
$ rpki-client -vvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
File: aAYK77v8wH1z211yeLyPJJxX9RU.mft (raw, json)
Hash identifier: W6VCaWM6hs64GM7l7ThNE9NStAI02nDUE3GEPM1ADJ4=
Subject key identifier: 61:F9:DA:49:B5:D0:DE:89:2B:E1:4A:82:E2:C7:DC:CA:F6:38:8E:A5
Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15
Certificate issuer: /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
Certificate serial: 03F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
Manifest number: 03E7
Signing time: Wed 05 Nov 2025 00:37:33 +0000
Manifest this update: Wed 05 Nov 2025 00:37:32 +0000
Manifest next update: Wed 12 Nov 2025 00:37:32 +0000
Files and hashes: 1: aAYK77v8wH1z211yeLyPJJxX9RU.crl (hash: u4VVld/Bi2NDmqB6lSfIlVgUZPzWgRbojv48PbZeo+0=)
2: 5B639C667CEB11EDA3D10364C4F9AE02.roa (hash: /k7UGLxYpMRjSXOkhilDp1PbyHK35jDBnjLpEab1SqY=)
3: ADBB651E043411ED9F02B325C4F9AE02.roa (hash: nXP2TkV2xaQf8NtZFSYlzBkdLiCf/hTO1Pti6MrwpUU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl
rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1010 (0x3f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912859A, serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
Validity
Not Before: Nov 5 00:37:32 2025 GMT
Not After : Nov 12 00:37:32 2025 GMT
Subject: CN=690a9c4d-7633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:74:fd:ca:f8:b2:43:43:18:3f:3a:58:eb:96:
00:99:9f:b8:d2:fe:4a:d9:9e:a9:d4:69:39:f7:c1:
64:7f:63:e0:ff:a5:6e:f5:fc:9a:49:fb:09:a3:56:
36:b7:7e:50:6b:e2:ab:42:30:1b:6a:e9:cb:21:e7:
0e:82:b0:43:e1:01:b0:d3:24:fd:64:42:8d:98:fe:
d2:53:c1:63:87:97:cd:a8:a1:f9:0d:79:ac:b9:d0:
de:86:03:2e:89:29:4c:d1:19:6c:0b:15:a0:cf:96:
70:10:05:8d:70:78:0c:be:65:4b:f3:1e:aa:de:21:
3f:3d:c7:37:17:cc:9f:c9:24:5a:0a:db:5c:5a:46:
80:ec:9d:ac:62:70:7c:bf:72:d7:40:ea:2f:34:9e:
c6:b7:91:3a:e5:72:dc:b0:85:01:a8:ac:02:17:22:
36:68:24:3f:09:db:c1:e2:40:ef:74:43:48:2a:57:
24:e0:40:25:07:a3:ba:9f:8b:6d:76:76:ad:f0:1e:
af:76:d3:2e:d0:3e:90:33:04:03:8e:3b:70:40:d4:
67:a9:4f:30:80:21:e4:0f:74:52:1a:7c:46:89:91:
57:e5:ed:38:45:99:21:d3:f0:27:a2:b0:c0:e9:50:
af:3a:f3:3d:a8:90:a2:ab:0a:de:2e:3f:37:33:c0:
fe:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F9:DA:49:B5:D0:DE:89:2B:E1:4A:82:E2:C7:DC:CA:F6:38:8E:A5
X509v3 Authority Key Identifier:
keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:4f:13:75:b4:c2:97:ff:08:e0:c1:99:e0:dc:ac:62:23:21:
48:54:02:a8:af:fa:e1:67:7f:47:4b:32:9e:9f:b7:fe:1f:1c:
51:36:b1:14:1c:b4:34:8c:e6:6f:ea:0f:cc:25:d6:35:f0:83:
9d:70:c0:eb:48:5d:93:6e:35:e3:56:5a:f2:85:0e:90:47:be:
ee:23:8d:12:ab:e6:32:5e:7a:61:62:db:4d:c7:ee:84:26:27:
33:8f:21:5a:4c:3b:f6:3c:e5:6f:60:75:de:6d:c9:92:2e:74:
ad:fa:9f:70:17:c3:be:3c:6b:77:c7:4a:e4:c0:c8:d9:75:5b:
ac:5f:54:c2:ab:fd:a0:b0:af:24:17:49:41:b2:69:93:ff:b8:
73:8e:f7:f3:fb:4c:f5:59:e4:cf:61:dc:04:42:1b:ac:fb:15:
ee:b1:a8:be:5b:17:83:f3:bb:8a:f1:82:ed:30:6c:16:2f:b7:
65:0b:4d:01:10:eb:5d:65:d3:33:b2:ea:12:df:69:17:39:57:
c0:0c:8f:4d:c2:6f:c1:01:e4:59:7f:30:d0:6e:84:00:93:63:
57:b4:b8:8b:38:97:6b:10:43:f5:1b:fe:38:47:ac:d6:53:28:
22:c9:7f:9f:d1:4c:ac:fe:cb:bd:f9:69:80:36:21:9a:40:2e:
27:36:a2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:41:41 2025 by rpki-client