
$ rpki-client -vvf rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft
File: Y95vcfGNmpNam-HMuvW_7sCodvg.mft (raw, json)
Hash identifier: pEUIp1CZiVrPRhR1tV0+NE6LwdjvTseYR/aAe7205qI=
Subject key identifier: A4:D8:55:7F:55:82:CC:90:34:4B:CA:A2:3D:A8:39:92:E1:F9:AC:30
Authority key identifier: 63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8
Certificate issuer: /CN=A912250C/serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8
Certificate serial: 0177
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft
Manifest number: 0173
Signing time: Mon 03 Nov 2025 03:50:42 +0000
Manifest this update: Mon 03 Nov 2025 03:50:41 +0000
Manifest next update: Mon 10 Nov 2025 03:50:41 +0000
Files and hashes: 1: Y95vcfGNmpNam-HMuvW_7sCodvg.crl (hash: i83ofvv6hVrtNU9cFh/jsoTEwgZTZaUkY8q/uOVOGHo=)
2: 7283E2F6C4CB11EEBEB1AE82C4F9AE02.roa (hash: DpGOi0sB2sMQxf4ZO7IGNHJMX8cIMnNNE4SuDpT2FAo=)
3: 845CB214C4CB11EEBCFEE782C4F9AE02.roa (hash: RSiHqX4rb/XiO/VoDBBhBwIwk/xvfX+c6El0AIzq620=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl
rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 03:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912250C, serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8
Validity
Not Before: Nov 3 03:50:41 2025 GMT
Not After : Nov 10 03:50:41 2025 GMT
Subject: CN=69082691-b4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:8f:e6:2a:49:0e:bb:ec:85:15:5f:af:47:
57:0f:f6:1b:3b:59:a6:ba:cf:38:84:e4:37:62:52:
a8:16:0c:a8:b5:d3:9a:43:25:65:10:15:48:6e:74:
56:79:5d:21:e4:34:e5:f5:eb:dd:f2:da:a7:b8:32:
f3:3a:de:20:2f:db:2a:20:12:1a:da:c9:8b:35:5b:
7b:80:43:5b:48:98:5f:15:a2:5c:09:71:31:c3:69:
0c:0f:29:5a:78:97:d7:51:9b:d7:31:8a:21:96:15:
87:53:a9:26:3b:bc:36:97:ef:9d:30:8b:82:b9:2e:
18:b1:db:0f:b5:17:1a:53:0d:c1:a5:85:5c:94:46:
52:cd:36:14:46:c1:31:d2:04:64:9d:7c:e4:23:36:
b1:24:5f:04:4f:5f:21:fa:82:7c:df:b7:de:ca:23:
fe:2c:f7:4f:5a:92:a3:c2:ec:18:d5:11:73:fc:09:
6f:ab:d3:21:0d:20:18:7e:21:3b:5b:c8:96:a6:1d:
12:0f:74:28:f8:d4:ed:c8:88:34:53:32:1d:df:2f:
7e:1d:1b:f4:d8:52:e6:e1:17:52:4c:08:b1:74:f0:
d3:42:33:de:f7:94:e7:f3:bb:b3:94:f3:d4:70:52:
13:69:8c:1a:e4:9d:8f:ef:93:20:1c:46:f7:68:59:
13:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D8:55:7F:55:82:CC:90:34:4B:CA:A2:3D:A8:39:92:E1:F9:AC:30
X509v3 Authority Key Identifier:
keyid:63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:2d:7a:1a:89:14:75:41:91:6d:5b:6e:1b:cc:cb:a7:bb:02:
2b:5d:af:2f:f0:d2:f6:f8:ad:26:8c:11:12:36:e3:23:b4:58:
15:2f:67:7a:23:b6:fb:62:2d:31:70:34:95:77:40:bf:8b:c8:
25:47:81:25:8a:ac:ca:28:2e:8b:f2:61:f9:0b:88:d8:a1:f3:
fe:4a:86:c5:c2:ab:22:2e:11:37:8b:01:fa:90:de:e5:29:98:
b0:59:12:7f:91:f6:a5:39:81:20:59:e4:82:83:19:0b:49:5f:
2b:93:fe:91:e6:10:c3:ad:9a:7f:fc:f9:cc:48:e3:eb:37:b3:
65:9b:13:cf:e6:69:ba:e3:bf:1e:f3:10:07:4a:a6:c5:4e:f2:
73:cb:8c:a8:a9:0f:ac:2c:6d:e8:9a:4a:6a:16:cb:88:8b:dd:
0a:5f:bd:c2:b9:d0:f7:44:38:81:74:7e:2e:6a:41:42:3a:aa:
be:36:00:43:71:1f:84:ba:4d:bf:db:56:f9:a1:2f:67:de:a9:
0b:ef:bd:8a:9c:a7:93:bf:da:dc:49:01:02:7a:f4:78:9c:a7:
ab:51:18:8b:4c:46:01:64:54:c3:49:1a:a4:03:db:0a:7a:db:
f0:30:9b:31:37:9d:7c:0c:49:c2:ea:88:c2:89:73:e0:a4:f9:
c5:20:31:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:17:22 2025 by rpki-client