
$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
File: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft (raw, json)
Hash identifier: 9X+NWsGEGNksMnuUjEpsjDQzy2M9BxSKlUmUqcfB6q0=
Subject key identifier: 7B:E7:99:C6:C6:DC:AA:2A:7B:CC:C9:94:77:09:D9:D9:4C:36:50:2F
Authority key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
Certificate issuer: /CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Certificate serial: C7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
Manifest number: B5
Signing time: Wed 05 Nov 2025 06:36:27 +0000
Manifest this update: Wed 05 Nov 2025 06:36:27 +0000
Manifest next update: Wed 12 Nov 2025 06:36:27 +0000
Files and hashes: 1: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl (hash: fA5eqNo+NhwYyhwDmFjUlWWAjPEWb+WjrOiPZ5vF5NA=)
2: E3239FCAD48C11EFA27EEC37C4F9AE02.roa (hash: eDrkrHM6e7G8MkefF8uO0ebeRL2ZiilrSCVyjl1v/78=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl
rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:36:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91685E9, serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Validity
Not Before: Nov 5 06:36:27 2025 GMT
Not After : Nov 12 06:36:27 2025 GMT
Subject: CN=690af06b-12cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:31:0f:54:c9:df:49:9f:a9:56:e5:b3:ae:64:
54:57:ef:87:c3:13:08:18:61:75:09:5f:d0:e1:77:
f0:e3:04:b3:13:2a:e0:d8:49:67:e0:ff:31:50:60:
11:fc:56:8c:48:37:50:cd:f7:ab:72:a7:c8:d8:54:
83:4a:66:07:f8:36:b4:ff:b1:50:33:96:55:b8:e5:
8c:48:5b:af:96:de:91:80:74:d0:23:38:d2:83:0f:
cf:0a:1f:b1:f6:7c:c2:ad:91:b4:5d:00:28:d7:fa:
23:6f:58:64:2a:bf:5d:b8:5d:71:3f:a9:7e:78:eb:
e2:3f:75:09:7f:b6:d2:73:93:c5:0d:88:d1:fc:d9:
73:c6:3a:8d:b5:f9:5c:36:ff:6d:cc:64:08:8c:09:
b3:0f:10:35:e2:f7:29:fa:90:97:b2:b1:c9:bf:25:
32:9a:d3:f7:b8:85:a4:b5:99:44:5c:99:c3:be:81:
22:ac:10:d9:86:a4:13:9a:11:a4:01:f5:97:e1:77:
68:13:fe:5c:20:50:ed:62:67:06:40:e7:76:85:a9:
ce:cf:ef:26:5e:6f:47:16:26:54:c8:81:51:de:b4:
84:32:df:8a:0d:0a:ec:c8:4c:54:56:85:9c:9a:fe:
b2:c0:68:a8:71:58:31:44:23:69:77:43:59:15:c5:
dd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E7:99:C6:C6:DC:AA:2A:7B:CC:C9:94:77:09:D9:D9:4C:36:50:2F
X509v3 Authority Key Identifier:
keyid:62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ab:80:f9:4c:1a:cc:47:60:63:36:00:08:c4:47:62:37:62:
1b:ea:ce:96:38:67:c6:82:87:cf:8d:bc:b6:1b:d8:a9:63:30:
38:f3:8d:ea:90:4a:0a:af:03:a6:c8:cb:af:5f:92:5f:09:ce:
a5:6b:74:72:51:7e:74:b9:7b:37:ee:8a:d4:48:69:5f:bd:6d:
4e:ea:cc:c8:2a:a4:72:f5:6f:88:a3:56:e7:36:f7:ab:d2:d5:
37:9d:25:5a:4a:5c:9b:58:2c:80:bb:56:7d:12:a3:1a:8d:7c:
a3:b0:8f:0f:6d:fb:91:3b:e3:85:80:9d:5f:0a:e4:cf:9e:1a:
98:12:95:ce:f7:0e:58:e1:9e:34:22:b9:7b:3f:bf:1f:ba:3a:
7f:e9:77:66:27:58:9f:e4:e1:f9:06:e7:2e:d3:70:84:bf:ea:
b5:dc:69:ef:5d:c2:40:53:f1:07:8c:e5:2d:ad:8d:ce:8d:92:
ba:42:ff:8b:f5:3d:55:e4:32:27:87:c4:66:44:1a:75:a2:8b:
b2:a9:f7:0d:78:03:4f:e2:fd:6a:27:54:7c:15:6e:ac:e7:42:
3e:44:eb:70:e6:d8:0c:40:de:ba:f1:63:6f:27:10:de:15:8c:
30:80:df:86:c0:9e:a2:bb:5b:67:bd:e8:3a:d6:cb:92:4f:3b:
2e:34:4d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:28:30 2025 by rpki-client