
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
File: 1yELbplCSp6CpNRQAnNvZIOqJ5o.mft (raw, json)
Hash identifier: 7a/zMkNDeZ6PTGKtRQjl4I0VC5sCgu1ZG0lIwApgbPw=
Subject key identifier: 2F:6F:70:08:F8:59:88:F8:6C:72:32:AF:F3:87:60:C2:1E:C9:4A:C4
Authority key identifier: D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A
Certificate issuer: /CN=A919A909/serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A
Certificate serial: 0112
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
Manifest number: 010B
Signing time: Wed 05 Nov 2025 05:10:11 +0000
Manifest this update: Wed 05 Nov 2025 05:10:10 +0000
Manifest next update: Wed 12 Nov 2025 05:10:10 +0000
Files and hashes: 1: 1yELbplCSp6CpNRQAnNvZIOqJ5o.crl (hash: 6T2ZkaOtWto3Twir0u4dUl6UcHawSwTjFjod0ylJe9A=)
2: 2F5FEDD02E4811EFA2C93552C4F9AE02.roa (hash: nAAKqeX52YyyXJwlWmzPJZzOWJlGdlFjHrIUMleQhJo=)
3: CCC81F9A703F11F0AD014F1AC4F9AE02.roa (hash: 5E8RDsoVjXmI/w7ZZOkVeITuRBDxCdB14YXNUGb/6bY=)
4: 1D5C0B90475D11EFBD75C15EC4F9AE02.roa (hash: vjvAzTCHT28iPRQdCoJZnbSPvYtHv4wDBYZ54035Ceo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl
rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A909, serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A
Validity
Not Before: Nov 5 05:10:10 2025 GMT
Not After : Nov 12 05:10:10 2025 GMT
Subject: CN=690adc32-3755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:df:d0:b8:20:c6:a5:10:db:54:7a:6c:43:26:
05:63:ac:28:c6:5b:52:af:2b:3c:6c:a8:a7:45:0a:
5a:a2:87:ef:97:ac:64:88:11:71:87:7e:e6:c8:9c:
34:fe:4e:20:29:b7:0d:a4:e8:57:0e:92:e1:14:cd:
c6:1c:f0:34:31:14:ee:7e:da:b9:fe:df:98:c1:60:
a0:cc:2b:21:ba:52:24:cf:cb:d1:c0:f9:bb:ed:e4:
72:a3:52:8e:bc:8a:62:30:83:b5:2a:4c:60:e2:66:
6f:08:6f:d2:00:01:5e:07:27:9a:b3:14:03:d8:5e:
85:97:2a:af:19:d0:3b:f8:b6:b3:cb:88:d7:72:89:
65:69:7b:ee:3c:96:db:62:aa:08:ca:39:1a:51:3f:
e9:04:11:4d:5f:92:e4:c5:20:6c:fb:46:72:74:2c:
c6:59:74:2b:95:21:b9:3f:ea:23:87:d1:55:3c:d2:
24:f7:06:3e:9e:37:18:42:ac:34:7f:de:89:20:fe:
9e:91:1c:f2:01:9c:bb:be:6c:3b:f9:e2:36:e2:10:
4e:fd:a4:2b:97:ee:8a:89:c0:24:69:0a:ac:7d:a3:
18:aa:0e:b3:3a:83:95:13:39:79:aa:c7:22:89:91:
af:54:75:92:ff:bc:7e:03:fd:16:a0:54:27:6f:3a:
6b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6F:70:08:F8:59:88:F8:6C:72:32:AF:F3:87:60:C2:1E:C9:4A:C4
X509v3 Authority Key Identifier:
keyid:D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:6d:a2:ba:45:07:9a:61:da:21:00:2a:b5:07:b8:e7:76:3a:
91:60:dc:f4:83:a5:00:31:ce:cf:c8:7c:53:74:1c:4c:37:17:
0f:78:15:97:ce:85:ed:be:ac:0e:ab:52:c1:5c:fa:f6:39:05:
11:1a:3b:54:95:ef:2d:c6:c6:40:18:c5:24:2a:e4:ec:44:8c:
9b:10:1e:a2:60:c7:2d:19:d6:8a:1d:12:b1:91:fa:c5:b2:52:
98:16:80:d3:fa:73:89:4a:cf:2a:1e:03:4a:5c:16:dd:83:2c:
7a:0e:bd:69:1c:89:2a:51:13:f6:80:0c:a2:2d:3f:87:e0:32:
e0:7f:8a:8b:19:85:85:20:df:ef:ad:bf:2b:48:e2:d7:26:4b:
5c:ee:42:72:bd:9f:2b:61:6c:17:36:ea:09:08:49:ad:30:bc:
52:f2:23:ac:e3:f3:d5:b5:a3:9d:08:31:7f:37:dd:bd:56:4b:
00:a5:24:8b:4a:f0:86:d3:4f:f9:1c:b7:2b:d4:a3:9d:0a:ab:
fb:f8:f4:e5:86:15:6f:eb:a5:2a:6a:ea:85:ef:2c:d6:22:66:
a2:84:ec:f8:b0:94:66:51:94:3e:55:be:95:51:bc:1a:ed:d7:
4e:bc:e1:9a:98:ee:82:0e:60:8f:e3:11:c6:ed:0c:5f:75:e5:
c1:53:b7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:27:26 2025 by rpki-client