
$ rpki-client -vvf rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
File: yPzMxL6JiqkgZxNmoP15UynpIB0.mft (raw, json)
Hash identifier: I0ZdzjECHJh6BLDMgkzUIJtESId+qyswAr07/rVvkBs=
Subject key identifier: 8B:87:04:AE:5B:FF:36:3D:BB:6E:11:5E:1D:CF:A1:4A:C7:09:B7:45
Authority key identifier: C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D
Certificate issuer: /CN=A919040F/serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
Certificate serial: 0C11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
Manifest number: 0BFE
Signing time: Tue 04 Nov 2025 18:56:17 +0000
Manifest this update: Tue 04 Nov 2025 18:56:16 +0000
Manifest next update: Tue 11 Nov 2025 18:56:16 +0000
Files and hashes: 1: yPzMxL6JiqkgZxNmoP15UynpIB0.crl (hash: vvX+Sjk+LWu5lgkILSLyJnGXgM55+0SAsqAisQ3+SSk=)
2: 5407E320236911EA9967DA1CC4F9AE02.roa (hash: 9Lv5bhv0bxsvxFT2f6q/WZoPs5VKMn4j236fJLh21Lo=)
3: 20748896236511EABCF20E10C4F9AE02.roa (hash: fsXBl6kkemGNmESiiA52EPocsTds19X+DjtA+JLmvPA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl
rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 18:56:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3089 (0xc11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919040F, serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
Validity
Not Before: Nov 4 18:56:16 2025 GMT
Not After : Nov 11 18:56:16 2025 GMT
Subject: CN=690a4c50-d44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:14:e5:a1:98:75:9c:df:4c:48:b9:e6:38:bb:
0d:a8:0f:53:d9:af:b1:a8:59:d4:a3:b2:41:c7:26:
2a:ad:aa:a9:e4:8d:54:3a:58:a5:cc:70:d4:ff:cd:
04:fb:b5:f1:51:c1:d8:eb:0c:5c:f2:88:b8:f2:7d:
b5:e1:77:0d:d7:c9:bd:63:9f:11:4c:6c:02:b4:d9:
d4:f3:58:89:95:27:d6:6e:be:86:7e:8c:12:0b:d5:
71:4d:8d:69:78:98:47:4e:54:18:53:fe:17:fc:c6:
7f:ac:36:f0:3a:4b:37:0b:12:bf:6f:3e:cc:63:cd:
75:db:03:62:f4:f9:99:42:9b:4b:5f:91:1f:bb:70:
28:66:6d:4e:46:e8:fd:28:ff:dd:0e:6c:40:a0:dd:
5b:bf:c1:6f:1b:4e:42:f4:71:29:13:4f:71:90:03:
ec:4f:b0:65:10:83:91:80:4b:d4:81:b3:4c:24:78:
00:d2:6b:d5:47:46:e6:35:bf:fb:3f:2a:b6:ef:d1:
3c:d8:2b:f3:f6:80:68:65:f7:68:3f:6f:86:2b:5c:
44:9d:14:34:ed:c8:9e:e5:d9:80:b0:2a:70:c9:62:
f2:2a:df:76:43:45:9a:cc:fd:d9:db:13:ca:40:4e:
3f:e0:95:19:e9:74:74:80:45:e3:46:85:81:84:59:
da:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:87:04:AE:5B:FF:36:3D:BB:6E:11:5E:1D:CF:A1:4A:C7:09:B7:45
X509v3 Authority Key Identifier:
keyid:C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:63:2c:fd:d4:3b:20:f8:49:3a:a1:33:3c:fa:30:66:fa:ff:
a2:6e:0d:14:c4:b6:e2:bd:da:24:fe:f6:3a:2c:9e:84:bc:e7:
61:5e:77:49:83:04:88:e9:70:69:63:31:21:87:16:41:a1:a0:
bd:bb:06:e7:98:ac:e8:b0:2c:a9:17:43:49:7f:48:99:e9:84:
72:79:81:ad:2c:40:62:d2:9f:93:39:e2:50:e4:23:c5:d4:43:
42:25:7b:47:ad:5a:79:02:68:2b:26:93:54:3e:9c:1a:9e:cd:
b1:22:1f:32:c6:71:f8:96:85:80:eb:c3:38:c8:0b:bd:71:20:
09:31:28:8a:17:13:ce:65:14:b3:d6:2e:04:53:09:5e:a7:fe:
5c:9d:86:86:ee:39:b7:08:07:d3:2c:99:de:09:66:bc:d2:5c:
f4:80:03:0c:9e:53:ae:42:4d:7a:6b:c9:6e:75:5a:ed:08:36:
7c:31:81:7a:fe:12:27:e6:48:5e:c1:56:3d:df:87:a9:9e:8d:
67:e1:a7:7d:0c:fe:e7:79:9d:ec:0d:32:06:6f:be:1c:1e:58:
f5:02:37:d1:26:db:a6:6f:cc:58:10:3d:a3:91:e9:99:cf:bf:
a8:7e:80:b3:87:d5:7f:71:37:ca:43:8d:b4:70:54:55:bf:bd:
58:a7:f1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:09:33 2025 by rpki-client