
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
File: yoPUPlpeWcd1mxubL72YqUff07w.mft (raw, json)
Hash identifier: 4vMX8AN2WlMXdhOx7fMV1u/er+9hfz5004dX7z0l9m4=
Subject key identifier: 8C:D0:6E:5F:DA:C1:AA:C9:F7:45:C6:71:E3:E7:98:14:EC:53:74:A6
Authority key identifier: CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC
Certificate issuer: /CN=A9136DD6/serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC
Certificate serial: 10E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
Manifest number: 10B8
Signing time: Tue 04 Nov 2025 17:27:04 +0000
Manifest this update: Tue 04 Nov 2025 17:27:04 +0000
Manifest next update: Tue 11 Nov 2025 17:27:04 +0000
Files and hashes: 1: yoPUPlpeWcd1mxubL72YqUff07w.crl (hash: V8uTysVbjb9S1NFj3u5lc2XJ4E3Bsi9Obzx68fpkK9I=)
2: 7B306A34218D11EC87C96D6DC4F9AE02.roa (hash: yOodJ3nH5QwD9eT88M4j+d+u4VfxJX6b3Bq0+MSkMHg=)
3: AAAA30A6288411EEAD22D65DC4F9AE02.roa (hash: G+uGWRjp80LrgRmLSZBd2dtMIpT6KA8B8JU7ZRHYork=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl
rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 17:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4323 (0x10e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136DD6, serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC
Validity
Not Before: Nov 4 17:27:04 2025 GMT
Not After : Nov 11 17:27:04 2025 GMT
Subject: CN=690a3768-add0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a2:3f:8c:1f:97:d8:69:09:fd:7b:e1:0b:d4:
e7:2f:4d:74:93:68:87:db:e2:e7:62:f3:ce:5b:ad:
86:cf:42:68:f1:eb:b6:da:58:98:5a:9f:aa:7d:ed:
7b:df:8b:b3:ec:57:fb:3e:a4:6b:c4:ba:53:26:7a:
cd:f9:19:fd:ba:f2:94:19:68:e0:ed:54:bb:60:25:
eb:cb:cd:ca:c2:de:a0:74:c7:69:17:46:f7:9d:0a:
a9:1f:a0:59:9d:db:10:11:be:af:93:70:70:ef:3a:
e1:40:b6:fd:03:56:8f:63:a7:3e:a8:94:f4:df:36:
e3:fa:49:2b:a4:4b:e9:a8:3c:58:85:c3:df:db:8a:
a4:68:82:57:cb:5d:f3:c9:97:26:1e:0c:f3:52:39:
bd:1a:fb:f0:56:7a:80:82:5a:44:e7:6b:d7:65:2f:
7b:28:95:5e:17:a0:1c:2e:5b:10:3b:d9:12:fc:0f:
76:28:49:ff:88:5c:d6:36:aa:dc:dc:46:6e:3b:0c:
9d:02:23:72:30:44:a0:88:93:86:c7:5e:04:54:49:
5f:d1:81:15:03:55:1c:5c:88:cb:78:fd:88:8b:86:
5b:1c:d1:f3:d1:6c:e4:46:bc:56:08:ab:e2:ab:d8:
0e:c8:0b:87:32:75:70:ba:af:80:24:4c:ac:ee:c6:
5d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D0:6E:5F:DA:C1:AA:C9:F7:45:C6:71:E3:E7:98:14:EC:53:74:A6
X509v3 Authority Key Identifier:
keyid:CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1e:03:0f:99:89:ad:b7:cd:f9:df:d6:76:91:15:d9:e7:c0:
19:9f:bb:16:ce:7e:68:d9:b7:5d:05:da:56:a3:ce:ea:db:bb:
1f:87:a4:db:ba:d6:f5:c5:36:99:8a:99:b0:2c:1a:8d:ff:2d:
97:be:5d:4e:34:73:8d:6a:6f:fe:02:43:b2:b2:8f:ae:0a:9b:
c5:0a:b1:de:b3:90:72:ea:13:65:d8:69:80:9b:71:09:b5:19:
71:35:2f:82:d9:72:9e:f3:90:9c:c3:db:6b:d0:a1:66:2d:fe:
c6:46:7d:b6:77:bf:b8:fd:11:30:06:cb:14:da:88:28:fc:2f:
f6:d0:a7:e8:2f:8e:9e:6d:21:bd:f9:4a:19:54:54:f6:8b:46:
00:a6:45:49:e0:a9:bd:97:c3:53:88:2e:6b:98:fd:f9:60:af:
87:dd:c8:6a:11:a0:25:e1:2f:1e:f8:cd:98:2c:d3:b5:e7:11:
a7:5a:c9:17:a1:a0:35:a0:72:7a:c4:ac:86:71:20:83:39:40:
28:54:af:45:0e:cf:f5:59:f0:52:fb:ad:7a:2a:57:d2:e6:68:
ec:f6:87:70:76:ad:04:3a:dc:13:b7:cf:f9:3d:06:34:7b:3b:
4c:37:d1:5f:9c:af:a0:5c:00:c3:d4:08:e8:9d:22:e9:a3:6d:
a0:59:15:b9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzZERDYxMTAvBgNVBAUTKENBODNENDNFNUE1RTU5Qzc3NTlCMUI5QjJGQkQ5OEE5
NDdERkQzQkMwHhcNMjUxMTA0MTcyNzA0WhcNMjUxMTExMTcyNzA0WjAYMRYwFAYD
VQQDEw02OTBhMzc2OC1hZGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwaI/jB+X2GkJ/XvhC9TnL010k2iH2+LnYvPOW62Gz0Jo8eu22liYWp+qfe17
34uz7Ff7PqRrxLpTJnrN+Rn9uvKUGWjg7VS7YCXry83Kwt6gdMdpF0b3nQqpH6BZ
ndsQEb6vk3Bw7zrhQLb9A1aPY6c+qJT03zbj+kkrpEvpqDxYhcPf24qkaIJXy13z
yZcmHgzzUjm9GvvwVnqAglpE52vXZS97KJVeF6AcLlsQO9kS/A92KEn/iFzWNqrc
3EZuOwydAiNyMESgiJOGx14EVElf0YEVA1UcXIjLeP2Ii4ZbHNHz0WzkRrxWCKvi
q9gOyAuHMnVwuq+AJEys7sZdSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzQbl/a
warJ90XGcePnmBTsU3SmMB8GA1UdIwQYMBaAFMqD1D5aXlnHdZsbmy+9mKlH39O8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9ERjM4OTU1RTNC
MzcxMUU5QTAzOEFCMkFDNEY5QUUwMi95b1BVUGxwZVdjZDFteHViTDcyWXFVZmYw
N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lvUFVQbHBlV2NkMW14dWJMNzJZcVVmZjA3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NkRENi9ERjM4OTU1RTNCMzcxMUU5QTAzOEFCMkFDNEY5QUUwMi95b1BVUGxwZVdj
ZDFteHViTDcyWXFVZmYwN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAMHgMPmYmtt83539Z2kRXZ58AZn7sWzn5o2bddBdpWo87q27sfh6Tb
utb1xTaZipmwLBqN/y2Xvl1ONHONam/+AkOyso+uCpvFCrHes5By6hNl2GmAm3EJ
tRlxNS+C2XKe85Ccw9tr0KFmLf7GRn22d7+4/REwBssU2ogo/C/20KfoL46ebSG9
+UoZVFT2i0YApkVJ4Km9l8NTiC5rmP35YK+H3chqEaAl4S8e+M2YLNO15xGnWskX
oaA1oHJ6xKyGcSCDOUAoVK9FDs/1WfBS+616KlfS5mjs9odwdq0EOtwTt8/5PQY0
eztMN9FfnK+gXADD1AjonSLpo22gWRW5
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:48:49 2025 by rpki-client