
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft
File: Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft (raw, json)
Hash identifier: +ge9zJQSPQn2s5xKGyHOmt/yKxqIADVlPFkzyq9cN4c=
Subject key identifier: AD:6F:94:EE:5A:C1:CB:5E:73:AD:54:7E:70:B0:F6:64:3A:23:D5:03
Authority key identifier: 63:82:B5:13:34:83:15:D5:AF:3F:13:0E:C5:4C:1D:A8:67:28:8C:2C
Certificate issuer: /CN=A91C15F2/serialNumber=6382B513348315D5AF3F130EC54C1DA867288C2C
Certificate serial: 0639
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft
Manifest number: 0630
Signing time: Tue 04 Nov 2025 22:49:44 +0000
Manifest this update: Tue 04 Nov 2025 22:49:44 +0000
Manifest next update: Tue 11 Nov 2025 22:49:44 +0000
Files and hashes: 1: Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl (hash: 7KsCfTuTTfgdYLMLvt5BxcFX5+OEaApo2pS814/4eLk=)
2: C8AE3C40B93811EBAC80A46DC4F9AE02.roa (hash: Ck3Q3b0m7wZfc35rCMLbisQ7sVgiMLOPm+0PDdt1xrg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl
rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1593 (0x639)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C15F2, serialNumber=6382B513348315D5AF3F130EC54C1DA867288C2C
Validity
Not Before: Nov 4 22:49:44 2025 GMT
Not After : Nov 11 22:49:44 2025 GMT
Subject: CN=690a8308-d521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:33:76:38:47:e5:4b:b4:63:ab:f2:25:6a:6a:
f7:e6:88:f9:7c:3f:5f:ff:63:7d:4f:64:c3:83:3a:
4d:d5:fc:6e:32:8d:0a:56:b9:7a:e3:ae:ec:e0:57:
a8:08:02:05:6d:d8:49:9b:16:3f:b2:51:a5:a5:4e:
48:c2:4e:a9:a1:c3:31:47:bf:42:b4:e4:46:20:55:
b1:83:34:50:33:c2:68:cf:ef:e4:a7:22:39:ad:f0:
02:80:9a:81:bc:78:d1:40:59:23:9c:9b:66:6c:cd:
8d:c1:4c:03:0b:b2:bf:dc:99:13:3e:a3:a9:36:55:
ee:6d:35:af:e3:2b:2d:2d:d2:0a:95:fa:3d:3b:5e:
f3:81:22:a3:4e:db:cb:e8:a9:0c:91:b6:27:22:41:
68:ed:38:81:60:de:b3:16:8c:84:5a:c8:b8:f9:6c:
0f:25:09:06:4c:18:a2:4c:1e:f3:f8:03:17:f2:0d:
3c:68:82:85:6a:2f:e4:4f:64:44:9c:1f:25:13:af:
e0:13:3b:bd:c7:e2:f2:77:9f:1b:10:b1:7d:a7:c6:
c2:40:8e:d9:36:a9:5f:50:9c:63:18:f2:fd:08:b7:
f2:a9:3e:11:2f:74:1d:d8:d5:df:55:ba:51:69:dc:
c2:72:85:88:b9:00:b2:43:c2:59:9d:e6:db:7d:0a:
a2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6F:94:EE:5A:C1:CB:5E:73:AD:54:7E:70:B0:F6:64:3A:23:D5:03
X509v3 Authority Key Identifier:
keyid:63:82:B5:13:34:83:15:D5:AF:3F:13:0E:C5:4C:1D:A8:67:28:8C:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:77:9c:b2:4e:02:35:4e:d4:c9:5e:74:75:1d:16:ed:63:72:
27:d9:e1:be:4f:3f:8b:9f:50:35:99:3e:19:38:7d:44:03:ed:
b3:e1:75:c5:0c:99:f4:41:2f:3c:50:81:57:a2:ce:e1:8d:0a:
9d:23:bd:6f:43:7e:2a:1a:c1:4f:2a:93:35:44:3d:e2:32:dc:
8d:4c:35:7a:08:5b:6c:32:13:47:44:75:ee:6d:1c:e4:e1:d2:
45:20:00:5f:ab:f0:c2:f0:80:dc:e9:bd:4c:4a:1b:41:3e:ed:
bd:df:3e:75:db:31:90:6e:e2:34:37:d1:62:2f:e1:c9:c4:db:
23:93:12:5e:4d:20:bc:d9:09:9a:b4:f3:e7:9f:11:49:fb:bb:
f4:53:02:33:08:94:71:91:18:11:88:5b:8f:8d:a6:01:cd:e4:
90:d2:40:0c:85:23:fd:95:25:9e:b9:a3:36:92:94:7f:d8:a0:
69:62:b2:83:af:c4:ea:26:67:87:98:53:4d:86:65:0b:23:84:
36:ac:3f:d7:e9:8c:42:0f:c5:c8:c0:2c:a2:2e:26:5d:5c:ad:
c7:c0:cf:c5:ad:c7:05:8c:f0:8b:ca:dd:ed:e0:92:ce:c3:80:
e3:59:ff:33:45:1c:c5:d0:87:1f:b8:ad:43:ff:66:85:06:be:
73:d7:22:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:24:52 2025 by rpki-client