
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft
File: yvC3hLE-FADutCJboi1vmDiCTsM.mft (raw, json)
Hash identifier: EQ4A2gcLebMvhTX+ON4+2CPDT/24MXz0UHEFn99t+AQ=
Subject key identifier: 33:2E:BE:81:7B:3A:28:33:19:FD:12:3A:27:C4:B3:47:7D:8E:7D:9A
Authority key identifier: CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3
Certificate issuer: /CN=A912D99E/serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3
Certificate serial: 159C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft
Manifest number: 157A
Signing time: Mon 20 Oct 2025 17:09:45 +0000
Manifest this update: Mon 20 Oct 2025 17:09:44 +0000
Manifest next update: Mon 27 Oct 2025 17:09:44 +0000
Files and hashes: 1: yvC3hLE-FADutCJboi1vmDiCTsM.crl (hash: 0PudTW4hBw97F1zaQb86g2QlareyckD028sxPLe6IoI=)
2: 4861945C599A11ED99A5B776C4F9AE02.roa (hash: WWunrSKNr/tHvzh6M3TsIN0SasCbbY/rUP6pCCee+Bg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.crl
rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 17:09:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5532 (0x159c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D99E, serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3
Validity
Not Before: Oct 20 17:09:44 2025 GMT
Not After : Oct 27 17:09:44 2025 GMT
Subject: CN=68f66cd8-1e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8b:7e:2b:d0:ec:90:26:6b:60:da:2e:de:e4:
a8:0f:f5:2b:4b:ce:2a:97:73:b1:29:f4:f9:ef:1e:
a0:b6:7b:f1:d6:2c:bc:19:3c:05:ad:60:05:24:ca:
64:d3:59:46:08:c0:11:97:23:cc:e7:15:b1:22:2a:
73:e5:2a:02:be:10:4b:b4:a9:3d:bc:dd:c3:b6:29:
c2:18:30:87:10:ab:27:fb:93:2e:c1:47:01:c7:44:
c3:6b:8d:e2:d1:c5:9e:aa:c9:db:96:63:6c:ed:56:
0a:97:a8:07:6a:ec:ce:8b:46:5d:a2:c0:b1:cd:88:
36:b9:c5:0e:1f:2e:91:c1:63:08:c3:7c:cb:5b:47:
a6:0a:80:a6:4b:91:e4:2e:d6:fd:60:90:79:f4:fa:
8d:17:55:95:98:f7:ca:36:52:9b:8f:78:9f:fa:27:
b6:a7:54:54:fc:7a:b4:98:38:a0:f4:e4:34:da:49:
6e:fa:6e:68:79:7f:ac:1e:f2:f5:33:12:19:ec:6d:
5d:bf:8b:35:f8:53:ea:a9:73:3c:14:6c:8c:fa:c3:
5a:d5:ae:bd:45:38:cf:16:1f:ff:b7:58:2e:b3:f0:
d1:00:df:f2:27:98:1f:a3:ca:80:60:94:cb:04:82:
61:20:f4:92:2b:6d:e0:5c:22:92:7f:a9:05:ac:de:
49:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2E:BE:81:7B:3A:28:33:19:FD:12:3A:27:C4:B3:47:7D:8E:7D:9A
X509v3 Authority Key Identifier:
keyid:CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:72:71:51:f0:bb:69:ba:65:42:0b:61:a2:cd:12:b9:ca:61:
5a:98:bf:c2:aa:04:ba:8e:3c:17:f3:03:45:ee:4a:5f:ad:a5:
34:34:1a:d4:5e:82:d5:0f:1e:2b:34:51:2c:e3:1d:bf:6f:61:
5a:31:b2:10:28:43:96:b5:54:5b:ba:98:3d:97:0d:f9:8c:5b:
84:20:2e:30:68:a0:52:e5:94:bb:98:08:e6:e9:42:0a:00:9a:
8d:9e:eb:ea:86:71:3c:8b:04:9f:8f:86:66:b9:67:bc:24:20:
4a:40:84:d6:8a:c7:69:10:a9:0f:b4:70:ca:84:b2:e7:e8:2e:
74:0b:37:c8:a0:8c:a5:36:c7:66:25:31:46:d5:b8:32:d7:e5:
8e:17:61:73:34:5d:ef:39:cd:59:ab:9f:94:ca:80:24:87:bd:
fc:19:54:39:8f:af:f4:ce:b2:6f:5a:7f:6a:c2:24:c8:84:e7:
b8:00:c6:cd:f7:17:30:19:26:11:f9:f4:d6:49:be:d3:11:ca:
0d:16:05:a6:79:24:36:f7:c6:f7:25:8c:4d:b1:b9:74:0b:c2:
c2:d0:56:9f:88:d8:4b:60:57:9a:40:22:b4:35:4b:4a:54:63:
f5:7e:a2:ff:da:16:b0:98:25:9f:c8:9f:97:66:7d:6d:15:cc:
80:27:c0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:25:53 2025 by rpki-client