
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft
File: g9YM-N6oAia4ByS83mcD0Q1lf_4.mft (raw, json)
Hash identifier: /uegPD+GRFM5bL5povFH9udO8x67Z7TYEYYPJWviOn8=
Subject key identifier: E4:31:44:9E:29:EF:17:65:1E:F1:E2:0C:19:DB:77:1F:31:6A:89:08
Authority key identifier: 83:D6:0C:F8:DE:A8:02:26:B8:07:24:BC:DE:67:03:D1:0D:65:7F:FE
Certificate issuer: /CN=A918F7A1/serialNumber=83D60CF8DEA80226B80724BCDE6703D10D657FFE
Certificate serial: 020E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft
Manifest number: 0799
Signing time: Tue 04 Nov 2025 23:16:49 +0000
Manifest this update: Tue 04 Nov 2025 23:16:48 +0000
Manifest next update: Tue 11 Nov 2025 23:16:48 +0000
Files and hashes: 1: g9YM-N6oAia4ByS83mcD0Q1lf_4.crl (hash: 0nxeQCH5JN7D9Qp5ppngxMtkKx9oa3hYk+s4p3mlQrw=)
2: FC1D8B7A9C7C11ED96690F39C4F9AE02.roa (hash: GaFDcUcEWV5tnryiYR88U/olXhGbw6GEBeuHpqFSkow=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.crl
rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 23:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 526 (0x20e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F7A1, serialNumber=83D60CF8DEA80226B80724BCDE6703D10D657FFE
Validity
Not Before: Nov 4 23:16:48 2025 GMT
Not After : Nov 11 23:16:48 2025 GMT
Subject: CN=690a8961-8d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:fd:75:a8:9d:10:45:3d:63:9f:38:e3:8e:
54:18:de:9e:5a:f8:89:7f:ec:a2:04:8f:f0:0d:d9:
fd:16:d8:4f:6a:24:e8:5f:c4:5f:03:51:d8:1d:9f:
6a:38:45:3a:8a:f1:75:cd:5d:bf:1c:ac:e7:bd:9e:
ed:ce:bb:5e:a4:4e:18:5c:13:7b:79:b1:15:98:5a:
a8:6c:c0:eb:ae:fa:b8:c1:95:4f:d5:ee:e2:ee:63:
f3:e4:61:82:fe:cd:39:7f:f7:8a:3a:2f:a4:a4:38:
9d:64:8d:a2:41:9f:a7:c5:c5:1e:56:0c:e1:23:93:
6a:ca:24:f4:56:d7:e1:e4:ad:ad:92:26:ba:8e:95:
af:93:73:e7:d3:34:b8:05:b2:f6:fa:00:9f:a4:e7:
fb:a6:34:2b:31:de:9e:29:36:2c:1b:3d:1a:03:c0:
de:28:ae:43:d3:ad:40:c9:8e:2b:f3:00:b8:fe:f6:
49:e0:fd:96:b0:4b:45:73:0a:30:7b:f4:54:c2:9e:
a3:3e:c6:2c:a4:4d:e3:8b:ed:49:12:35:51:9d:45:
25:55:fb:2b:db:2d:c1:8c:68:4f:f6:66:dc:1c:2a:
d2:e0:6b:35:10:85:3c:90:08:0a:50:05:ac:3a:c0:
39:36:fe:e0:2b:8a:b8:c9:ea:3b:76:37:07:f3:64:
1b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:31:44:9E:29:EF:17:65:1E:F1:E2:0C:19:DB:77:1F:31:6A:89:08
X509v3 Authority Key Identifier:
keyid:83:D6:0C:F8:DE:A8:02:26:B8:07:24:BC:DE:67:03:D1:0D:65:7F:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ca:54:86:b7:6f:fd:1e:1d:a4:46:96:32:08:32:c0:8d:ca:
12:41:e5:ec:18:88:42:0e:0e:8e:d9:c2:5f:f3:70:03:20:50:
90:b6:6e:2b:ee:69:e7:d0:2a:22:70:4c:57:3f:07:e8:72:78:
0c:71:d1:fb:cf:6a:b0:dc:99:d1:20:26:b9:ec:35:fb:c1:fc:
84:af:fd:9e:29:b5:20:fe:56:e8:a9:39:93:ff:2a:0e:5d:65:
03:c8:3d:b8:d1:0b:9c:8f:2f:fb:1c:06:ba:a1:a5:59:15:ba:
79:f4:49:47:5d:40:f1:6b:27:3b:d2:b8:6d:36:e4:72:8a:10:
64:cf:11:ef:4c:99:fd:4e:24:f0:c1:b6:38:75:f7:d6:1d:e2:
a4:d5:6a:52:7e:8a:7f:c9:f7:94:6c:f6:cd:c2:b9:c9:df:91:
06:75:fc:84:14:28:6a:da:6d:fb:40:0e:fe:0c:40:50:d0:6f:
b3:27:7e:13:e0:4b:79:01:4e:dd:08:04:70:96:91:4e:3b:13:
e9:e1:35:a5:28:b8:77:aa:2e:93:83:40:f5:82:97:53:c7:af:
f8:3e:44:97:e8:92:79:83:20:37:26:dc:14:27:d8:b0:0a:23:
19:e2:ba:16:ae:98:0a:44:33:97:59:1d:a4:35:a4:6c:7e:a6:
10:a5:b9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:13:58 2025 by rpki-client