
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft
File: dBBmhNVnVypTS-yentek_D2x4sY.mft (raw, json)
Hash identifier: 0kBRaQrEq3v3fTb9w/23nquYb07ZtPLLpnKXvQx7v4U=
Subject key identifier: A7:7E:5F:9B:EC:E4:FA:EE:71:AD:8F:D3:95:3F:BE:F8:E9:3C:13:6F
Authority key identifier: 74:10:66:84:D5:67:57:2A:53:4B:EC:9E:9E:D7:A4:FC:3D:B1:E2:C6
Certificate issuer: /CN=A911A0B9/serialNumber=74106684D567572A534BEC9E9ED7A4FC3DB1E2C6
Certificate serial: 0473
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft
Manifest number: 0466
Signing time: Mon 03 Nov 2025 00:09:27 +0000
Manifest this update: Mon 03 Nov 2025 00:09:26 +0000
Manifest next update: Mon 10 Nov 2025 00:09:26 +0000
Files and hashes: 1: dBBmhNVnVypTS-yentek_D2x4sY.crl (hash: 6DzZSVv4w6r+CsHbytiT4niYm8Q89F29Vt4mb98dHFQ=)
2: 79B9645874F911F0BD52962FC4F9AE02.roa (hash: wu+Dox9IU3hwRlFzpqIU7gx86wEYNjyUbkdxdJNUmAk=)
3: A4819EE074F811F0B6925F6DC4F9AE02.roa (hash: ZoO9/vgjXlzY6ba7aXl9T6bpn7UBr556K0Ew0N0yuz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.crl
rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 00:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1139 (0x473)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A0B9, serialNumber=74106684D567572A534BEC9E9ED7A4FC3DB1E2C6
Validity
Not Before: Nov 3 00:09:26 2025 GMT
Not After : Nov 10 00:09:26 2025 GMT
Subject: CN=6907f2b7-47fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:ac:6f:78:a1:35:0b:c1:d4:93:ab:79:2d:
4a:40:90:30:72:4c:9c:b6:ed:ee:1e:e1:83:ea:e5:
fd:fe:4f:de:b6:bc:ac:02:4e:78:dd:62:3a:2b:62:
9e:29:8c:da:23:66:d6:3c:b7:81:d6:00:8d:4e:62:
21:0b:d2:9a:4f:d6:d5:81:d5:10:84:b7:32:f9:04:
c0:49:de:13:2d:29:c4:0a:8a:6d:a3:77:fd:2c:b8:
53:c8:35:22:1d:d7:e2:ad:fe:b8:16:ff:1e:18:29:
9e:54:34:a3:a7:76:1d:59:77:8c:76:5e:60:cb:e1:
76:3b:33:00:51:33:e2:81:9b:1f:3f:23:2f:50:53:
ef:70:2a:4d:0d:43:37:ba:79:54:0a:2a:46:a3:1e:
99:7a:c4:63:a1:d2:fd:fa:49:60:47:95:ed:c3:17:
86:95:57:cf:33:12:d8:6a:f6:fa:a1:68:ca:75:bf:
b4:4e:07:45:02:33:fc:0a:cb:17:0a:7b:0b:1a:82:
c5:22:ba:f9:9f:6d:48:dd:1e:d7:b9:f1:fd:66:13:
fd:74:13:e2:cd:8c:7e:52:83:ce:30:f2:94:ae:b4:
66:90:a7:1c:3b:b4:36:7b:88:77:01:c0:48:a8:a8:
f0:ff:79:ac:11:e6:30:3f:9b:75:f8:72:8f:34:68:
30:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7E:5F:9B:EC:E4:FA:EE:71:AD:8F:D3:95:3F:BE:F8:E9:3C:13:6F
X509v3 Authority Key Identifier:
keyid:74:10:66:84:D5:67:57:2A:53:4B:EC:9E:9E:D7:A4:FC:3D:B1:E2:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:7c:ae:52:6d:36:2e:5a:ac:dc:db:fe:d6:af:cb:ac:31:8a:
7d:1b:09:ce:3b:cb:2c:f8:44:0e:45:e4:5c:94:8a:14:11:db:
5c:e3:5b:20:44:27:5d:ae:ca:a2:2b:65:06:7f:be:ca:91:74:
0a:17:e2:71:56:27:74:7a:fd:a1:f3:78:2b:34:64:78:ca:38:
f7:99:bd:03:0f:1e:f7:89:4e:a3:d4:61:54:20:f3:ca:f0:02:
e2:0e:e4:b7:f1:e1:b2:eb:d8:5e:50:a1:03:a4:66:fe:aa:0d:
0a:aa:92:e5:ca:5d:28:68:f2:b4:ed:72:31:e6:a7:6e:63:47:
e4:03:ab:46:11:9d:2e:75:b0:17:65:d7:59:56:b6:0c:66:e1:
ab:ca:4b:24:b3:92:ff:3a:8f:68:96:9e:65:2c:df:12:21:1b:
59:c6:e6:6f:38:24:0f:32:02:6f:4d:61:bc:fe:2d:e6:28:37:
a2:72:c0:ee:07:ca:4e:8c:9a:2d:22:e4:7b:7c:1e:91:c8:75:
06:a2:4f:95:37:e8:c8:49:a9:00:ce:c3:d1:2c:cd:80:5c:61:
81:05:fa:b8:64:24:39:9c:4d:5e:7d:1d:2c:27:61:54:d0:50:
a4:ea:c1:3e:3e:7f:f3:58:45:5b:9e:1e:28:85:b0:20:af:17:
61:6b:53:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:11:00 2025 by rpki-client