
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft
File: yizBAkNd6FHdppmDFZEvBvQQTrE.mft (raw, json)
Hash identifier: z39TjwVX2A80ishDlOcmEizNDaPfimtNJCQDNp265Go=
Subject key identifier: 56:79:60:26:EB:91:DE:BE:FB:C7:42:C0:B9:A2:16:BD:1C:26:25:F5
Authority key identifier: CA:2C:C1:02:43:5D:E8:51:DD:A6:99:83:15:91:2F:06:F4:10:4E:B1
Certificate issuer: /CN=A9177562/serialNumber=CA2CC102435DE851DDA6998315912F06F4104EB1
Certificate serial: 0565
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yizBAkNd6FHdppmDFZEvBvQQTrE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft
Manifest number: 0560
Signing time: Sun 02 Nov 2025 23:21:47 +0000
Manifest this update: Sun 02 Nov 2025 23:21:46 +0000
Manifest next update: Sun 09 Nov 2025 23:21:46 +0000
Files and hashes: 1: yizBAkNd6FHdppmDFZEvBvQQTrE.crl (hash: fWGD+XbI2PdZiQnWXOp+3MUpI+e07LUy+ai9kpwTGa8=)
2: 973E6B76107C11ECB1F7DE5DC4F9AE02.roa (hash: SQGdKb1vFGjNIUOuBUka92JYyHUgvE8twdlpTLjrdUo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.crl
rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yizBAkNd6FHdppmDFZEvBvQQTrE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 23:21:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1381 (0x565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177562, serialNumber=CA2CC102435DE851DDA6998315912F06F4104EB1
Validity
Not Before: Nov 2 23:21:46 2025 GMT
Not After : Nov 9 23:21:46 2025 GMT
Subject: CN=6907e78b-29e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:eb:8b:f5:80:c9:68:9b:6c:af:16:ca:be:76:
87:12:74:08:b3:c6:0b:28:ba:17:f0:c8:bf:5c:6d:
4e:17:65:71:53:b9:a5:87:60:4e:eb:b3:f8:1c:97:
ab:b6:bf:f3:42:ac:f8:3c:0d:6e:35:12:b4:ee:0e:
78:b4:e2:66:c7:c1:32:9e:f7:7a:7d:56:db:87:0f:
ae:d6:43:b4:b2:df:00:8d:93:ce:61:58:86:fd:25:
ff:7d:02:38:9a:27:51:9c:00:a1:69:d2:ff:1f:d5:
c2:36:27:72:55:c2:23:c0:8f:96:ce:8b:15:2f:4b:
9d:3c:a6:17:8f:76:55:a3:b6:47:91:65:c4:79:82:
39:ad:6f:5f:4d:aa:b6:4e:96:58:ac:b4:00:34:43:
b2:59:70:c7:20:5f:fe:2f:7b:d0:38:d5:46:88:1f:
74:53:48:48:7f:b2:dc:ef:43:56:80:17:da:22:04:
0c:28:7e:76:71:e0:da:51:b6:11:42:f7:de:c6:88:
e0:9d:e5:f3:da:8d:60:92:f2:62:f2:a0:73:7c:fe:
1f:59:0f:11:8f:81:6e:d0:23:30:be:e2:5a:7d:f1:
74:df:ed:7c:dc:22:76:08:5a:07:2f:d5:03:09:09:
bd:3e:c4:3f:7f:ae:de:6a:5e:d5:4e:81:ad:bc:a4:
21:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:79:60:26:EB:91:DE:BE:FB:C7:42:C0:B9:A2:16:BD:1C:26:25:F5
X509v3 Authority Key Identifier:
keyid:CA:2C:C1:02:43:5D:E8:51:DD:A6:99:83:15:91:2F:06:F4:10:4E:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yizBAkNd6FHdppmDFZEvBvQQTrE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:59:37:96:03:5d:d0:ce:34:da:b2:49:e1:e5:2d:54:c1:0c:
6d:01:3a:e6:f1:75:38:b4:40:aa:b2:0b:48:94:1d:30:b8:42:
20:aa:5a:b6:76:75:34:cf:1c:bb:b4:0d:bb:11:69:03:47:6a:
86:28:36:dd:a4:81:9e:40:8c:f0:31:7f:7d:08:e4:cd:d1:4c:
71:bf:61:69:07:7f:9d:0a:00:8f:88:09:90:b6:f5:ab:e4:d1:
21:cc:32:1f:8b:f0:9f:66:3c:10:d2:9e:6d:26:22:1d:5f:bf:
43:03:a0:bb:1f:dc:3c:a3:3d:3e:36:10:cf:ba:c2:b3:bc:d3:
26:e6:69:00:44:53:66:f3:bb:2e:b4:1b:34:62:73:6c:5f:c5:
e8:4f:5d:b1:ac:6f:57:74:05:d3:cd:37:5a:4f:3e:f9:5b:56:
82:42:25:93:4f:14:49:8d:60:7a:8b:64:b7:25:92:1c:46:20:
15:08:7d:3d:08:43:df:f9:21:05:cf:52:d5:70:b3:8f:fc:83:
da:8b:e1:38:ef:7a:1e:cb:71:64:df:f5:40:95:3e:c6:17:b2:
44:5b:72:e6:de:6c:ae:7f:24:5b:46:5d:23:bd:94:0d:d5:58:
3b:de:3d:e3:6d:84:27:ec:a5:5d:73:6f:3e:4a:ad:c6:fc:98:
2a:17:a8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:30 2025 by rpki-client