
$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
File: cyJU29YY8YhtTfkgE5O_34ueAg4.mft (raw, json)
Hash identifier: XH+X+dUxYywo2o6dCwD8K45BmvrnXubHb8LYVU0FYIw=
Subject key identifier: 57:2A:7E:D9:BF:BD:D0:64:B7:B1:E8:99:C1:50:04:98:BB:7B:49:6F
Authority key identifier: 73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E
Certificate issuer: /CN=A91142EA/serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E
Certificate serial: 06FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
Manifest number: 1FEA
Signing time: Tue 04 Nov 2025 16:09:41 +0000
Manifest this update: Tue 04 Nov 2025 16:09:40 +0000
Manifest next update: Tue 11 Nov 2025 16:09:40 +0000
Files and hashes: 1: cyJU29YY8YhtTfkgE5O_34ueAg4.crl (hash: bSv6LBguuJ+pyJ2ZC6EUniB0bijFsDFOqA2jRyGG0lY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl
rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:09:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1790 (0x6fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91142EA, serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E
Validity
Not Before: Nov 4 16:09:40 2025 GMT
Not After : Nov 11 16:09:40 2025 GMT
Subject: CN=690a2544-fe0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c3:53:dc:28:f3:ef:db:6b:cc:28:51:50:6c:
ac:bb:cf:42:86:95:fe:11:a2:8d:0e:5f:ee:ee:9d:
d6:d5:a0:8a:5b:b5:77:7c:01:e5:b8:d4:a1:af:6a:
54:38:5c:68:95:4f:1c:87:8d:07:31:ec:a9:b6:c8:
5d:68:db:17:f1:23:1e:dd:55:71:aa:1a:11:de:88:
c3:e6:82:6a:19:f6:e9:0c:56:55:10:58:86:bd:0b:
a2:7e:2f:69:aa:08:73:ca:bd:69:a2:fc:0a:39:34:
fb:9d:79:51:2d:36:c6:c3:67:53:d2:3a:d7:5f:be:
bd:a5:65:5e:df:d6:32:04:87:22:0d:e8:72:c1:1d:
bc:5e:f2:4c:32:0e:ed:8b:4f:f9:99:ee:9f:ff:2a:
fc:56:89:82:cd:ff:ca:26:b4:96:7a:e5:f0:8c:e7:
1a:eb:9f:f3:24:36:35:b0:cd:ed:19:0b:0b:ca:b6:
f2:bb:5a:7f:de:38:db:e9:b0:62:c6:80:79:ad:e5:
a9:0f:dc:68:72:11:7a:2e:76:fb:b1:f0:31:6d:b5:
0f:a9:fd:c9:02:2b:3f:18:9d:c0:6a:47:be:67:63:
58:3a:e3:8d:09:47:5e:4f:ba:df:db:1c:60:a8:89:
22:35:f6:3c:7b:2d:45:e7:44:be:32:ac:2e:3b:01:
36:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2A:7E:D9:BF:BD:D0:64:B7:B1:E8:99:C1:50:04:98:BB:7B:49:6F
X509v3 Authority Key Identifier:
keyid:73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:1d:3a:25:b9:c3:0e:1f:0a:5e:31:3b:f2:50:4e:06:61:64:
bf:ae:f4:32:f2:eb:44:c4:d4:41:9f:2d:44:3a:c7:16:3a:a9:
5a:ca:ee:11:9e:5f:df:bd:c0:66:37:06:6a:b9:80:5e:af:15:
a2:13:4d:ae:f5:57:cd:58:ff:d4:5a:f3:0f:34:c5:16:98:90:
27:2f:d0:ac:d8:a3:70:1f:05:df:1f:ec:6c:1f:e8:4e:c8:28:
6d:6a:37:84:62:09:c4:98:f3:76:f0:b3:36:bd:74:b7:69:b7:
6f:85:8c:6b:30:44:a3:7d:8f:bf:be:1f:73:00:28:fa:af:b5:
b1:dc:de:7e:1e:d2:b4:6d:89:da:a5:41:74:5d:70:55:32:37:
ed:ba:3d:9e:89:dd:bb:ac:fd:8d:b4:ee:a2:d5:9d:1e:47:d2:
ab:78:09:92:15:b9:e2:93:b5:3a:9c:f5:7c:a3:ca:3d:c1:38:
37:c6:1f:1a:4e:35:f7:cb:5a:ba:fb:d0:8a:2b:ea:ac:15:c4:
c9:5b:0b:ef:b9:1a:b1:11:14:ee:2f:70:a2:3e:5b:4c:ec:6e:
d1:f4:70:d4:2e:76:05:18:f2:eb:33:b8:c0:65:49:b4:3e:e4:
29:b1:fd:25:14:4a:44:54:de:f7:99:31:d0:b3:a3:a1:5b:b3:
75:c2:49:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:41:00 2025 by rpki-client