
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft
File: yRauWpUgtfZ2fnnJFa-hv25JGJk.mft (raw, json)
Hash identifier: UgIkjIwcZlDToQClJXtGu4mjdx8lwm9fTTWxUebTDhY=
Subject key identifier: 19:AC:01:0D:C0:2B:CA:4F:39:A6:F1:8E:2C:08:60:23:66:8E:D3:99
Authority key identifier: C9:16:AE:5A:95:20:B5:F6:76:7E:79:C9:15:AF:A1:BF:6E:49:18:99
Certificate issuer: /CN=A9188CC3/serialNumber=C916AE5A9520B5F6767E79C915AFA1BF6E491899
Certificate serial: 96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft
Manifest number: 95
Signing time: Wed 05 Nov 2025 06:39:54 +0000
Manifest this update: Wed 05 Nov 2025 06:39:54 +0000
Manifest next update: Wed 12 Nov 2025 06:39:54 +0000
Files and hashes: 1: yRauWpUgtfZ2fnnJFa-hv25JGJk.crl (hash: W++bmVfns/SF+WBg+QsR+AA8kbh7Fu3zWH5JWiCzBo8=)
2: DAB3F33EDE0B11EF8FDDD043C4F9AE02.roa (hash: Rb4ZTb+DIpBolhpNi77VSAYUPtHpBMXs9JxNCJqiIFg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.crl
rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:39:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188CC3, serialNumber=C916AE5A9520B5F6767E79C915AFA1BF6E491899
Validity
Not Before: Nov 5 06:39:54 2025 GMT
Not After : Nov 12 06:39:54 2025 GMT
Subject: CN=690af13a-b051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cb:69:ac:b6:a7:6e:3c:0e:bc:06:01:54:b5:
67:b4:16:7e:90:cf:3f:29:b0:99:99:ca:1f:21:46:
6c:08:5b:c6:23:fb:81:2d:b7:7f:0a:0a:6a:78:94:
53:5c:3d:83:a1:30:a4:fb:cf:13:51:02:19:2d:98:
94:8c:98:12:85:ac:f6:92:a9:be:bc:ab:71:38:29:
19:08:58:0e:15:e3:04:bd:45:5c:3a:98:c0:bc:4b:
e0:05:4e:d9:14:3e:5d:16:b1:28:1a:60:6d:43:e2:
48:00:f8:a3:cf:56:a5:b0:27:cb:f6:81:7a:c9:6a:
48:7a:06:f0:8b:eb:4e:12:24:66:01:71:c5:d0:81:
4f:28:4b:b9:e9:e2:63:c9:d3:0c:2c:13:e6:2d:be:
e5:85:bd:ac:a5:61:a5:bd:10:cc:d2:93:d0:25:33:
46:a3:ed:54:e4:35:05:c3:02:4e:c8:2f:cf:b4:01:
ed:ce:0a:29:73:7d:8c:58:fc:b9:93:26:e6:16:c1:
08:06:76:cf:54:65:eb:e7:d3:85:af:a4:e3:68:49:
a9:3d:78:93:8c:96:14:b4:02:69:dd:4e:5b:82:b0:
9d:de:77:d0:32:f8:6c:82:3d:bf:41:28:a7:af:b6:
44:18:53:d1:11:12:9f:42:c9:92:4b:10:36:bd:7b:
35:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AC:01:0D:C0:2B:CA:4F:39:A6:F1:8E:2C:08:60:23:66:8E:D3:99
X509v3 Authority Key Identifier:
keyid:C9:16:AE:5A:95:20:B5:F6:76:7E:79:C9:15:AF:A1:BF:6E:49:18:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:96:2f:cc:54:d5:33:e8:0b:62:47:61:65:97:1f:93:74:39:
2d:12:af:21:1d:1b:1a:91:5d:4b:2a:8e:f1:24:6b:23:b0:8e:
f6:79:40:82:b0:41:88:fa:16:27:34:ba:91:a8:e5:d9:d1:15:
ed:77:9e:4a:de:59:6c:9e:d0:ca:8a:46:1b:50:c3:d6:41:7f:
10:96:e0:b0:e0:09:da:02:73:ab:7c:b3:be:5d:17:4b:ac:40:
fb:66:1f:17:6d:0c:16:ba:9d:f4:f4:c9:fc:9d:31:ed:ac:7c:
9d:e3:97:79:23:70:f2:42:f9:c3:37:a9:51:48:65:12:67:b4:
01:60:d7:16:26:fe:b6:d9:09:e3:a5:de:62:51:ff:f6:29:5b:
90:5b:d3:e1:ae:fd:d0:ec:14:d6:f6:a8:2b:96:b7:b4:b4:65:
6a:47:61:44:f8:15:05:16:24:cf:f9:cf:3d:8f:df:5c:98:1d:
5b:b5:0b:cd:53:a2:f0:10:07:6a:d0:0d:74:5e:3f:8d:8d:d4:
9f:f1:1b:8a:59:8d:32:21:42:86:a4:ea:45:2d:ad:b1:44:96:
26:14:34:2a:d6:a3:37:26:82:3f:b4:51:43:fb:03:fa:b1:34:
f3:fc:04:f6:b1:ab:da:91:0b:3d:91:0c:c9:dd:f8:75:ab:1b:
a6:39:9c:de
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODhDQzMxMTAvBgNVBAUTKEM5MTZBRTVBOTUyMEI1RjY3NjdFNzlDOTE1QUZBMUJG
NkU0OTE4OTkwHhcNMjUxMTA1MDYzOTU0WhcNMjUxMTEyMDYzOTU0WjAYMRYwFAYD
VQQDEw02OTBhZjEzYS1iMDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwctprLanbjwOvAYBVLVntBZ+kM8/KbCZmcofIUZsCFvGI/uBLbd/CgpqeJRT
XD2DoTCk+88TUQIZLZiUjJgShaz2kqm+vKtxOCkZCFgOFeMEvUVcOpjAvEvgBU7Z
FD5dFrEoGmBtQ+JIAPijz1alsCfL9oF6yWpIegbwi+tOEiRmAXHF0IFPKEu56eJj
ydMMLBPmLb7lhb2spWGlvRDM0pPQJTNGo+1U5DUFwwJOyC/PtAHtzgopc32MWPy5
kybmFsEIBnbPVGXr59OFr6TjaEmpPXiTjJYUtAJp3U5bgrCd3nfQMvhsgj2/QSin
r7ZEGFPRERKfQsmSSxA2vXs1CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmsAQ3A
K8pPOabxjiwIYCNmjtOZMB8GA1UdIwQYMBaAFMkWrlqVILX2dn55yRWvob9uSRiZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OENDMy9FRERBMzZFMkQ3
MjMxMUVGQTIyNjk0MTlDNEY5QUUwMi95UmF1V3BVZ3RmWjJmbm5KRmEtaHYyNUpH
SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lSYXVXcFVndGZaMmZubkpGYS1odjI1SkdKay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OENDMy9FRERBMzZFMkQ3MjMxMUVGQTIyNjk0MTlDNEY5QUUwMi95UmF1V3BVZ3Rm
WjJmbm5KRmEtaHYyNUpHSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB1li/MVNUz6AtiR2Fllx+TdDktEq8hHRsakV1LKo7xJGsjsI72eUCC
sEGI+hYnNLqRqOXZ0RXtd55K3llsntDKikYbUMPWQX8QluCw4AnaAnOrfLO+XRdL
rED7Zh8XbQwWup309Mn8nTHtrHyd45d5I3DyQvnDN6lRSGUSZ7QBYNcWJv622Qnj
pd5iUf/2KVuQW9Phrv3Q7BTW9qgrlre0tGVqR2FE+BUFFiTP+c89j99cmB1btQvN
U6LwEAdq0A10Xj+NjdSf8RuKWY0yIUKGpOpFLa2xRJYmFDQq1qM3JoI/tFFD+wP6
sTTz/AT2savakQs9kQzJ3fh1qxumOZze
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:55:50 2025 by rpki-client