
$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft
File: ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft (raw, json)
Hash identifier: SpCVQo2LUV73exkTGc08bZbdhkW706FQXCsF92LLVjg=
Subject key identifier: B7:53:92:59:2E:EC:99:1A:99:A5:CF:E1:22:42:9C:5E:9D:BC:99:50
Authority key identifier: 07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7
Certificate issuer: /CN=A912383B/serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7
Certificate serial: 0897
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft
Manifest number: 0863
Signing time: Sun 02 Nov 2025 20:40:20 +0000
Manifest this update: Sun 02 Nov 2025 20:40:19 +0000
Manifest next update: Sun 09 Nov 2025 20:40:19 +0000
Files and hashes: 1: ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl (hash: lt1pxszqVhG7pn+bCqJ1M/KVDMmoVtgg+L2BDsPrAWA=)
2: 653B503C5C3C11ED9B4FAB0BC4F9AE02.roa (hash: 1mD7CDJ8DRk+lM8vtNVrHgkyHQbdyBW6ydIVEiLBivE=)
3: 1D2381425E5F11EC870D9676C4F9AE02.roa (hash: ZUd4QbCdB3E4EQBK+nU5VmSSyQaDu0ItsbLfbY5xMOQ=)
4: 67591AB22FC911EBA360EC1CC4F9AE02.roa (hash: esocmtJlq7HlcotlDHp6Mez+z9Rl0fTX+KzbKTLXFms=)
5: 9EA66A9E737D11ECA0A3A018C4F9AE02.roa (hash: 6MugAT5WUA7wa54QdXsUcpbkyeNKtczQJ8hnMQYoyDw=)
6: E1582B782A6011EB8DEF2641C4F9AE02.roa (hash: g9vu6FJuOGiHVWjvlUrnr/lO98Du1rwPNicgo4vRrvk=)
7: E1E4F9902A6011EB8DEF2641C4F9AE02.roa (hash: GxNJ1GJyLCfG1wd+tTkjUWqW3q5g76ObJBXzG7SEDaI=)
8: E0A4E5182A6011EB8DEF2641C4F9AE02.roa (hash: LmiT/78vJYPXtCg/vYC5cyA6e51c5z/fGkAk3TxGErM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl
rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 20:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2199 (0x897)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912383B, serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7
Validity
Not Before: Nov 2 20:40:19 2025 GMT
Not After : Nov 9 20:40:19 2025 GMT
Subject: CN=6907c1b3-5c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:78:e7:21:f0:c1:a1:e6:eb:c7:0f:8d:de:
9b:fc:96:3b:3d:2a:7b:e3:06:97:35:29:64:b7:bb:
a9:e8:f6:94:a8:17:af:b0:a4:9a:61:aa:86:8b:35:
02:10:f0:ad:a5:0b:38:a1:d9:ec:40:d6:1d:94:a7:
4b:1a:46:23:97:1f:90:2e:0b:24:d8:14:cf:3c:9a:
b8:f0:ed:31:88:9d:a4:86:62:7f:10:95:5a:61:da:
af:b7:5d:d4:56:ed:d6:9b:e5:04:53:11:57:f0:7c:
b0:5f:0e:6a:83:7c:8a:08:80:1b:c2:bb:9d:be:76:
f2:d5:73:c4:fc:e2:b2:9c:57:94:76:9a:83:fe:cf:
85:a9:c5:25:e5:88:ba:fe:c4:b8:99:b4:a5:92:0e:
0a:03:fe:76:1b:09:db:0c:ef:a4:7b:8e:35:61:e0:
2f:7e:f8:bc:5d:b7:9d:2c:62:e5:16:34:b4:1f:b6:
2f:d1:0d:6e:53:35:81:db:25:72:9b:d9:e9:e3:0c:
35:fc:7e:89:30:f4:2d:3b:b2:60:ff:7f:18:8c:32:
20:e6:99:6d:04:af:4d:7a:ad:53:84:c1:64:10:b8:
6a:6c:68:f8:31:bc:07:1d:11:6c:31:7f:6b:31:af:
77:6b:ce:52:bc:2e:71:a0:d3:76:42:f4:92:e3:8f:
e6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:53:92:59:2E:EC:99:1A:99:A5:CF:E1:22:42:9C:5E:9D:BC:99:50
X509v3 Authority Key Identifier:
keyid:07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:f7:25:3d:61:81:2c:a3:c7:65:dd:f0:70:2f:df:a3:da:82:
b3:2e:de:96:71:f3:be:82:bf:9c:df:1b:60:8b:f4:47:de:23:
c4:a0:41:76:f7:ca:05:92:85:71:2b:06:00:1b:f5:e5:a2:b4:
14:c0:0a:c6:59:80:79:26:27:a6:ca:54:92:ef:3b:81:6b:34:
2c:8a:2a:dc:66:e6:7a:fb:8b:2f:16:df:72:b5:4f:d2:33:76:
76:f2:3d:85:77:0f:7e:54:25:d5:a6:fb:7c:45:83:91:34:f4:
b5:af:29:46:2a:ad:33:8a:1e:2b:20:2c:a1:df:67:b2:60:3d:
29:94:c1:3a:46:b5:45:83:cd:9a:ae:79:ed:b3:bd:cf:74:71:
25:5e:02:81:62:fa:b5:06:a0:1c:31:4d:12:18:e4:ad:c3:37:
ca:74:32:f9:8f:38:80:2c:c9:98:04:15:b3:2a:d7:20:bc:0e:
bd:ed:4c:c5:f1:3d:58:68:1d:49:d0:29:75:63:89:be:51:02:
0b:cc:a5:53:9a:47:d8:3b:07:ac:db:b8:b4:63:3e:8b:e3:a9:
d6:4e:b2:a0:b8:f3:5d:dd:cf:98:af:b0:68:5c:c5:86:3a:1a:
a1:5b:b5:c8:d2:eb:5e:d4:ae:c7:ae:17:1a:13:f8:17:ec:3c:
23:8d:e4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:23:34 2025 by rpki-client