
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
File: 1yELbplCSp6CpNRQAnNvZIOqJ5o.mft (raw, json)
Hash identifier: bjWs7bccYz1VgTygbvFs1lUW3aAp4RQ3dYts7GCN52k=
Subject key identifier: C8:AE:BD:F0:3A:7D:23:63:99:12:F0:EC:44:FF:75:3A:39:6A:0C:89
Authority key identifier: D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A
Certificate issuer: /CN=A919A909/serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A
Certificate serial: 010C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
Manifest number: 0105
Signing time: Sat 25 Oct 2025 08:43:44 +0000
Manifest this update: Sat 25 Oct 2025 08:43:44 +0000
Manifest next update: Sat 01 Nov 2025 08:43:44 +0000
Files and hashes: 1: 1yELbplCSp6CpNRQAnNvZIOqJ5o.crl (hash: J4Mv7Pv3GYVCcQObO38MZZHcbutCNLuZKv5qe1a2QlM=)
2: 2F5FEDD02E4811EFA2C93552C4F9AE02.roa (hash: nAAKqeX52YyyXJwlWmzPJZzOWJlGdlFjHrIUMleQhJo=)
3: CCC81F9A703F11F0AD014F1AC4F9AE02.roa (hash: 5E8RDsoVjXmI/w7ZZOkVeITuRBDxCdB14YXNUGb/6bY=)
4: 1D5C0B90475D11EFBD75C15EC4F9AE02.roa (hash: vjvAzTCHT28iPRQdCoJZnbSPvYtHv4wDBYZ54035Ceo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl
rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 08:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A909, serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A
Validity
Not Before: Oct 25 08:43:44 2025 GMT
Not After : Nov 1 08:43:44 2025 GMT
Subject: CN=68fc8dc0-a401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bb:40:1b:78:8a:cd:fc:e9:27:0d:19:ad:d8:
c8:f0:ed:0b:1b:ed:ac:4f:3a:4f:cc:ad:77:e0:28:
95:d9:10:ee:30:df:97:d2:36:0a:4e:e1:c3:37:e3:
94:3a:46:b9:f8:2e:89:30:d1:eb:6f:c3:b5:ae:a1:
3d:2a:c8:2b:35:01:f0:3b:c1:7b:6e:7d:af:bd:1c:
0a:55:fe:a5:36:d4:a1:77:e6:3b:ef:0c:ad:fc:05:
c5:5c:50:df:32:50:91:9b:cb:45:19:ad:c1:15:ed:
9a:90:0e:e8:56:ad:06:89:f6:7e:d1:dd:58:70:91:
50:5a:eb:f5:d6:91:f7:f1:3d:91:b9:ac:ed:f2:e9:
a2:6d:72:14:9f:42:1f:49:54:1f:05:d8:e5:9c:fc:
50:e8:92:e5:de:46:35:e9:82:86:a6:e6:4b:a0:4d:
36:6f:7e:e4:92:c5:eb:f2:bd:a6:db:96:0f:2d:91:
61:2e:48:1a:e3:4a:ca:ee:6e:2d:1d:72:4a:c2:a0:
63:aa:6f:ca:ae:6c:d8:e6:f4:a9:11:4b:3a:55:31:
c9:f6:00:ff:0c:26:5e:c1:74:aa:72:53:3b:ae:f8:
e1:09:9e:30:b3:27:6d:21:74:57:8c:6e:03:8a:88:
e5:3b:b0:bb:0d:7a:e2:cc:5d:7e:e4:aa:68:ee:f4:
a3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AE:BD:F0:3A:7D:23:63:99:12:F0:EC:44:FF:75:3A:39:6A:0C:89
X509v3 Authority Key Identifier:
keyid:D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:39:d7:34:72:1e:33:cc:17:e6:10:ec:2d:d5:9e:83:ec:fc:
00:5b:4d:c1:88:72:0f:d3:89:98:8d:1c:e9:1f:d8:44:fc:65:
16:28:7b:2d:f7:e2:b2:61:db:6f:55:23:fc:f9:9d:ce:5f:f8:
7b:c6:85:7a:c2:6b:1f:88:6b:82:c5:85:a9:52:64:d5:07:4c:
05:5d:86:b9:9c:96:9f:a9:b4:ec:d3:a7:41:71:7f:1b:48:0b:
2e:5c:3f:1a:b1:2b:7b:54:03:30:b8:71:35:33:26:f3:7f:d9:
82:a9:4e:c9:b3:6e:d7:70:92:7e:59:b4:34:97:a0:76:ac:a4:
08:6c:a6:60:3f:08:b1:7d:2a:70:8f:6e:3f:5b:05:86:db:71:
f4:3b:22:c2:b4:6e:cb:58:24:e1:ad:b6:38:f6:56:be:6f:a4:
01:9d:39:80:65:eb:70:ee:3b:d6:5e:0b:0f:7f:d5:09:c7:d5:
87:2e:1b:ed:58:c9:f2:b9:96:c5:23:86:78:d1:9d:d6:e3:ea:
54:22:11:32:5c:af:09:bc:9b:87:9a:ac:0a:bd:62:f4:87:3f:
71:e6:78:3c:4f:d7:9c:7e:df:1e:2a:a0:38:91:0b:a0:00:0c:
03:a7:3b:36:85:91:3a:90:77:b9:5c:bc:e1:0c:89:53:df:3d:
c3:1a:12:8a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUE5MDkxMTAvBgNVBAUTKEQ3MjEwQjZFOTk0MjRBOUU4MkE0RDQ1MDAyNzM2RjY0
ODNBQTI3OUEwHhcNMjUxMDI1MDg0MzQ0WhcNMjUxMTAxMDg0MzQ0WjAYMRYwFAYD
VQQDEw02OGZjOGRjMC1hNDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2LtAG3iKzfzpJw0ZrdjI8O0LG+2sTzpPzK134CiV2RDuMN+X0jYKTuHDN+OU
Oka5+C6JMNHrb8O1rqE9KsgrNQHwO8F7bn2vvRwKVf6lNtShd+Y77wyt/AXFXFDf
MlCRm8tFGa3BFe2akA7oVq0GifZ+0d1YcJFQWuv11pH38T2Ruazt8umibXIUn0If
SVQfBdjlnPxQ6JLl3kY16YKGpuZLoE02b37kksXr8r2m25YPLZFhLkga40rK7m4t
HXJKwqBjqm/KrmzY5vSpEUs6VTHJ9gD/DCZewXSqclM7rvjhCZ4wsydtIXRXjG4D
iojlO7C7DXrizF1+5Kpo7vSj0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMiuvfA6
fSNjmRLw7ET/dTo5agyJMB8GA1UdIwQYMBaAFNchC26ZQkqegqTUUAJzb2SDqiea
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTkwOS8xNjZFNzQ3QzJB
MzMxMUVGQkU5QUE4NTlDNEY5QUUwMi8xeUVMYnBsQ1NwNkNwTlJRQW5OdlpJT3FK
NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzF5RUxicGxDU3A2Q3BOUlFBbk52WklPcUo1by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QTkwOS8xNjZFNzQ3QzJBMzMxMUVGQkU5QUE4NTlDNEY5QUUwMi8xeUVMYnBsQ1Nw
NkNwTlJRQW5OdlpJT3FKNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAOOdc0ch4zzBfmEOwt1Z6D7PwAW03BiHIP04mYjRzpH9hE/GUWKHst
9+KyYdtvVSP8+Z3OX/h7xoV6wmsfiGuCxYWpUmTVB0wFXYa5nJafqbTs06dBcX8b
SAsuXD8asSt7VAMwuHE1Mybzf9mCqU7Js27XcJJ+WbQ0l6B2rKQIbKZgPwixfSpw
j24/WwWG23H0OyLCtG7LWCThrbY49la+b6QBnTmAZetw7jvWXgsPf9UJx9WHLhvt
WMnyuZbFI4Z40Z3W4+pUIhEyXK8JvJuHmqwKvWL0hz9x5ng8T9ecft8eKqA4kQug
AAwDpzs2hZE6kHe5XLzhDIlT3z3DGhKK
-----END CERTIFICATE-----
Generated at Sat Oct 25 23:15:17 2025 by rpki-client