
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft
File: _cYTVRXV0BXJRDu0xZvL-20Gk9E.mft (raw, json)
Hash identifier: 9zvsn42rfmdnfC2VnBt8r1GqC2f0WSEglpeL89AYBJ8=
Subject key identifier: 19:F9:71:26:EF:21:C7:6D:A5:EC:FD:01:CF:0D:E2:2B:40:F1:18:EA
Authority key identifier: FD:C6:13:55:15:D5:D0:15:C9:44:3B:B4:C5:9B:CB:FB:6D:06:93:D1
Certificate issuer: /CN=A919DF6F/serialNumber=FDC6135515D5D015C9443BB4C59BCBFB6D0693D1
Certificate serial: 0B5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft
Manifest number: 0B57
Signing time: Tue 04 Nov 2025 19:15:30 +0000
Manifest this update: Tue 04 Nov 2025 19:15:29 +0000
Manifest next update: Tue 11 Nov 2025 19:15:29 +0000
Files and hashes: 1: _cYTVRXV0BXJRDu0xZvL-20Gk9E.crl (hash: VkJ4JXgX+zAaqbR5xrxdlJbzY1ZiLqG0DnG5NuOHOuk=)
2: 2FD08C3244C511EAB6D6A36FC4F9AE02.roa (hash: eJxhMumE24IdqZQ/I602N1y1cc9RwzoCVgJskzDB9CE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.crl
rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 19:15:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2911 (0xb5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DF6F, serialNumber=FDC6135515D5D015C9443BB4C59BCBFB6D0693D1
Validity
Not Before: Nov 4 19:15:29 2025 GMT
Not After : Nov 11 19:15:29 2025 GMT
Subject: CN=690a50d2-6866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0a:38:96:43:52:d5:56:42:25:97:98:6a:6d:
70:d9:15:05:c5:63:fe:6c:03:31:43:42:05:7a:6c:
d8:58:20:1c:d1:87:58:ae:a8:34:58:08:e9:1b:d1:
80:53:11:2a:ca:e3:29:83:eb:63:3a:1a:92:f4:cb:
4c:db:db:7e:4e:cd:a1:be:4c:20:91:66:45:29:1f:
2b:d6:6d:5d:05:f0:69:6d:1d:d4:eb:94:58:66:d5:
d0:7f:82:38:f3:84:c5:f7:16:a1:69:5f:b8:71:13:
4a:19:69:28:66:31:9d:f2:fe:c7:cc:b1:2a:5b:84:
7d:6a:cf:bb:3c:2b:3b:0d:9f:8b:4e:4d:a7:49:0a:
1b:d4:5b:bb:0e:b6:51:a8:ca:82:3d:e7:68:ab:df:
a3:75:ce:e2:b6:3d:71:52:0a:bc:67:fc:7d:9c:26:
f8:88:b0:21:ee:7a:e7:e5:20:ac:16:25:bf:fd:f7:
39:3b:f9:13:67:87:cd:67:cd:89:2f:e0:ac:cd:19:
83:b3:9c:65:3b:ac:9e:ca:c8:c1:fe:4b:ae:f8:65:
c7:5c:f2:79:29:13:6d:2c:b3:d7:1d:e7:e1:b7:d5:
da:0b:f8:e5:f8:da:11:e2:cb:11:b2:65:0c:a4:39:
70:8d:c5:41:78:52:08:b8:b8:15:0c:4a:be:5b:02:
7b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F9:71:26:EF:21:C7:6D:A5:EC:FD:01:CF:0D:E2:2B:40:F1:18:EA
X509v3 Authority Key Identifier:
keyid:FD:C6:13:55:15:D5:D0:15:C9:44:3B:B4:C5:9B:CB:FB:6D:06:93:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:17:53:a6:6d:21:43:82:f6:75:d9:26:52:14:7d:4e:c5:0c:
c2:42:44:cb:c2:d1:0b:7d:7c:29:c4:84:e5:5d:c9:f7:00:86:
67:78:7c:59:97:9b:0d:31:94:58:71:59:ec:03:77:d7:39:fa:
bb:f5:bd:ad:6e:31:11:4e:8a:4e:fe:68:d7:f2:4f:43:91:1d:
bf:83:a5:6f:d1:90:de:5e:f7:fc:28:60:40:66:79:6c:f0:5e:
95:d1:1c:41:5a:09:69:3f:7c:a9:e0:17:69:5b:45:38:86:0c:
bb:70:fc:a1:f4:75:b7:02:d7:15:e6:39:c7:91:1e:d0:66:12:
0c:1e:6d:c8:77:b9:e8:7d:38:9b:32:af:48:51:07:91:3c:66:
1f:12:d5:32:79:26:a6:ba:54:53:5e:09:1a:34:c3:8b:16:55:
51:b3:cb:ca:be:c3:c1:74:e2:77:7b:7c:4e:c2:76:07:96:3e:
ab:94:a2:c9:14:f5:52:3e:bc:22:59:10:1f:0d:5a:9f:f7:69:
b7:55:b7:40:39:2a:67:d5:31:59:59:29:ab:57:ea:e7:8b:ba:
f2:75:cc:b9:a2:a3:25:49:e2:75:7a:22:65:ba:c8:02:54:4b:
6c:b1:8e:d2:ec:0f:73:b6:0f:8a:10:fc:95:e3:4f:6e:03:49:
a4:3e:e0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:55:32 2025 by rpki-client