
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
File: YiiraKJGC9xWaItuVYkXkN2ASxA.mft (raw, json)
Hash identifier: Gx6x3A1rMRJtRTz1zsduC8N82fvqcojP6A78iFzqfXI=
Subject key identifier: 69:E4:3F:E4:10:45:D7:A5:BC:89:65:97:81:00:F5:32:44:BE:90:C1
Authority key identifier: 62:28:AB:68:A2:46:0B:DC:56:68:8B:6E:55:89:17:90:DD:80:4B:10
Certificate issuer: /CN=A916A285/serialNumber=6228AB68A2460BDC56688B6E55891790DD804B10
Certificate serial: 0200
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
Manifest number: 01F8
Signing time: Wed 05 Nov 2025 02:36:00 +0000
Manifest this update: Wed 05 Nov 2025 02:35:59 +0000
Manifest next update: Wed 12 Nov 2025 02:35:59 +0000
Files and hashes: 1: YiiraKJGC9xWaItuVYkXkN2ASxA.crl (hash: w3vbdFRzACjYS8mNrgCJX6evCbTRZ9S4UVS5mHHr+ag=)
2: BCAF365487C111F0AC525C39C4F9AE02.roa (hash: +zPuXVysVh8bWVHycQS8yrnVHucW3pGeXoMgUWYY4I0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.crl
rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A285, serialNumber=6228AB68A2460BDC56688B6E55891790DD804B10
Validity
Not Before: Nov 5 02:35:59 2025 GMT
Not After : Nov 12 02:35:59 2025 GMT
Subject: CN=690ab80f-3130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9c:5e:8a:dc:9e:82:36:36:4d:b7:80:7c:ea:
1e:3e:d2:69:7d:15:aa:f6:82:df:9a:4c:57:ac:04:
d6:3e:4b:52:c4:60:a3:2c:aa:1e:c7:9f:dc:f5:39:
51:63:c3:38:88:c0:fa:d5:e2:ed:b4:3e:bf:46:66:
f4:0e:89:24:a4:c1:2e:2b:21:1b:08:31:ce:4d:9e:
37:31:ca:0c:e8:cd:a5:03:71:0a:2d:de:db:6b:6d:
8b:4d:6e:42:f7:b9:3f:aa:35:d5:4c:3e:95:7f:2d:
74:77:54:31:9c:30:9c:71:e4:97:f6:d8:42:a9:6e:
6f:39:9b:86:00:e5:42:91:cc:a7:19:ac:8d:f3:fa:
18:9b:2b:de:14:e1:6a:63:94:01:b5:b2:28:3a:cf:
3e:bd:d3:9e:d1:fe:e8:40:79:fb:37:ca:7e:b8:25:
6b:32:a5:6a:45:5c:4c:a2:7b:0a:c8:b3:bd:dd:25:
d3:84:85:1c:7e:24:6a:b4:91:97:6a:ed:ba:f6:83:
49:d5:a8:92:f9:85:65:21:aa:2c:69:bb:8e:97:28:
69:56:d7:19:51:ce:68:e6:64:5b:e5:2d:49:79:d5:
c2:6e:d9:79:5c:fb:bf:6a:c4:8c:46:16:31:49:d6:
8f:ee:d8:57:d2:c2:5d:52:8d:2b:2a:c0:88:a5:a4:
fb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E4:3F:E4:10:45:D7:A5:BC:89:65:97:81:00:F5:32:44:BE:90:C1
X509v3 Authority Key Identifier:
keyid:62:28:AB:68:A2:46:0B:DC:56:68:8B:6E:55:89:17:90:DD:80:4B:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:60:ef:56:84:a2:b9:00:03:a3:df:3f:84:04:fc:24:e0:82:
6f:32:63:b0:6a:c3:f2:37:b4:46:a6:e6:65:c7:16:3f:aa:a5:
37:18:33:de:5f:37:74:b9:74:39:ba:5b:8f:a8:aa:ce:bc:63:
4e:9e:c3:f2:7c:02:83:20:58:b2:e5:54:16:30:87:46:27:43:
9e:27:94:3f:7d:44:5f:08:e6:57:cc:cb:f7:cc:f5:08:e1:32:
dc:d0:25:98:fe:7b:13:7e:b8:d0:d8:70:70:a8:85:82:90:7b:
e0:b6:21:5e:7c:1f:aa:b0:49:5f:b0:3b:65:c7:2c:50:4f:df:
36:fa:6a:69:9e:61:a8:7e:71:7d:a3:85:26:7c:a2:e3:41:05:
53:1a:1c:ce:d5:c1:e5:c3:00:16:54:d2:87:71:bc:62:c2:2b:
db:da:5a:55:87:05:8f:8b:08:16:d7:ac:35:a0:f7:57:52:50:
f7:40:7c:dc:90:b9:70:03:ab:fa:ea:8b:bb:00:56:8b:58:2f:
7f:dd:9e:23:67:73:a2:54:b5:14:1d:65:c8:7e:95:07:7e:1a:
e5:50:fe:74:26:70:db:e0:a9:46:30:2b:ea:80:95:1f:1d:ed:
41:4f:4b:64:1c:24:13:36:32:0c:34:10:91:1f:aa:9d:44:1b:
6c:75:ed:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:47:26 2025 by rpki-client