
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
File: YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft (raw, json)
Hash identifier: g29WASjBAhlZDlYztxjr8otwkmTDYEREFqglinNcDeU=
Subject key identifier: 54:04:2F:29:E8:79:6C:F3:52:55:B9:BF:06:26:34:00:65:50:23:B4
Authority key identifier: 61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC
Certificate issuer: /CN=A91E5832/serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC
Certificate serial: 98
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
Manifest number: 97
Signing time: Mon 03 Nov 2025 06:24:55 +0000
Manifest this update: Mon 03 Nov 2025 06:24:55 +0000
Manifest next update: Mon 10 Nov 2025 06:24:55 +0000
Files and hashes: 1: YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl (hash: hFisI9VixMqMPGPqI+aW0gzuuadjhT6mb7S3fjaLhIo=)
2: A947EC6ED0BA11EFB7A6B027C4F9AE02.roa (hash: RZ0QTKiTTNx8zLcCMyWL6kS10XE+JurXOmLszG1L2Po=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl
rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:24:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5832, serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC
Validity
Not Before: Nov 3 06:24:55 2025 GMT
Not After : Nov 10 06:24:55 2025 GMT
Subject: CN=69084ab7-ccd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:61:94:10:e1:15:5f:94:fe:d2:16:23:e0:
c5:c2:3e:da:a3:b4:a7:96:c2:6c:4c:2c:20:30:4b:
79:fc:be:4f:7e:16:2f:6a:d0:fd:0b:2f:fc:93:0d:
29:9e:8a:8e:8d:98:c4:26:fb:6c:7a:54:2b:20:a9:
e0:e6:3f:b2:97:1e:d2:bf:f8:e0:0b:9b:4e:d3:bf:
43:4e:8d:b6:ea:1a:d3:b5:25:a5:9e:23:9f:ff:06:
e7:38:68:27:a2:38:ac:c6:6e:2f:53:22:70:3e:66:
33:d5:f3:ec:41:5d:24:6b:d7:02:85:6a:56:f0:3e:
3c:45:df:0c:af:43:3e:d4:76:fa:b1:4e:2c:f0:aa:
69:d2:ad:e6:d1:a6:8e:17:7b:5f:c5:ea:ad:c9:3a:
0c:25:90:86:74:37:6d:3b:9b:5f:3d:9d:1b:23:c8:
ce:dc:20:11:d8:a2:80:1b:ec:82:5e:8c:b6:23:31:
1f:6e:40:26:d6:c0:8b:21:0c:82:f7:16:ed:37:8c:
57:d7:4e:c4:de:de:10:84:3d:32:0a:8a:29:c8:71:
73:32:79:b3:e7:b2:02:b5:b6:46:12:bb:83:49:6b:
63:bc:1a:1d:ca:9e:ac:9e:30:31:45:86:b0:a9:ee:
df:66:ea:cc:d8:e1:76:dd:97:bf:c2:f3:93:6a:22:
a7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:04:2F:29:E8:79:6C:F3:52:55:B9:BF:06:26:34:00:65:50:23:B4
X509v3 Authority Key Identifier:
keyid:61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:a3:ec:75:e7:14:f4:44:ee:ab:38:8d:06:8d:ed:5d:49:8c:
32:0f:c3:39:6c:7a:f8:92:88:60:df:74:38:a5:2c:60:1a:b7:
13:48:65:e0:ff:45:a3:5e:fd:36:06:32:d4:86:86:37:95:58:
1e:99:5c:c0:16:6a:bd:7f:fd:73:58:1d:dd:95:a4:46:ec:a9:
5c:81:08:b7:fa:c4:30:36:ff:a5:6d:3e:e6:17:52:81:8b:93:
88:13:6d:e7:fe:cb:ed:8e:67:c1:7c:df:03:0e:3a:23:a4:60:
d3:89:82:f7:b1:6a:5a:98:ba:ce:3f:e9:33:22:86:94:94:4a:
78:9b:ae:c0:29:1a:08:98:a0:f5:56:fc:27:43:32:19:0b:d6:
1d:ef:4e:88:bf:6b:65:75:00:ec:67:a6:5f:1a:d6:fb:9a:20:
dc:f1:cb:54:e7:fb:6e:d0:ba:00:d6:af:24:e1:b1:7c:36:33:
ea:78:e4:ad:61:75:8b:93:1a:37:b3:23:fb:f9:49:de:a9:0f:
c8:42:bb:41:64:cf:dd:50:54:b4:79:0c:42:0a:b8:22:4b:44:
9e:b4:ab:f8:9d:12:6f:65:5f:ef:8f:a1:66:2b:b1:af:fb:07:
ea:3c:b3:3f:c0:33:92:84:b0:a1:dc:37:68:9d:ca:df:ca:70:
a8:b3:19:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:41:50 2025 by rpki-client