
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft
File: gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft (raw, json)
Hash identifier: AoOexzpYle3PWnpwnftbMS95USC1sglO9UZp2S09nxA=
Subject key identifier: 0D:04:D8:CE:F1:03:0A:56:4C:6D:38:D1:C3:C0:3D:5E:FB:ED:2F:6B
Authority key identifier: 81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B
Certificate issuer: /CN=A9160602/serialNumber=818359BCA0F673B7816003FBB89B6537A948075B
Certificate serial: 01FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft
Manifest number: 01F7
Signing time: Mon 03 Nov 2025 02:23:52 +0000
Manifest this update: Mon 03 Nov 2025 02:23:52 +0000
Manifest next update: Mon 10 Nov 2025 02:23:52 +0000
Files and hashes: 1: gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl (hash: eQyrPgWmaeoFR0cjGfXjG+mj6zmCoY17W2wWM5mP1Vc=)
2: 2DF8935CAFB411ED8D33ED1FC4F9AE02.roa (hash: vlOK1RJCHtSR0rcREKWIrzl7luUJenVcTiEDALCfBP0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl
rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 02:23:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 507 (0x1fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160602, serialNumber=818359BCA0F673B7816003FBB89B6537A948075B
Validity
Not Before: Nov 3 02:23:52 2025 GMT
Not After : Nov 10 02:23:52 2025 GMT
Subject: CN=69081238-7dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4f:8b:7f:8d:d4:1e:3d:27:ca:16:0c:a3:78:
2c:50:a7:98:7a:b4:d3:c8:f0:01:21:a7:85:d3:49:
95:31:d0:fe:80:76:3c:4d:e0:85:56:57:e1:41:5d:
93:4e:4d:72:a7:eb:f3:3d:51:60:44:22:9e:b5:8b:
ad:3f:85:ff:ff:9d:cd:65:d3:ff:9d:b7:ef:38:9d:
6a:c6:3b:b0:fb:86:b0:81:18:41:0d:a0:29:72:98:
f8:a1:2e:8e:fd:a4:b6:35:31:1e:b7:90:8c:cd:01:
b5:48:f5:c4:ae:6f:0e:9d:c5:73:19:c7:3f:af:45:
7c:b2:71:c6:f6:fe:d7:09:79:88:37:8c:a5:73:d2:
43:bf:e3:20:05:5d:2a:4f:49:7c:9e:21:9d:d7:e8:
bf:4a:24:f6:f2:c1:84:f3:14:fa:18:92:52:11:67:
ed:24:aa:0f:15:ec:4c:6b:10:97:c5:88:d3:94:8e:
9d:c0:dd:79:ae:f9:80:35:65:97:cb:30:97:d8:75:
59:55:6b:c7:e8:81:46:99:23:45:c7:d2:16:58:e6:
7a:6a:56:bc:41:54:e0:de:bf:9d:6e:4d:a4:b5:1e:
0c:92:6f:04:a9:d6:50:7b:1b:9a:9e:fd:21:04:ca:
80:1f:a4:7b:1b:6f:2d:da:95:b3:10:cd:f3:e8:3e:
99:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:04:D8:CE:F1:03:0A:56:4C:6D:38:D1:C3:C0:3D:5E:FB:ED:2F:6B
X509v3 Authority Key Identifier:
keyid:81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:80:c2:7c:a6:e5:80:5a:41:0c:85:de:82:ec:aa:f1:ad:99:
d1:36:b3:9d:ab:1f:e7:cf:ed:37:2d:57:ca:a0:77:12:59:ab:
41:85:2b:17:f1:e3:08:da:24:5c:37:98:0b:fd:f6:56:03:e8:
5f:1d:26:8d:ec:e3:62:99:8b:d6:f8:47:9e:33:c2:7c:c2:8d:
8f:5e:31:bf:9e:cf:18:4f:5e:2f:4b:7d:f2:ee:cf:e3:4e:f0:
d9:0d:d1:94:5b:2b:ad:18:44:ba:1e:ae:58:6c:4d:26:9c:6a:
94:e5:e7:54:a6:24:e5:fd:88:9e:c7:65:3d:b3:44:e3:57:16:
10:1f:74:0d:39:c5:fb:57:9a:ca:9d:8b:e3:5c:21:30:14:9f:
f9:a4:3d:e5:21:c8:0c:0e:a2:78:05:a4:22:91:5b:5a:9e:c2:
18:7d:f1:3c:4e:91:15:7d:cc:e7:e7:cf:94:e4:f1:89:7e:00:
c4:47:98:df:0b:43:12:60:2f:ee:f7:33:e0:65:4f:25:9c:b7:
80:85:44:e2:90:c5:db:5e:df:6d:3f:b5:f8:46:2c:35:b2:58:
ae:9d:62:90:02:0a:eb:9e:40:c2:59:55:66:f9:90:26:a8:de:
11:f8:62:4c:ed:88:4b:c2:e8:b7:33:a4:c6:9e:0c:03:86:6c:
09:51:ae:cd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA2MDIxMTAvBgNVBAUTKDgxODM1OUJDQTBGNjczQjc4MTYwMDNGQkI4OUI2NTM3
QTk0ODA3NUIwHhcNMjUxMTAzMDIyMzUyWhcNMjUxMTEwMDIyMzUyWjAYMRYwFAYD
VQQDEw02OTA4MTIzOC03ZGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxk+Lf43UHj0nyhYMo3gsUKeYerTTyPABIaeF00mVMdD+gHY8TeCFVlfhQV2T
Tk1yp+vzPVFgRCKetYutP4X//53NZdP/nbfvOJ1qxjuw+4awgRhBDaApcpj4oS6O
/aS2NTEet5CMzQG1SPXErm8OncVzGcc/r0V8snHG9v7XCXmIN4ylc9JDv+MgBV0q
T0l8niGd1+i/SiT28sGE8xT6GJJSEWftJKoPFexMaxCXxYjTlI6dwN15rvmANWWX
yzCX2HVZVWvH6IFGmSNFx9IWWOZ6ala8QVTg3r+dbk2ktR4Mkm8EqdZQexuanv0h
BMqAH6R7G28t2pWzEM3z6D6ZjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0E2M7x
AwpWTG040cPAPV777S9rMB8GA1UdIwQYMBaAFIGDWbyg9nO3gWAD+7ibZTepSAdb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDYwMi9GQkNDODk3Q0FG
QjAxMUVEQjJGMjA0MUJDNEY5QUUwMi9nWU5adktEMmM3ZUJZQVA3dUp0bE42bElC
MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dZTlp2S0QyYzdlQllBUDd1SnRsTjZsSUIxcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDYwMi9GQkNDODk3Q0FGQjAxMUVEQjJGMjA0MUJDNEY5QUUwMi9nWU5adktEMmM3
ZUJZQVA3dUp0bE42bElCMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCZgMJ8puWAWkEMhd6C7KrxrZnRNrOdqx/nz+03LVfKoHcSWatBhSsX
8eMI2iRcN5gL/fZWA+hfHSaN7ONimYvW+EeeM8J8wo2PXjG/ns8YT14vS33y7s/j
TvDZDdGUWyutGES6Hq5YbE0mnGqU5edUpiTl/Yiex2U9s0TjVxYQH3QNOcX7V5rK
nYvjXCEwFJ/5pD3lIcgMDqJ4BaQikVtansIYffE8TpEVfczn58+U5PGJfgDER5jf
C0MSYC/u9zPgZU8lnLeAhUTikMXbXt9tP7X4Riw1sliunWKQAgrrnkDCWVVm+ZAm
qN4R+GJM7YhLwui3M6TGngwDhmwJUa7N
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:06:46 2025 by rpki-client