
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft
File: TySfPU9SKVXadOhT4AXndAZ6Oaw.mft (raw, json)
Hash identifier: tUOC8zwvrHz5M6XaUAMbBEtaU9ocmCIwCZJh1fAPcQs=
Subject key identifier: 24:E1:10:6B:0D:BE:D7:65:C0:5D:E2:8D:6A:0F:08:5B:9E:01:95:07
Authority key identifier: 4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC
Certificate issuer: /CN=A919F06A/serialNumber=4F249F3D4F522955DA74E853E005E774067A39AC
Certificate serial: 0776
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft
Manifest number: 0776
Signing time: Tue 04 Nov 2025 21:39:26 +0000
Manifest this update: Tue 04 Nov 2025 21:39:26 +0000
Manifest next update: Tue 11 Nov 2025 21:39:25 +0000
Files and hashes: 1: TySfPU9SKVXadOhT4AXndAZ6Oaw.crl (hash: W5F9gOFXqHLOY11vbgIiMspeIjSGUDEJsad+eGzcO4s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.crl
rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1910 (0x776)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F06A, serialNumber=4F249F3D4F522955DA74E853E005E774067A39AC
Validity
Not Before: Nov 4 21:39:26 2025 GMT
Not After : Nov 11 21:39:25 2025 GMT
Subject: CN=690a728e-cd24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:4b:1f:cb:30:db:72:c3:d1:d8:99:e8:37:
1f:e4:6b:50:be:1d:f2:46:a4:a4:71:85:6e:67:85:
48:c0:0d:1f:00:b8:4c:c8:ed:47:33:e9:6d:4d:08:
44:6c:d2:36:d9:40:3f:dd:84:28:b6:7d:b6:91:cd:
79:b4:8a:57:ff:3f:89:d5:27:7c:56:e0:7d:b4:52:
24:5f:96:bd:d3:f2:f1:95:6f:ef:49:e5:44:e0:09:
1f:2e:be:6b:ab:83:b2:fe:1d:61:8e:e7:83:0b:0e:
87:11:db:02:28:8f:a8:4a:ca:c4:28:ca:af:17:47:
e6:67:05:87:89:df:55:18:15:e5:1e:17:da:a5:f6:
d2:86:b2:ca:87:ed:70:b2:34:cd:65:97:9e:97:ba:
66:cc:31:e3:cf:57:0e:51:80:61:09:74:4b:4c:d8:
0b:b5:f6:d0:d7:43:4c:90:9c:26:fb:79:b3:82:fc:
21:67:05:c1:c6:7e:ca:bf:d9:6a:59:98:04:3a:4c:
48:29:5a:6d:88:ca:a9:03:6a:37:b9:fb:53:fa:f8:
02:bd:a2:a1:7c:4d:e4:e8:6b:da:d8:57:2d:b8:44:
35:41:df:75:30:b3:f5:9e:e4:0d:3e:2f:4c:65:5f:
69:72:54:05:7b:f6:92:af:5a:1f:63:0c:ec:34:7f:
10:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E1:10:6B:0D:BE:D7:65:C0:5D:E2:8D:6A:0F:08:5B:9E:01:95:07
X509v3 Authority Key Identifier:
keyid:4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:e0:cd:48:8d:e9:45:2e:fa:d8:9e:02:36:b3:9c:4a:19:87:
b2:1b:8e:08:de:69:b9:8b:bd:2b:6e:cb:53:c7:6d:08:23:23:
90:cf:1f:c6:e6:94:4f:ed:4f:73:a8:0c:9f:c0:a7:1b:c5:c3:
8f:ff:46:bc:41:0e:96:65:64:d8:9c:27:fc:0a:2c:b1:96:17:
15:ce:35:72:1e:4c:bb:38:3f:b5:b2:1e:f6:5a:5f:05:85:e0:
37:57:1f:2e:62:2d:2d:46:31:01:44:8d:b0:1d:b4:95:f6:ac:
56:8e:bc:8e:ff:17:65:b9:c0:20:5e:8a:b7:9e:fc:be:ff:92:
17:0e:b0:9e:a4:e4:b8:21:7b:aa:55:44:87:35:90:46:8d:0c:
f3:a2:0f:26:ea:97:bf:86:ba:66:a6:58:7b:fe:5b:f3:c2:b4:
36:6f:18:93:dd:aa:c5:eb:3b:b6:92:9c:29:a6:4c:35:0a:0d:
4f:d2:d2:ba:e3:37:09:5e:eb:b6:dc:d5:af:e6:e8:16:9c:7a:
4a:29:34:34:95:30:ac:3a:f6:81:83:8a:76:3c:6e:f2:16:2e:
da:f0:27:48:7f:da:4d:92:3f:1c:4f:4f:be:b9:1f:b7:05:15:
97:43:8f:09:3a:ac:79:e9:8a:e2:87:32:09:4e:50:5d:cd:0d:
14:e6:4c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:21:10 2025 by rpki-client