
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
File: yGA2V1UkSO1buu1xck0iIPA798Y.mft (raw, json)
Hash identifier: vG1AdccX/PJ7VbWiQ9kRof5QYnmZrYOSxrH9JLaQTeI=
Subject key identifier: 90:9B:96:30:83:6E:9C:C9:00:20:25:A9:66:66:C0:35:9B:9C:2E:06
Authority key identifier: C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6
Certificate issuer: /CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
Certificate serial: 0103
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
Manifest number: FB
Signing time: Mon 03 Nov 2025 05:12:16 +0000
Manifest this update: Mon 03 Nov 2025 05:12:16 +0000
Manifest next update: Mon 10 Nov 2025 05:12:16 +0000
Files and hashes: 1: yGA2V1UkSO1buu1xck0iIPA798Y.crl (hash: XWJnEC384dCTZSJdtmH3+9T2mDUWbQVGotcRCmy9LPQ=)
2: 68EBA63A48B911EFB80D9535C4F9AE02.roa (hash: SDdYRvXnG416X1QTBXKH/HiVb0zTXNC7wcw8Ko4jVbs=)
3: C006CA2248B311EFB8A4C178C4F9AE02.roa (hash: BB5/p5ExgMeQd5Go8UNqIFMq/xQWZ4tohFPvDD4Zv98=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl
rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 05:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259 (0x103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E782F, serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
Validity
Not Before: Nov 3 05:12:16 2025 GMT
Not After : Nov 10 05:12:16 2025 GMT
Subject: CN=690839b0-bdf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e9:92:8a:60:ac:f2:c5:7d:b8:d7:d3:45:52:
5f:6a:52:be:14:46:bb:67:40:57:d4:5e:74:2c:72:
c0:36:89:a7:91:48:01:ab:61:fc:6a:f5:c8:27:73:
06:c0:7f:6b:13:ce:3e:b8:88:8b:34:cd:44:7f:90:
9a:34:82:ca:cb:dc:e8:66:3d:19:24:fb:33:fa:dc:
97:2d:41:70:53:28:c8:e6:f8:3b:6b:82:b3:c8:00:
f7:f1:da:0e:bd:07:a2:32:ec:d6:e4:ad:be:ec:de:
7c:d8:82:d0:f4:fa:16:ca:58:00:5a:5b:ef:82:8e:
af:49:9d:31:9c:2a:0f:f3:0c:54:ff:e4:20:ee:55:
f6:8b:95:f9:33:c6:61:fb:a7:24:00:30:1c:fb:2d:
74:9d:a8:f2:ba:02:78:a2:8b:f6:2f:8e:e1:6e:2d:
cd:6a:ef:01:2e:33:59:99:f2:56:75:53:e2:0b:1a:
df:a1:1a:da:1f:18:9b:0f:6e:38:d1:47:4f:90:bc:
1e:75:66:6d:ec:0b:71:da:9d:d5:dd:33:6c:63:41:
d6:69:38:3f:21:59:a7:a7:e7:32:b4:6f:b0:cd:83:
eb:66:0b:7d:76:d8:17:aa:d6:ed:aa:88:60:83:c9:
a2:60:8a:da:4c:9d:27:5b:14:7f:4c:c0:c1:94:12:
f3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9B:96:30:83:6E:9C:C9:00:20:25:A9:66:66:C0:35:9B:9C:2E:06
X509v3 Authority Key Identifier:
keyid:C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:07:28:79:46:69:96:81:9e:f5:b3:48:15:e1:c6:53:80:49:
17:8c:f5:10:04:5e:fd:48:a3:31:d8:9c:99:08:b9:98:72:9a:
62:8a:4e:b9:43:22:12:3e:3e:fd:9e:ec:9d:46:fe:d5:90:dd:
23:d3:97:5c:9a:3e:c7:f8:55:e0:83:8c:9f:ca:b3:e7:c1:ab:
51:16:83:bc:9e:ef:69:05:6f:cd:72:0c:dc:a9:72:d2:6d:ae:
39:15:e1:18:4e:5e:f0:f4:17:a7:ed:4b:8c:f5:5f:6d:82:25:
d6:35:c1:cd:be:09:a8:07:03:32:51:e8:69:39:50:1b:59:f7:
a1:eb:d2:5b:51:ce:57:82:80:8a:44:48:59:39:2b:00:c9:fc:
7a:f8:3a:33:47:ba:88:34:83:69:72:39:40:a9:54:8b:80:be:
32:53:9e:b8:bf:c6:6c:f7:1f:11:1b:43:33:e5:61:67:91:6a:
53:8b:bc:1c:0e:53:0b:d2:45:81:65:10:d0:0e:e9:ac:69:66:
5e:8f:cc:0c:53:53:d0:b0:9f:75:dc:d3:37:79:3c:70:e4:15:
7b:3f:4d:be:f5:29:2d:0d:fb:02:bc:01:07:9b:6e:8a:c5:8e:
11:eb:c8:ef:2e:d5:6c:81:9f:46:5c:cb:90:b4:b7:b1:91:9f:
56:6b:8e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:20:52 2025 by rpki-client