdJJey6RzVitDs
Qb37BTvB2zQJhEsEzcsOSsKitwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWNThNK
15VR9XPV7UuY/9HLxsjCMB8GA1UdIwQYMBaAFGKsG7lYCnEZgZ57a26yw1FTR4f9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREQwOC85QTVGQkI2MjVC
MTkxMUVGQkVEMEM0N0FDNEY5QUUwMi9ZcXdidVZnS2NSbUJubnRyYnJMRFVWTkho
XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lxd2J1VmdLY1JtQm5udHJickxEVVZOSGhfMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
REQwOC85QTVGQkI2MjVCMTkxMUVGQkVEMEM0N0FDNEY5QUUwMi9ZcXdidVZnS2NS
bUJubnRyYnJMRFVWTkhoXzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBjKivDh1gZVtH/UMTaSN/2Egnkk1+hoT3k/xnNON2TNFpGVYnW5n4s
XLZd3fCNsicmblP5xaqJCdtYupfQ7Bzza5s8LUem4Ahb0cLF/IrFEll4SV7yLj0d
eZQ8mA5rtXEopVxw7ZyhGCWLRUWQOKGDnsJyMtdOmks+rP95p1Tt6sKnuqaXYUSG
J2e9bYN7T4OZyLKeGJwR9dL0q/kJ1PgsQVUgNm666raivQprmlP07NupEQK3ziTd
SgePFlUgwRXmTduUwTRwXzhdSsCkE5YTyaikllclc24a8Q0PS6v/PEPmfIejekJZ
uR8U9ZTyUbTKdj0bmlmcNjTg8ikXQeKF
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:32:57 2025 by rpki-client