
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
File: yVIsOLleGYHYPa86djWzGQlA_Fs.mft (raw, json)
Hash identifier: JffbDarVpvyzN5dWCivND9+Sqx1+IGY13QRnV2Ufzus=
Subject key identifier: 6E:13:69:43:39:98:B3:E3:8E:E5:D2:74:6C:F1:78:4D:FE:05:AC:58
Authority key identifier: C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B
Certificate issuer: /CN=A9180161/serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
Certificate serial: 058C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
Manifest number: 0580
Signing time: Tue 04 Nov 2025 23:22:29 +0000
Manifest this update: Tue 04 Nov 2025 23:22:29 +0000
Manifest next update: Tue 11 Nov 2025 23:22:29 +0000
Files and hashes: 1: yVIsOLleGYHYPa86djWzGQlA_Fs.crl (hash: weprTFUCWnUcLbbR450L7PKOlX8lrNxJqqin9kAmRHs=)
2: 6593B3840AD711F083DDB076C4F9AE02.roa (hash: Jai2ZPxFy4Omx4vuI3FyeaDVueoNejReZFJx8NI5lrQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl
rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 23:22:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1420 (0x58c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180161, serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
Validity
Not Before: Nov 4 23:22:29 2025 GMT
Not After : Nov 11 23:22:29 2025 GMT
Subject: CN=690a8ab5-e847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ac:fc:ea:21:cc:e0:20:c5:6f:98:b6:6d:2b:
d5:aa:4c:06:58:4e:53:f4:7a:e1:fa:09:b0:25:06:
70:22:52:e1:02:ff:c8:ab:d5:07:fd:f4:4e:65:58:
5a:d9:41:cc:8c:0a:64:2e:9b:45:33:15:60:0a:1f:
62:44:5f:fc:9a:4d:18:10:a2:b5:4a:d7:56:37:a5:
46:95:77:c2:0c:12:f3:f2:e7:63:aa:28:37:96:95:
10:c9:1f:35:83:a6:1b:46:f6:c4:19:7f:00:dc:5a:
a8:9b:b2:1d:96:99:d1:e7:6d:34:24:e9:4a:90:58:
45:6c:50:e2:a3:a2:83:12:c2:21:8b:75:14:ad:a7:
14:e8:6e:d3:f2:e2:09:90:60:09:fe:2a:46:ec:c4:
b9:70:53:e4:1c:b8:e6:54:b9:a5:ed:41:65:4b:8b:
6c:53:2b:ac:1b:30:ae:8b:6c:15:9b:f0:31:62:3a:
76:39:b6:6e:99:11:21:b3:73:1c:69:99:9f:fe:c4:
a3:42:e9:4f:e6:4e:b6:8c:53:2e:e9:95:9f:b9:f5:
10:58:27:6d:ea:39:d8:4a:c7:27:6c:c3:3d:e0:47:
3a:10:ab:84:bf:06:b2:79:30:df:c1:43:06:5a:9c:
ba:b6:4e:a5:8f:92:3c:b7:cd:05:b0:c3:98:19:a6:
eb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:13:69:43:39:98:B3:E3:8E:E5:D2:74:6C:F1:78:4D:FE:05:AC:58
X509v3 Authority Key Identifier:
keyid:C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:4a:81:fe:9e:2e:03:6b:9c:6b:36:05:dc:7f:2c:0b:34:c7:
c5:8b:59:d2:53:b6:7b:cc:7e:5a:f0:aa:ca:67:56:86:20:86:
55:2b:6f:ed:f3:3f:8d:8f:50:ea:92:f7:7f:23:fd:42:1c:11:
c0:62:aa:0e:6b:b1:be:3a:46:27:88:67:6c:41:ed:d6:8c:91:
55:82:47:61:d6:d1:48:d6:56:ce:a9:4d:83:b9:1c:4c:34:04:
02:f2:01:46:e5:14:00:8c:b7:35:0d:f0:12:ea:ca:a2:b9:1d:
49:d0:1e:f1:67:63:82:50:00:f3:29:40:1d:5b:39:1a:42:d7:
f1:51:0d:0f:c7:f0:a5:a8:ab:89:ef:74:18:51:7f:f5:0f:ad:
9f:9b:39:88:fc:71:db:26:6d:45:62:13:ca:75:77:fa:24:4a:
e7:ea:8c:06:b8:4c:0b:6b:0d:32:63:5a:fb:87:26:53:53:2e:
ef:43:c7:87:86:bb:44:80:7e:8e:1e:d6:fb:08:2c:03:ba:5f:
c6:03:0e:aa:13:12:75:5d:86:81:8f:a4:df:4d:ec:f6:b0:fc:
d7:6a:79:88:21:a5:3c:af:97:8a:35:78:d6:80:0f:5e:61:6f:
2c:94:7c:ed:1c:57:be:d2:30:e4:93:44:a4:56:dc:47:f8:e6:
25:96:42:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:02:00 2025 by rpki-client