
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
File: yhXFkI0HLdghcU7GfhF146qREuY.mft (raw, json)
Hash identifier: k74JrmOmmKeDYBk4IKlt1mfltB09Cm86A6gSuDAXkXE=
Subject key identifier: 1C:A2:E6:F4:F7:60:E6:EF:30:B6:85:93:B6:4C:4F:2E:D0:0C:D0:E5
Authority key identifier: CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6
Certificate issuer: /CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
Certificate serial: 07EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
Manifest number: 07E6
Signing time: Tue 04 Nov 2025 21:12:35 +0000
Manifest this update: Tue 04 Nov 2025 21:12:35 +0000
Manifest next update: Tue 11 Nov 2025 21:12:35 +0000
Files and hashes: 1: yhXFkI0HLdghcU7GfhF146qREuY.crl (hash: C4d4q/IGp6GdaHENqQ0QdA2HYCiaFaC8kV+j/BBPiNg=)
2: D6373CB80CD211EFB50E0B5EC4F9AE02.roa (hash: VJ44WLNQk6fthSf4IfFQ/fDdSEbGp2lfMGV/+APm5xk=)
3: E4BCDFAE0CD211EFAAF8335EC4F9AE02.roa (hash: qJReJaaTRE38lshBw+MzbYFyUK14agtT5WHSqFZE0ko=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl
rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:12:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2031 (0x7ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146B76, serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
Validity
Not Before: Nov 4 21:12:35 2025 GMT
Not After : Nov 11 21:12:35 2025 GMT
Subject: CN=690a6c43-e315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a3:4c:29:66:5e:3e:62:29:61:c2:84:71:ca:
a1:ba:d5:2f:35:0c:40:04:f6:5b:fb:c1:95:0a:ee:
71:7a:8e:9c:3b:0c:9a:37:56:e7:22:a7:6d:56:de:
84:6b:88:f2:72:5a:4a:c5:39:25:a8:63:06:66:9d:
a0:8a:ba:94:2a:3e:40:63:56:7e:ec:85:ab:f4:17:
ac:89:4a:81:cb:7f:7a:d8:55:27:12:08:2c:f7:e8:
3e:3d:cd:35:9f:44:4f:5a:c8:ab:0b:21:66:03:e5:
a8:8b:d7:d4:12:39:be:08:ce:dc:27:70:6e:dc:da:
50:9e:cb:46:a7:06:ff:ba:e8:53:9e:84:b7:be:1a:
f4:50:cf:8d:03:b3:7f:93:33:1c:d1:59:0b:03:39:
09:2e:77:06:cd:b9:42:46:ab:d1:66:d9:4e:42:df:
6e:a0:74:b6:a6:2a:59:36:65:41:4a:f9:b3:22:19:
f2:ed:6e:24:b8:eb:d4:72:55:79:0e:44:d9:fc:da:
1d:db:31:ec:b8:ec:ef:a0:8f:b2:49:d4:61:85:be:
21:f4:e3:ec:8d:0c:65:db:50:9c:11:3c:4b:51:5b:
3a:4f:7a:34:af:ad:5f:70:a8:f5:ec:46:27:1d:35:
e4:40:e2:c7:78:2b:d9:cc:f0:55:0e:cf:88:a8:ac:
f7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A2:E6:F4:F7:60:E6:EF:30:B6:85:93:B6:4C:4F:2E:D0:0C:D0:E5
X509v3 Authority Key Identifier:
keyid:CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:06:a1:80:ed:8f:c9:a1:75:28:dc:2c:70:4e:10:02:77:ff:
ed:5d:9f:2d:d7:f0:6e:f5:a1:8d:78:b0:24:b7:ef:3f:54:29:
1f:20:1c:ff:09:6e:47:fd:d1:b6:f8:7c:bf:58:d5:9b:d5:1d:
9b:b1:fb:e8:ef:3f:68:b4:19:a9:12:aa:3c:6a:19:c0:88:ee:
d7:a8:5e:4b:fb:b7:72:78:d9:25:73:e4:26:9d:4c:0b:35:62:
66:73:cf:e5:ab:62:fa:7f:86:da:74:55:26:f0:c0:9f:0f:1c:
88:84:28:9f:95:64:ce:de:0c:73:8e:be:f4:f4:82:af:62:3d:
6a:99:34:d5:3f:f0:d4:6a:44:80:b8:d9:c5:27:68:5e:bc:72:
6e:30:6c:76:bd:a5:0b:38:e5:31:d2:8c:13:c7:5b:d6:a9:e4:
6a:e0:ab:76:25:46:11:64:82:66:2b:f9:16:c5:2d:69:0c:21:
55:2f:36:7e:bd:2f:44:ac:65:a9:28:ea:6d:38:c9:4b:87:85:
40:84:9b:90:c7:57:ba:3e:3e:5c:65:ef:49:76:13:3b:f3:ec:
c8:15:b9:1b:dc:f6:28:fc:e5:17:f8:1d:eb:96:a6:fd:4a:97:
58:78:21:65:95:55:80:ec:cd:43:75:1c:e7:8e:58:4d:a7:cb:
1d:90:f2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:51:20 2025 by rpki-client