
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.mft
File: yvg06LwFd8t93bA-7UaRLns0ccw.mft (raw, json)
Hash identifier: aItBGNwXLGpDRtHwZfmxP8K33DCd1Ej4WPCe1imFeZw=
Subject key identifier: 06:7A:06:A8:45:6C:32:84:04:26:FC:6A:FD:1F:65:40:ED:44:EA:56
Authority key identifier: CA:F8:34:E8:BC:05:77:CB:7D:DD:B0:3E:ED:46:91:2E:7B:34:71:CC
Certificate issuer: /CN=A9158D5B/serialNumber=CAF834E8BC0577CB7DDDB03EED46912E7B3471CC
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvg06LwFd8t93bA-7UaRLns0ccw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.mft
Manifest number: F2
Signing time: Mon 03 Nov 2025 05:16:07 +0000
Manifest this update: Mon 03 Nov 2025 05:16:06 +0000
Manifest next update: Mon 10 Nov 2025 05:16:06 +0000
Files and hashes: 1: yvg06LwFd8t93bA-7UaRLns0ccw.crl (hash: GH7Dg5BBG8T5JcT4ClOJogRBm1SKm6XYt6rCLyroot8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.crl
rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvg06LwFd8t93bA-7UaRLns0ccw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 05:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158D5B, serialNumber=CAF834E8BC0577CB7DDDB03EED46912E7B3471CC
Validity
Not Before: Nov 3 05:16:06 2025 GMT
Not After : Nov 10 05:16:06 2025 GMT
Subject: CN=69083a97-efd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:0b:52:9a:12:5d:75:3e:b2:52:5d:6c:6d:
8b:d8:1d:2f:77:bd:df:76:33:d5:e7:55:75:c1:ae:
95:2f:ef:04:a4:99:26:24:32:ce:55:b9:77:db:6e:
26:88:d2:f4:ec:43:e9:a3:f3:98:08:5d:2b:1b:18:
8f:f8:91:53:57:2f:fa:8e:f8:fc:62:bf:b7:59:19:
92:d9:a7:bb:d4:2a:71:0d:c5:20:c1:91:b4:b5:df:
ca:58:e4:ab:fe:84:21:cb:7e:3a:1e:23:3f:65:5b:
e9:a5:4f:08:8e:5e:64:9e:96:36:64:19:74:d7:dd:
47:8a:82:b2:b3:4e:78:4e:03:6e:5b:9c:e9:aa:22:
03:c9:16:95:22:a4:a3:f7:03:b0:62:19:38:90:05:
66:ae:9e:c4:63:49:14:07:1b:33:25:a5:87:f9:8c:
e4:64:06:c6:1f:fb:12:31:ce:b2:41:a0:f9:31:bf:
4c:8a:b2:02:0c:ca:10:38:46:15:71:c4:55:e3:ab:
db:21:ff:70:b5:a0:cb:66:18:a6:82:24:02:fe:f8:
3f:16:f2:0b:84:cb:25:6e:db:4d:14:50:8a:17:c5:
4a:04:0f:1e:74:b8:54:21:f1:b2:0f:e4:2f:d2:48:
a2:14:65:05:64:2b:8f:28:2f:00:60:f5:d9:9e:93:
bb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7A:06:A8:45:6C:32:84:04:26:FC:6A:FD:1F:65:40:ED:44:EA:56
X509v3 Authority Key Identifier:
keyid:CA:F8:34:E8:BC:05:77:CB:7D:DD:B0:3E:ED:46:91:2E:7B:34:71:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvg06LwFd8t93bA-7UaRLns0ccw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ca:3d:c1:93:6a:30:6d:49:e1:49:26:47:bd:70:c0:fe:ba:
63:df:ca:d4:a1:e2:08:56:cd:48:ad:f3:99:5a:83:67:71:6c:
04:cc:c2:9a:63:7e:e3:a4:b1:3a:58:36:e5:7c:66:d1:d2:aa:
f3:2a:e7:29:39:4e:0c:39:9f:4f:97:0f:92:2f:8c:03:61:59:
61:4c:58:34:e0:b5:46:d3:46:4a:c3:cd:a7:ed:be:25:b9:3e:
b3:19:4e:5f:b7:a2:e9:e6:8d:ed:73:05:e8:e3:79:c5:5a:ff:
f1:ff:12:20:1f:e5:e9:bd:29:b0:8b:7f:52:f0:c0:1c:2c:31:
21:da:76:02:ff:6a:4b:e2:bf:10:00:48:12:0b:84:cb:c1:e2:
a6:f8:12:fc:c8:39:de:88:9c:7e:71:35:fe:15:97:e5:a3:b4:
8a:84:69:9b:46:e4:f8:1e:c7:e7:c9:c8:11:8a:66:82:41:c6:
ca:8c:ad:8a:d4:b4:e1:51:2e:0c:b2:66:7d:62:70:0e:ad:58:
fd:09:58:90:e7:13:24:dd:29:20:f2:b7:35:82:ab:57:1f:d9:
20:06:1a:3e:2f:2f:59:b5:dc:cb:c0:8f:b8:28:dd:b1:b9:be:
28:e6:b6:eb:68:7f:f2:70:9a:d7:57:6e:6e:8b:a4:b2:98:ff:
10:b5:76:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:17:27 2025 by rpki-client