
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
File: KYEeHbBovbur-3q2lfhYmL1hjGk.mft (raw, json)
Hash identifier: mr3yM602OiCU7CIB52orC6oe7dDCIk4ggDW/cYV60EE=
Subject key identifier: 6B:9E:62:4B:6C:50:E1:AC:C1:49:10:2E:28:0A:03:BE:0E:2E:14:16
Authority key identifier: 29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69
Certificate issuer: /CN=A91B0CAE/serialNumber=29811E1DB068BDBBABFB7AB695F85898BD618C69
Certificate serial: 0186
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
Manifest number: 0183
Signing time: Wed 05 Nov 2025 03:47:44 +0000
Manifest this update: Wed 05 Nov 2025 03:47:44 +0000
Manifest next update: Wed 12 Nov 2025 03:47:44 +0000
Files and hashes: 1: KYEeHbBovbur-3q2lfhYmL1hjGk.crl (hash: Vct1eYYfQziNReXz9AJ3oZOWrAXUP/sqbSCRZCpTqCk=)
2: 0B2052EA6D0D11EEA65D7522C4F9AE02.roa (hash: romYbuiWzdOqklzJCkUsUwW/w4kh63Rd2xMFubLjgPo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.crl
rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:47:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390 (0x186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0CAE, serialNumber=29811E1DB068BDBBABFB7AB695F85898BD618C69
Validity
Not Before: Nov 5 03:47:44 2025 GMT
Not After : Nov 12 03:47:44 2025 GMT
Subject: CN=690ac8e0-3fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:22:a0:07:2b:a7:8c:50:ca:e5:9e:e1:00:de:
a6:4e:9f:db:b4:23:95:75:10:9d:68:30:48:37:f1:
9d:d1:f5:28:b6:89:88:be:7c:f6:6a:69:a3:5d:d4:
8d:9f:d7:38:33:a2:5f:34:aa:21:f7:47:02:03:10:
59:f6:30:41:4f:2b:1c:de:15:84:cf:93:a3:30:ca:
39:c2:e1:4b:68:f9:61:3f:2b:08:77:b9:c9:48:20:
a9:09:2f:f8:9a:a4:fd:53:11:cb:dd:a7:8b:31:d6:
28:2b:2c:1b:42:52:a9:b2:91:03:0e:79:c5:9c:99:
d4:08:89:01:d6:ce:f7:60:1d:1f:51:45:b0:5c:e0:
b7:15:7c:c0:2d:46:0c:15:07:03:52:e7:a6:e3:79:
8a:f3:aa:ff:ee:81:c3:71:37:52:f5:fc:59:d7:86:
39:86:a4:ce:6e:4a:23:8b:ae:e1:a1:65:d2:3f:61:
ad:56:0f:f5:83:82:53:d1:87:f6:a0:b3:05:b1:84:
ac:b6:10:0d:d7:42:6c:88:df:54:fb:df:b6:66:b4:
ef:47:9d:de:b0:f4:6f:d4:49:03:9f:f3:13:d7:c7:
32:a8:ba:96:c7:10:a0:8a:43:3e:8e:c2:f9:a5:02:
af:c2:89:94:c2:1e:80:4a:32:3e:7f:48:93:d3:0a:
42:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9E:62:4B:6C:50:E1:AC:C1:49:10:2E:28:0A:03:BE:0E:2E:14:16
X509v3 Authority Key Identifier:
keyid:29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ce:28:2c:0d:34:0f:97:56:f7:c9:ee:8c:85:5b:14:13:9c:
55:d1:90:6a:1a:2e:24:b6:3e:1b:21:0b:05:d1:08:bb:82:1b:
65:da:8d:7b:ee:f6:b4:7e:a1:57:fc:7d:73:2b:36:3e:f6:ff:
0a:01:ef:33:42:ed:fb:99:65:1c:4f:68:5e:d5:c6:bd:77:1b:
a4:d4:a4:c7:21:66:23:60:6e:72:a0:0e:99:61:ff:77:6b:70:
c5:7e:46:fe:00:39:e7:3c:f2:99:ad:79:14:db:0b:f4:d1:1f:
7d:01:0d:7c:23:a6:df:1b:ca:ec:19:8d:94:85:20:71:91:a2:
09:f5:cd:fa:77:18:37:8f:b0:13:c9:96:00:0c:a0:27:b7:a1:
fb:0c:b8:63:cc:b3:74:8f:81:70:5c:6c:03:98:97:36:64:72:
42:92:71:c8:fe:ad:5f:95:fd:5b:60:56:30:80:c5:00:80:cf:
d3:7b:76:30:74:bd:e1:9a:ad:81:f5:e3:84:40:65:ab:f9:8f:
82:48:c1:bb:9a:26:06:2c:c9:01:ca:95:16:fb:d2:b8:f5:87:
d7:33:d7:44:da:3c:1a:a8:ec:e0:db:1f:85:35:88:5c:ce:b6:
55:90:23:ef:34:e5:ec:df:cd:2c:1d:ac:d6:89:8f:17:94:4f:
05:d5:08:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:04:31 2025 by rpki-client