
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft
File: yUSBytAO-x3qepOcvimo9F8l4gs.mft (raw, json)
Hash identifier: lK+htxxZSMRKhEeHB+5pE2eHzgd4YM/NVk3ghTbJ2K0=
Subject key identifier: CB:73:B8:1B:2E:E1:AB:D0:08:06:CC:03:BD:06:61:81:66:D3:5B:3A
Authority key identifier: C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B
Certificate issuer: /CN=A9113F63/serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B
Certificate serial: 0245
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft
Manifest number: 0242
Signing time: Mon 03 Nov 2025 01:42:33 +0000
Manifest this update: Mon 03 Nov 2025 01:42:32 +0000
Manifest next update: Mon 10 Nov 2025 01:42:32 +0000
Files and hashes: 1: yUSBytAO-x3qepOcvimo9F8l4gs.crl (hash: zZTy88pzbysGXiYFkJgRNyQaqBRLxwpkQvQrrxwYias=)
2: 03D8DC4A40F011EDAD789E3AC4F9AE02.roa (hash: t7XCEjkxXsWQ/Dxk256ftxVIrolRXrZfUAZmnQPH6Io=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl
rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 01:42:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 581 (0x245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113F63, serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B
Validity
Not Before: Nov 3 01:42:32 2025 GMT
Not After : Nov 10 01:42:32 2025 GMT
Subject: CN=69080889-7eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:63:c4:e3:1c:93:c5:2a:d4:23:b0:55:3b:28:
e4:80:f2:62:9f:d0:7c:11:aa:18:95:30:9b:26:6d:
51:f3:ae:ad:52:06:50:0d:a8:42:91:05:ba:d7:e2:
39:5f:ca:4a:cc:0b:ef:37:ae:d7:64:f8:b7:9c:fa:
b2:d8:09:5d:7f:72:c0:ee:7e:4e:3c:30:ec:70:d7:
98:7c:3a:22:80:bf:a5:08:2f:5b:44:1c:2d:1a:b9:
40:c3:ea:00:50:41:2f:6b:69:2f:3b:93:35:a7:b1:
55:fa:08:ee:58:8a:95:19:8b:9a:42:d6:94:1c:a9:
dc:82:0b:f3:0b:b4:95:5a:32:d6:52:3a:ec:37:a5:
47:dd:08:0f:60:3a:44:ba:e5:1a:3d:e4:7f:5d:2b:
65:7b:18:d2:8d:fc:c7:86:bc:9a:9d:5a:33:6c:e7:
8a:b3:ab:41:2d:3c:5c:f8:ef:59:f8:e8:b3:4d:eb:
48:37:55:92:25:f6:ed:e5:2d:c5:f9:9d:24:1e:a4:
78:c9:a3:ac:f5:f2:ae:a7:97:19:d6:ea:82:47:3a:
7a:1c:9a:2b:ac:b2:56:e1:9d:b7:57:c2:9e:05:8f:
2d:89:6a:b7:b0:0c:38:1d:85:1e:67:b5:7f:11:7d:
ea:95:ee:56:d4:81:65:b9:43:e1:86:5d:ae:b5:de:
59:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:73:B8:1B:2E:E1:AB:D0:08:06:CC:03:BD:06:61:81:66:D3:5B:3A
X509v3 Authority Key Identifier:
keyid:C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:fc:07:76:e9:06:a7:81:df:1c:cc:53:d8:f7:64:43:79:4f:
fd:80:cf:ea:87:94:2a:95:5f:35:00:13:c9:d0:a0:3f:d0:79:
24:27:c3:27:80:88:fd:98:ad:ea:9a:87:58:fe:1a:fb:cc:2d:
f3:57:f1:b6:68:7d:64:85:81:48:78:f0:46:95:ec:53:38:19:
54:5c:01:91:41:75:e0:e2:d0:67:2c:14:8d:41:38:40:40:8b:
cb:a8:d7:e5:7a:43:dd:bf:6f:7d:4e:40:54:63:a7:9c:c5:8a:
34:39:c7:5c:be:54:3d:8c:16:50:84:76:a2:f8:3b:f1:a7:ad:
54:95:b8:e1:e0:0d:de:4c:07:87:0c:ff:8f:21:d8:f9:3b:f0:
d0:a2:61:63:7d:28:ad:99:b0:d4:4f:fd:4a:bb:cf:50:9f:7f:
2c:41:d6:2b:23:56:7d:85:3f:9c:d8:8f:21:dd:30:36:ea:81:
77:46:46:59:69:e9:e9:11:69:5c:3f:4b:41:87:43:e2:a4:38:
34:f3:8e:ac:4f:97:1f:59:52:ca:b2:20:31:8c:e6:e7:ab:5b:
55:2c:2d:7e:9f:a2:9b:23:59:2a:21:54:13:43:8e:da:dc:65:
c1:11:e8:cf:84:57:e4:d7:fb:a0:81:fc:57:c8:ad:81:69:85:
65:f2:ba:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:20:03 2025 by rpki-client