
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
File: gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft (raw, json)
Hash identifier: s6KkNLtO5i5BTqvTcqhMfySXQYjrtmq6blBSrRLqKM8=
Subject key identifier: DD:F0:CA:A7:A4:8B:03:07:D0:5F:3D:AA:58:E9:0C:02:F5:E8:DC:49
Authority key identifier: 81:8B:81:22:95:46:F6:4A:98:0C:3D:86:EC:52:F3:11:94:F2:FD:8E
Certificate issuer: /CN=A916BC97/serialNumber=818B81229546F64A980C3D86EC52F31194F2FD8E
Certificate serial: 0902
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
Manifest number: 08EA
Signing time: Tue 04 Nov 2025 20:28:28 +0000
Manifest this update: Tue 04 Nov 2025 20:28:27 +0000
Manifest next update: Tue 11 Nov 2025 20:28:27 +0000
Files and hashes: 1: gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl (hash: 2n2jjE2nRbRQiX7JBZn8o7X801m+EkXkGLo9M9jE3TQ=)
2: 50998080BCE911EAA0114B70C4F9AE02.roa (hash: cLUMNNGZDXKmnSfIfezXfYoR32r92IsNS7fBbwGmjXo=)
3: C011E716845611EFA55F8043C4F9AE02.roa (hash: JA3zz7YBV2yY5LuFJwmjiYrPNzhrYXS+ieNG9VD56YI=)
4: EF2481168BCA11EDBED45E54C4F9AE02.roa (hash: mSIowL/A8Hlv6Qa1LIfRGqTyVL36owpwnqxjWXB2aCs=)
5: 8867D06A4D8211EF8C95A448C4F9AE02.roa (hash: /9kgKNrCq04PhMVa8ZMv2aZyDjYxKmN3kPG27wU/TPU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl
rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 20:28:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2306 (0x902)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BC97, serialNumber=818B81229546F64A980C3D86EC52F31194F2FD8E
Validity
Not Before: Nov 4 20:28:27 2025 GMT
Not After : Nov 11 20:28:27 2025 GMT
Subject: CN=690a61ec-cc93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:19:e9:0a:6f:e3:1b:36:b0:f3:3e:c3:d2:24:
a8:a6:65:1f:59:4d:41:d1:72:d1:d4:30:dc:2c:31:
1c:e8:24:3d:bb:89:22:ce:f4:eb:f9:ef:85:b0:ec:
c3:f7:9f:29:83:00:5c:93:f0:0c:ef:69:02:c8:1c:
07:7c:b2:f5:b0:50:df:2a:4c:7e:87:6f:56:cb:9e:
f0:8b:f9:93:e8:d3:95:72:44:3d:2b:98:f1:ec:45:
4c:50:b1:4e:ef:98:28:99:9d:b8:91:4e:4d:92:8f:
34:77:01:a3:9b:e1:df:cb:01:91:2d:f2:cc:5f:cb:
f1:f2:80:c5:b9:e7:82:aa:8c:7d:d7:e2:23:b2:e0:
64:d6:2e:92:46:a2:f5:8a:c6:b5:65:93:8d:0a:b2:
28:cf:33:7c:87:48:4c:65:04:b1:38:0e:2d:43:fc:
33:9b:c0:48:47:96:0f:c8:3e:35:aa:ec:c7:30:9c:
db:8e:49:c9:b5:17:dc:fb:50:94:5d:3a:d0:10:ab:
9d:c9:51:e4:bf:f4:18:a1:d8:14:5a:74:b0:8c:5f:
f4:22:fd:e4:24:4a:80:67:2a:be:d4:11:7d:bb:b1:
92:1e:0b:92:f1:92:d8:da:e3:e7:2f:c5:b1:26:67:
21:1a:ea:5f:47:d2:28:30:a1:b6:ac:13:1e:07:93:
2e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F0:CA:A7:A4:8B:03:07:D0:5F:3D:AA:58:E9:0C:02:F5:E8:DC:49
X509v3 Authority Key Identifier:
keyid:81:8B:81:22:95:46:F6:4A:98:0C:3D:86:EC:52:F3:11:94:F2:FD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:62:26:07:98:62:ca:6a:8d:41:92:6c:ba:b2:6d:f2:e3:64:
65:72:47:fd:e0:5d:7f:c9:bb:fa:dd:e3:24:4a:9a:af:de:8c:
86:89:85:cf:f7:99:d1:de:30:0b:87:59:dd:28:9a:17:b2:d8:
66:f2:9e:97:5c:64:6a:b4:e7:6e:da:b8:77:16:d9:a0:4b:63:
0a:2c:e7:26:07:1e:fb:66:0a:1a:6d:08:f0:c4:11:f0:47:c8:
fa:e2:1e:91:2c:43:76:15:af:2a:6e:68:a4:9d:77:7f:28:2a:
88:79:c6:4c:3d:e3:00:da:94:4e:b7:e3:56:bc:f3:3f:d6:65:
4e:59:8b:3a:d5:72:59:dc:cf:5b:d9:5c:d9:66:e8:c0:fe:ae:
1b:76:97:94:53:8d:ee:50:b7:83:2d:be:32:95:ee:d8:e9:9f:
95:37:12:76:1c:ed:b8:c7:92:ad:a7:14:76:af:80:e0:5a:30:
06:a7:da:97:ae:97:7a:02:b7:2d:22:35:45:e9:75:e5:a8:5b:
2d:bd:93:b1:1d:98:0c:50:24:34:75:12:8f:cf:40:f7:fc:c7:
5b:ef:b9:98:3f:f5:b1:83:72:73:ac:ac:66:cd:31:9b:c4:c3:
94:18:6e:89:ee:b6:21:10:86:c2:b6:d1:80:a2:2e:b3:51:10:
4d:36:71:77
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkJDOTcxMTAvBgNVBAUTKDgxOEI4MTIyOTU0NkY2NEE5ODBDM0Q4NkVDNTJGMzEx
OTRGMkZEOEUwHhcNMjUxMTA0MjAyODI3WhcNMjUxMTExMjAyODI3WjAYMRYwFAYD
VQQDEw02OTBhNjFlYy1jYzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwhnpCm/jGzaw8z7D0iSopmUfWU1B0XLR1DDcLDEc6CQ9u4kizvTr+e+FsOzD
958pgwBck/AM72kCyBwHfLL1sFDfKkx+h29Wy57wi/mT6NOVckQ9K5jx7EVMULFO
75gomZ24kU5Nko80dwGjm+HfywGRLfLMX8vx8oDFueeCqox91+IjsuBk1i6SRqL1
isa1ZZONCrIozzN8h0hMZQSxOA4tQ/wzm8BIR5YPyD41quzHMJzbjknJtRfc+1CU
XTrQEKudyVHkv/QYodgUWnSwjF/0Iv3kJEqAZyq+1BF9u7GSHguS8ZLY2uPnL8Wx
JmchGupfR9IoMKG2rBMeB5Mu/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3wyqek
iwMH0F89qljpDAL16NxJMB8GA1UdIwQYMBaAFIGLgSKVRvZKmAw9huxS8xGU8v2O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkM5Ny9BMEIxRTQ0Q0JD
RTcxMUVBOUVERjNFNkRDNEY5QUUwMi9nWXVCSXBWRzlrcVlERDJHN0ZMekVaVHlf
WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dZdUJJcFZHOWtxWUREMkc3Rkx6RVpUeV9ZNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QkM5Ny9BMEIxRTQ0Q0JDRTcxMUVBOUVERjNFNkRDNEY5QUUwMi9nWXVCSXBWRzlr
cVlERDJHN0ZMekVaVHlfWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCgYiYHmGLKao1Bkmy6sm3y42Rlckf94F1/ybv63eMkSpqv3oyGiYXP
95nR3jALh1ndKJoXsthm8p6XXGRqtOdu2rh3FtmgS2MKLOcmBx77ZgoabQjwxBHw
R8j64h6RLEN2Fa8qbmiknXd/KCqIecZMPeMA2pROt+NWvPM/1mVOWYs61XJZ3M9b
2VzZZujA/q4bdpeUU43uULeDLb4yle7Y6Z+VNxJ2HO24x5KtpxR2r4DgWjAGp9qX
rpd6ArctIjVF6XXlqFstvZOxHZgMUCQ0dRKPz0D3/Mdb77mYP/Wxg3JzrKxmzTGb
xMOUGG6J7rYhEIbCttGAoi6zURBNNnF3
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:11:09 2025 by rpki-client