
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft
File: YscfaukWKfhUypRkF2G2UizUgMM.mft (raw, json)
Hash identifier: EWjhaj/o73ym2qxwJQrdptsQcKfKHmKaeq38FaawPSc=
Subject key identifier: 29:09:39:29:C7:B5:CD:17:CE:8C:7C:5D:3C:43:51:B7:B5:F6:90:C4
Authority key identifier: 62:C7:1F:6A:E9:16:29:F8:54:CA:94:64:17:61:B6:52:2C:D4:80:C3
Certificate issuer: /CN=A917A19F/serialNumber=62C71F6AE91629F854CA94641761B6522CD480C3
Certificate serial: 81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft
Manifest number: 7C
Signing time: Mon 03 Nov 2025 06:51:16 +0000
Manifest this update: Mon 03 Nov 2025 06:51:15 +0000
Manifest next update: Mon 10 Nov 2025 06:51:15 +0000
Files and hashes: 1: YscfaukWKfhUypRkF2G2UizUgMM.crl (hash: wvOlrNrQIZ7781DMyxKpg4ACNbjmJE1GfxkNgnVSyE8=)
2: 6ADC3FDE1EA811F080D62E0EC4F9AE02.roa (hash: eZIpW/uAc6VvUgj1mUM1+YMtbcurUKE2lt2tc7badCU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.crl
rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:51:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A19F, serialNumber=62C71F6AE91629F854CA94641761B6522CD480C3
Validity
Not Before: Nov 3 06:51:15 2025 GMT
Not After : Nov 10 06:51:15 2025 GMT
Subject: CN=690850e3-254a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:50:a2:ab:8f:23:8d:c3:99:ae:d6:8d:a7:93:
94:29:27:56:3d:74:63:aa:f9:c7:89:e4:ba:d7:39:
3c:0e:7c:c4:0b:bb:05:8c:e4:0b:fd:57:e3:cc:df:
7d:69:27:f4:3a:fa:42:90:3e:cf:a4:2c:88:83:cc:
8c:2a:f0:c4:b9:41:03:07:23:43:01:a6:44:62:3a:
01:44:4f:04:d3:e0:25:d9:52:24:57:68:ac:33:b3:
09:b5:31:1b:9f:9a:6a:a8:29:6a:63:8b:e7:b4:e8:
d9:83:e0:59:e5:88:e9:8f:5e:47:51:0e:5d:92:1f:
2b:e2:95:9a:f4:47:ea:27:68:27:fd:d2:7a:2f:7e:
02:0e:68:4e:48:c2:c3:2e:78:4f:66:4c:07:5a:14:
53:d1:e1:c2:24:b7:b9:72:8e:92:b9:0b:e0:42:ac:
ba:73:35:7a:6a:58:14:03:63:21:9e:77:dd:1a:aa:
17:7e:1b:f6:1b:2e:8b:ba:4c:a9:cf:7d:3c:c2:80:
7e:7a:ac:36:d6:9b:85:52:ac:10:98:e1:eb:af:6c:
04:b2:4b:e5:7e:e0:bf:6b:60:e0:0c:7f:f3:17:6f:
c9:90:f0:72:84:1f:5b:1a:3d:60:b3:46:5d:dc:07:
61:d5:2f:6e:2b:89:c8:85:38:42:d0:14:94:95:cd:
9f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:09:39:29:C7:B5:CD:17:CE:8C:7C:5D:3C:43:51:B7:B5:F6:90:C4
X509v3 Authority Key Identifier:
keyid:62:C7:1F:6A:E9:16:29:F8:54:CA:94:64:17:61:B6:52:2C:D4:80:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:b8:a8:a6:05:70:23:50:7b:27:a3:0b:82:5f:08:0d:65:fc:
28:e9:27:a7:32:3b:b4:7b:88:f6:a0:b8:52:11:f5:93:25:0b:
5e:89:f0:32:62:02:54:0b:6e:1f:1b:b5:09:64:84:30:4d:d1:
70:cf:2c:99:f7:3a:a3:46:7f:05:5b:b6:a2:b3:b2:9e:c8:d6:
a8:5f:38:5a:23:7a:0b:b7:29:47:27:9f:fc:b3:bf:d5:db:6c:
cb:2c:d5:e1:f9:f0:03:44:eb:55:e1:57:18:69:91:1e:ad:59:
db:59:e4:d0:e7:ec:6e:0b:e2:c2:9e:0b:fc:b3:21:8d:07:4a:
13:de:1c:9e:50:ec:c8:a6:2e:a5:8f:e3:89:d4:e4:7c:28:e6:
69:94:0f:a4:86:26:d2:54:5d:a4:9c:db:a2:84:e6:89:43:9c:
88:50:0f:b5:9b:12:ff:73:31:1e:d4:83:b6:ce:c1:5c:cb:59:
d4:3b:f5:d2:a1:de:b0:37:67:15:23:e5:67:ee:c9:4e:bd:6f:
63:40:d3:d5:bf:07:59:bf:42:b5:51:09:3a:de:14:f6:d8:82:
9c:90:16:2d:8d:e9:0c:15:e0:63:df:4c:75:7a:2a:23:4a:6b:
e8:05:58:c7:7a:c5:ca:d7:31:fd:20:d5:69:9b:cb:e3:7d:80:
2b:a9:d1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:34:53 2025 by rpki-client