
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft
File: dyPYVuUggiTyvImjgJd39SgzEvw.mft (raw, json)
Hash identifier: zv86Tj80jqJcCChgonmkmwj0vO8hWwiNLpZYBG+cMy8=
Subject key identifier: 3F:A3:E1:93:32:05:81:C3:D5:65:45:EB:70:39:9F:42:26:A8:1E:84
Authority key identifier: 77:23:D8:56:E5:20:82:24:F2:BC:89:A3:80:97:77:F5:28:33:12:FC
Certificate issuer: /CN=A9163EDF/serialNumber=7723D856E5208224F2BC89A3809777F5283312FC
Certificate serial: 0169
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft
Manifest number: 0166
Signing time: Wed 05 Nov 2025 04:08:50 +0000
Manifest this update: Wed 05 Nov 2025 04:08:50 +0000
Manifest next update: Wed 12 Nov 2025 04:08:50 +0000
Files and hashes: 1: dyPYVuUggiTyvImjgJd39SgzEvw.crl (hash: 5496a5cJp7/rl/UEsAbrKCRct6B4T99LJ7N8nvfQAFk=)
2: 7FB5CBF097DB11EE8E67BA41C4F9AE02.roa (hash: Vqca7Dlck5zECijiatjZli/eAV/OHF6vZWtbK8kCw4s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.crl
rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163EDF, serialNumber=7723D856E5208224F2BC89A3809777F5283312FC
Validity
Not Before: Nov 5 04:08:50 2025 GMT
Not After : Nov 12 04:08:50 2025 GMT
Subject: CN=690acdd2-c9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b8:6f:83:00:0e:8c:85:0c:5f:31:ed:32:97:
55:7b:2a:23:cc:df:73:15:96:11:a6:f1:24:04:6f:
ab:03:90:49:1a:d4:97:22:30:9e:2a:28:4c:be:d9:
6b:88:a1:ef:a6:3f:b3:c1:fa:cb:f0:fd:53:cd:ec:
d1:ee:3f:c9:48:c3:bd:74:ce:d4:18:c2:23:9c:53:
ce:d0:54:c5:dc:a6:82:82:7e:32:a6:3a:56:a0:fd:
2d:7d:3e:71:d2:64:7a:0c:82:e1:ba:cd:eb:9a:7d:
e7:a2:00:6e:dd:36:9a:cf:99:c5:a7:2c:02:55:3b:
dc:9f:e1:aa:f2:09:d5:2e:63:22:3e:77:19:da:1a:
5e:7f:41:9a:e6:ac:2f:6b:e1:d1:ab:75:05:35:b4:
86:a4:e5:8a:88:29:b1:bd:b8:3b:92:1b:18:1b:c1:
3d:16:1b:84:ae:10:06:4e:a0:01:09:63:bd:bb:c6:
4b:f8:4e:88:95:61:3b:b6:1c:74:9f:12:ef:13:00:
6a:13:df:51:6b:90:03:a6:bb:09:02:66:26:5a:f8:
1c:44:b4:9f:33:69:e6:c2:8d:1c:76:64:48:3c:23:
a8:57:82:6c:86:4c:d6:20:2d:d7:8e:f3:7e:f5:24:
b6:92:71:f8:da:05:81:ee:d2:fe:f6:5a:0e:30:9c:
11:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A3:E1:93:32:05:81:C3:D5:65:45:EB:70:39:9F:42:26:A8:1E:84
X509v3 Authority Key Identifier:
keyid:77:23:D8:56:E5:20:82:24:F2:BC:89:A3:80:97:77:F5:28:33:12:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:09:a1:72:33:0e:f8:50:da:6b:40:3e:f5:14:34:62:f5:48:
48:fd:51:42:1c:34:b1:2c:f6:53:19:91:6d:23:97:da:56:b7:
41:f8:af:bd:d0:c9:40:d2:18:59:b5:a1:33:c0:9f:0e:60:0e:
72:0c:bd:22:39:9e:de:d0:8c:a6:9a:1c:f3:c7:b7:fa:55:c7:
b7:8c:76:b8:60:0e:87:9d:c0:c8:9e:a1:4d:c4:e8:82:65:26:
95:9f:0d:b7:6f:fc:1a:1a:a4:c8:bd:2a:b9:ae:92:ae:99:77:
a7:cc:27:20:00:13:2f:20:11:8c:c0:8c:1c:d7:32:e4:22:a4:
69:9b:e2:bf:52:9b:e8:4f:78:6b:67:03:20:64:c7:34:1b:b6:
0b:1f:3c:e0:1a:ea:8e:45:7c:d8:7c:b3:c0:c4:eb:1e:c3:c7:
2f:ca:26:05:e8:33:d7:09:9f:81:91:1c:92:44:d9:5d:23:56:
ab:9d:c2:d6:42:08:f4:b9:f8:ef:c9:fa:02:7d:b4:e8:97:6a:
e3:ed:d6:21:ba:ea:3d:86:a3:87:ce:15:2d:aa:4c:e2:c8:f7:
11:62:b1:3a:71:f4:20:f9:1f:37:55:a9:af:08:a2:b5:a9:b9:
97:d4:6f:a6:34:32:3d:f3:35:f9:9d:29:34:3a:ae:df:81:86:
24:37:0b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:08:05 2025 by rpki-client