
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft
File: nSYymrepW4-pWWN12jcInk18Iss.mft (raw, json)
Hash identifier: 8l0sxl3+i9kXAuEiVogsMVCi2ozM15UaoGg6Rbvmw0U=
Subject key identifier: 7B:41:9A:90:91:51:39:75:B0:7B:4E:4D:C6:7D:E0:1B:5D:4E:6A:AD
Authority key identifier: 9D:26:32:9A:B7:A9:5B:8F:A9:59:63:75:DA:37:08:9E:4D:7C:22:CB
Certificate issuer: /CN=A9156801/serialNumber=9D26329AB7A95B8FA9596375DA37089E4D7C22CB
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nSYymrepW4-pWWN12jcInk18Iss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft
Manifest number: 0F
Signing time: Mon 03 Nov 2025 07:57:46 +0000
Manifest this update: Mon 03 Nov 2025 07:57:45 +0000
Manifest next update: Mon 10 Nov 2025 07:57:45 +0000
Files and hashes: 1: nSYymrepW4-pWWN12jcInk18Iss.crl (hash: kB+3fXpL7+NSr+VX2J4YaEO/61N4wVhonTux+3K8O+M=)
2: 777A4FE4A67311F0B63FA56CC4F9AE02.roa (hash: MhcPpDX0ybNW5suRVqJQ8Y/zpF6Sqp1SAZfBtZfMNRA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.crl
rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nSYymrepW4-pWWN12jcInk18Iss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 07:57:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156801, serialNumber=9D26329AB7A95B8FA9596375DA37089E4D7C22CB
Validity
Not Before: Nov 3 07:57:45 2025 GMT
Not After : Nov 10 07:57:45 2025 GMT
Subject: CN=69086079-094a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5f:1c:b0:95:98:50:1d:49:ad:23:80:23:0a:
d0:ae:b8:23:ab:75:f6:43:41:3e:80:f3:9d:12:73:
55:57:c2:cd:c7:2e:ba:79:df:ef:cf:7a:bd:f0:bc:
dd:98:d2:0d:dc:8a:2e:e2:fc:25:a9:b5:91:31:dd:
67:8e:48:19:f3:bc:d5:87:4a:ad:05:2a:e0:b9:32:
5e:48:c6:62:56:7b:4e:24:72:db:eb:17:b4:06:f4:
c2:0e:95:8b:f7:2e:f9:76:af:90:60:a1:2c:e0:f3:
55:aa:76:bd:40:c0:c6:fb:88:10:1e:86:16:f5:f4:
4f:58:f4:96:13:b3:5e:ee:4b:b0:9a:27:1e:e9:3f:
48:97:65:76:24:a4:40:bf:2c:52:3f:f8:fe:46:94:
bc:1b:10:24:da:f3:8a:fd:23:92:73:5c:47:a5:5b:
37:d9:5f:a3:1a:b3:6f:2b:fd:cf:d3:82:a9:1a:e9:
14:00:29:b8:22:d0:a4:44:8b:1d:e4:cf:43:65:5e:
a2:da:39:39:16:fc:c4:ae:e9:0b:0f:6b:47:43:e3:
ea:46:1e:1c:70:11:86:24:b3:8c:14:32:cb:d9:47:
25:4d:c8:ff:ab:e9:fd:f7:e1:72:43:b3:8d:ed:18:
0f:4b:5d:cd:3d:8b:e5:ea:ed:ad:63:22:3b:bd:95:
b4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:41:9A:90:91:51:39:75:B0:7B:4E:4D:C6:7D:E0:1B:5D:4E:6A:AD
X509v3 Authority Key Identifier:
keyid:9D:26:32:9A:B7:A9:5B:8F:A9:59:63:75:DA:37:08:9E:4D:7C:22:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nSYymrepW4-pWWN12jcInk18Iss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:a1:71:4d:a8:41:30:d7:73:ce:8c:9c:46:f0:4f:34:b8:dd:
bc:a5:5d:3d:02:41:95:c4:2c:69:0b:86:ed:48:c0:cc:08:11:
41:f5:6b:f3:97:70:8c:84:6f:34:68:6b:36:0f:f5:be:39:f3:
51:f9:43:2b:a1:63:f0:14:8c:c4:ce:11:78:5f:c8:10:2a:cc:
83:5b:e0:6e:78:2b:e4:6a:1b:2d:a7:aa:2a:d6:5b:a6:f2:f0:
63:12:e4:0b:4b:69:bd:44:36:ad:cf:a7:3d:eb:98:44:99:b7:
3b:2c:3f:fd:a5:a2:32:b2:bc:1b:81:f0:b3:d1:a8:21:91:db:
ef:71:f4:51:93:e1:3d:46:16:29:18:fa:54:84:0a:28:e6:3b:
4a:4c:ed:31:61:9c:cf:a5:2e:1b:9b:ed:a6:21:32:a7:ab:b3:
ea:af:a0:ee:aa:c2:10:b1:28:35:64:d2:8f:a1:e2:01:6f:f4:
c4:ce:e9:e2:85:92:3b:5f:a5:3a:9b:06:2c:c0:2e:69:2b:fd:
e6:84:bc:d0:14:b2:cb:8a:11:c7:29:bb:78:ac:d2:8b:89:d3:
79:e8:0c:9f:53:3d:6c:d6:6a:ef:5b:9b:72:3f:9d:ff:42:96:
70:40:22:b1:a5:b2:9f:4b:dd:ed:29:03:e7:cc:7f:9e:71:31:
8d:13:c4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:09:55 2025 by rpki-client