
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
File: yVIsOLleGYHYPa86djWzGQlA_Fs.mft (raw, json)
Hash identifier: zLYBYOJnzER+8MVG2uLmGA/CWL7qwqg2WW3+7ydXIS4=
Subject key identifier: 88:85:26:C8:9A:38:52:6E:BE:90:8A:33:57:93:F1:23:DB:53:93:5C
Authority key identifier: C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B
Certificate issuer: /CN=A9180161/serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
Certificate serial: 058B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
Manifest number: 057F
Signing time: Sun 02 Nov 2025 23:17:05 +0000
Manifest this update: Sun 02 Nov 2025 23:17:05 +0000
Manifest next update: Sun 09 Nov 2025 23:17:05 +0000
Files and hashes: 1: yVIsOLleGYHYPa86djWzGQlA_Fs.crl (hash: YcYTovVnZcqg7dmFFIAvN6623cEQCt3FxX4TNqD49fs=)
2: 6593B3840AD711F083DDB076C4F9AE02.roa (hash: Jai2ZPxFy4Omx4vuI3FyeaDVueoNejReZFJx8NI5lrQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl
rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 23:17:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1419 (0x58b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180161, serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
Validity
Not Before: Nov 2 23:17:05 2025 GMT
Not After : Nov 9 23:17:05 2025 GMT
Subject: CN=6907e671-142b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cb:36:66:80:9d:0d:85:e9:98:21:e9:d9:fe:
3e:a6:1e:00:57:82:b2:93:23:53:74:f6:d2:4d:79:
c0:fe:6a:8c:68:1c:27:80:43:ee:0d:17:12:ff:c9:
b3:58:3a:ac:01:a6:fb:39:0d:c3:d6:af:9e:2f:5e:
e0:f4:e7:ff:4e:ee:ec:0f:93:0b:a3:79:60:82:e9:
65:2b:f2:a5:e1:ad:47:76:7e:f6:39:10:e5:d9:79:
a9:81:65:3e:00:65:81:78:a2:3b:19:4a:52:c7:64:
3a:1b:f4:4b:97:96:6b:bc:1e:04:97:7e:6b:0f:2e:
14:0c:be:6a:01:2d:85:27:8d:17:90:6e:99:d3:64:
b4:e5:3d:3e:aa:a9:ae:d1:34:fb:ac:a4:81:8c:dc:
f3:fb:c0:21:d1:75:b4:94:8a:8c:24:e9:48:f3:0d:
6b:cc:7b:54:d0:00:5f:2b:fd:86:56:19:14:7b:10:
ac:85:f5:ca:33:98:65:8e:32:bf:0b:0a:7e:b1:ab:
ca:85:e4:cc:7d:e6:d0:bb:d1:d4:1a:1f:f6:16:40:
a5:84:64:42:0e:0c:fc:ae:4a:6a:1d:9d:83:dc:38:
66:ce:fa:4c:cf:2f:42:09:df:c9:b4:47:29:c2:47:
78:c9:cb:d3:8a:a9:d8:47:34:1e:e4:be:b6:73:2a:
fd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:85:26:C8:9A:38:52:6E:BE:90:8A:33:57:93:F1:23:DB:53:93:5C
X509v3 Authority Key Identifier:
keyid:C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:2f:dd:5e:63:df:9f:f4:3d:18:4a:ce:42:31:a3:6d:91:3b:
0e:b0:bb:46:6b:32:85:19:f1:73:88:e7:e6:2b:a4:f9:6a:32:
87:0f:67:4e:4f:d8:c2:d0:ea:e1:b0:1a:de:66:0d:e8:c7:27:
91:84:a8:4a:0b:ee:91:98:b5:a3:4d:24:22:7e:e7:a4:94:1d:
7d:dd:f7:7f:38:51:d7:3d:bf:5a:4e:28:55:aa:91:b1:91:a6:
e0:08:33:2e:c3:dc:6a:dc:51:05:5f:ca:c6:45:30:3c:2a:82:
a1:c3:31:5f:90:40:4d:5c:f8:86:e1:af:6b:e6:8a:c4:6e:8a:
7c:06:cd:ab:1f:7b:48:9d:a3:32:c6:f2:15:da:0c:32:92:56:
c0:3f:ba:c5:44:91:15:d2:ad:f1:35:f1:56:64:a5:ed:bc:ef:
62:1b:da:40:dc:55:9e:60:d7:ca:f8:8c:0d:71:4e:e9:8b:52:
5d:9b:79:2b:d6:6f:15:75:4a:19:e4:59:cf:87:44:71:49:92:
81:2b:b7:ee:f4:e5:ae:49:b5:db:b6:4d:27:f6:34:1e:84:6f:
68:f1:de:bb:2e:93:38:a8:b5:82:e7:6d:c1:43:aa:45:3f:20:
0a:0f:95:1a:f8:9f:0c:3e:d6:cc:38:fa:2f:78:06:f3:6d:e1:
6d:69:6d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:17:16 2025 by rpki-client