
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
File: yuLPsaeXStawJFrjTksNztggmGc.mft (raw, json)
Hash identifier: R9LjZMNMHh85HhTkp9xnOWqxrspnRQ0HzK4ZOnC8Jdg=
Subject key identifier: EC:E8:B5:4D:79:60:70:30:70:99:19:62:27:E2:1B:C5:AD:DE:7E:89
Authority key identifier: CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67
Certificate issuer: /CN=A9120968/serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867
Certificate serial: 34D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
Manifest number: 34D6
Signing time: Sun 02 Nov 2025 14:56:32 +0000
Manifest this update: Sun 02 Nov 2025 14:56:32 +0000
Manifest next update: Sun 09 Nov 2025 14:56:32 +0000
Files and hashes: 1: yuLPsaeXStawJFrjTksNztggmGc.crl (hash: iM7axJNok08j+dT9tOU2DqZKbctP2fV8wrcSm9MXefk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl
rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 14:56:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13526 (0x34d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120968, serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867
Validity
Not Before: Nov 2 14:56:32 2025 GMT
Not After : Nov 9 14:56:32 2025 GMT
Subject: CN=69077120-f6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9f:6e:de:1c:12:6d:e7:b1:bf:45:16:5c:95:
d3:51:d9:c8:52:4e:84:33:c4:bf:79:67:f8:89:c0:
95:64:a7:17:df:53:19:e2:12:f5:62:14:c7:8f:be:
59:9b:17:9a:2b:dc:2b:e7:ac:b1:af:37:58:24:09:
35:4d:f3:b0:70:6e:d2:5c:08:22:58:cf:70:92:06:
7f:59:72:11:e4:13:22:8a:b7:27:d1:46:fe:10:2a:
1b:39:b6:09:9e:a7:7b:37:0f:4a:c8:2a:7f:37:db:
90:67:20:5d:2e:30:98:f9:f0:55:af:7c:c2:82:b9:
43:d1:74:be:b2:4f:06:18:b6:b1:61:ed:fa:89:15:
a6:11:4f:55:21:0e:66:ee:e3:3f:a6:8d:27:6f:d4:
86:82:f9:4a:96:3d:4f:7e:e2:e4:da:8f:98:54:fd:
52:5f:59:bc:11:bf:7c:e6:07:57:c4:ef:92:90:f9:
e3:c2:6f:1c:7a:64:f7:9b:65:88:59:45:2e:0d:33:
f3:44:5b:67:ad:0d:67:b7:94:76:fa:20:27:d1:33:
7d:45:80:9c:9b:67:e7:a6:c6:b3:9e:94:f5:85:75:
8f:f4:b6:a7:29:2b:7d:57:d5:22:7d:a4:93:1e:0a:
c4:21:e5:f3:03:63:e5:93:48:27:21:3b:63:fe:76:
5e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E8:B5:4D:79:60:70:30:70:99:19:62:27:E2:1B:C5:AD:DE:7E:89
X509v3 Authority Key Identifier:
keyid:CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:8f:3c:f4:60:7d:cc:de:ac:7f:77:2a:9a:9b:c9:7e:48:30:
83:fa:fb:7c:94:43:f8:2d:74:c8:e1:6e:c8:87:63:92:d2:e1:
2f:b1:5c:b6:b2:2b:1f:1c:00:1e:19:a9:2c:2f:4e:d6:40:3c:
b0:5f:2f:cf:3a:07:8b:ab:d9:df:f5:52:c2:cf:26:e3:2e:98:
26:1b:5b:3f:c1:5a:9a:35:bd:39:78:83:2b:ef:20:c0:60:b0:
ba:7a:01:14:9e:37:c3:65:8c:07:18:e6:c5:fe:79:c5:58:fe:
36:dc:1b:6a:50:ff:30:b9:e7:e8:f3:07:9d:23:ce:4d:7b:72:
4a:47:37:33:af:ad:e2:87:82:70:c8:62:33:ac:bb:8a:91:b7:
3c:cc:5e:13:3d:e4:37:f0:ce:9c:34:f4:2e:58:7a:c5:78:d5:
39:aa:e9:82:11:28:f5:8a:36:06:15:ce:58:fc:7c:83:6d:0d:
3f:03:2e:46:89:81:26:81:ae:98:d8:39:73:1e:25:8a:40:a9:
c2:9b:6c:4e:dc:bf:31:46:cc:0a:c6:be:e6:eb:61:99:3a:c5:
3c:72:28:a8:7f:96:b1:8e:f9:e7:fa:8e:5a:a4:a0:34:d2:ac:
2b:3e:09:8e:4b:ba:a6:3b:92:c0:19:35:8a:db:c5:b1:9e:46:
23:ef:63:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:16:45 2025 by rpki-client