
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft
File: SL_YCBmvF_vAh15iBvAoIqewTpg.mft (raw, json)
Hash identifier: 9GKq0FoWKzuBGQnQOs9WLQA8+KYLMjzgKfnrLLhFS6U=
Subject key identifier: 6A:7C:3D:24:0E:C2:34:3B:10:BE:C7:97:C1:CF:EB:0C:00:14:54:4F
Authority key identifier: 48:BF:D8:08:19:AF:17:FB:C0:87:5E:62:06:F0:28:22:A7:B0:4E:98
Certificate issuer: /CN=A919EC2D/serialNumber=48BFD80819AF17FBC0875E6206F02822A7B04E98
Certificate serial: 0187
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft
Manifest number: 042F
Signing time: Wed 05 Nov 2025 02:37:12 +0000
Manifest this update: Wed 05 Nov 2025 02:37:12 +0000
Manifest next update: Wed 12 Nov 2025 02:37:12 +0000
Files and hashes: 1: SL_YCBmvF_vAh15iBvAoIqewTpg.crl (hash: woHathsohEh2JBRIvzmS4d0tuAeFVc+uApdNOPbFIaY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.crl
rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:37:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EC2D, serialNumber=48BFD80819AF17FBC0875E6206F02822A7B04E98
Validity
Not Before: Nov 5 02:37:12 2025 GMT
Not After : Nov 12 02:37:12 2025 GMT
Subject: CN=690ab858-56bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2f:a2:e3:68:c0:34:38:cf:39:68:76:e5:35:
3d:f2:5b:49:d2:51:c5:e9:56:f0:6f:e9:52:a6:25:
00:e4:91:84:fd:c8:0e:2c:00:e9:71:3a:fd:8d:18:
23:db:df:df:61:9c:a4:62:da:26:ab:c8:7e:dd:80:
1e:4a:dd:74:c7:73:4c:c2:a1:b0:ee:a4:06:0e:92:
ad:24:f8:53:43:e9:c3:de:18:47:64:82:88:4c:46:
30:d4:d4:47:79:cc:fd:01:b9:7e:fe:ef:80:cb:e8:
58:11:54:1b:98:ce:de:7c:d0:26:ff:0a:78:10:9b:
f0:19:e9:0f:34:d4:38:58:54:9a:a4:95:ca:aa:ab:
9b:29:d6:c4:c2:bc:ae:ac:44:a0:6d:d4:0c:42:4e:
a4:9e:0c:3d:fd:2a:02:7e:c7:92:e4:8a:f6:8b:57:
1a:c3:2c:fc:c3:ec:2e:7f:37:82:fc:38:e3:b9:56:
df:64:ad:60:71:23:0e:2f:a8:14:80:32:a5:46:70:
ff:60:e8:12:7c:fc:26:a9:a4:03:69:5e:1a:2f:f7:
66:ad:8e:0e:e9:81:10:71:01:da:d3:35:c9:fb:8f:
95:62:51:63:45:72:64:84:7c:3f:1b:d4:6c:7e:61:
53:f9:e3:51:6d:e6:71:71:94:92:2f:3a:47:4a:c0:
38:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7C:3D:24:0E:C2:34:3B:10:BE:C7:97:C1:CF:EB:0C:00:14:54:4F
X509v3 Authority Key Identifier:
keyid:48:BF:D8:08:19:AF:17:FB:C0:87:5E:62:06:F0:28:22:A7:B0:4E:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ee:28:07:e8:b6:f1:6c:1f:1c:66:18:e9:e8:44:42:69:c9:
b6:d2:9a:c4:ad:02:9e:52:63:3d:15:c3:c9:d7:74:53:4c:94:
25:35:10:f0:4d:6a:29:20:ae:fc:f7:c6:53:bf:4c:fb:75:c1:
02:cd:05:ce:1a:19:44:14:06:ac:86:a8:52:b0:4e:a4:02:08:
a0:0a:2c:22:fc:0d:57:25:7a:70:a5:46:38:0a:c1:ad:db:90:
87:a3:62:73:b5:29:98:54:f8:d8:30:13:e8:aa:ac:53:6c:29:
15:d4:61:19:ec:73:3a:f3:bb:d5:6b:63:80:92:42:b0:5d:3f:
93:8b:a6:36:8d:0d:42:c2:da:64:14:5b:48:ab:69:2c:ed:e1:
b6:5e:16:3f:97:31:44:1e:36:66:1c:ad:88:c8:29:83:ea:26:
c8:bf:f3:e9:0e:a4:5d:9b:bf:83:59:ae:48:8a:e2:c5:64:00:
08:ae:a6:78:fb:14:ff:72:0a:72:81:98:75:e4:86:a7:46:dd:
d7:9a:aa:a1:8e:bf:bf:8f:18:0a:f9:c8:2b:57:df:7d:4a:9c:
17:c0:cf:73:f9:0e:3b:9e:27:49:3d:92:14:d2:65:d4:3f:f7:
96:32:90:61:f7:f0:2b:28:d5:26:b2:6d:54:2a:aa:2a:59:17:
7d:42:fa:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:27:44 2025 by rpki-client