
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft
File: nPMspRGaIvijMFkQ1ANfaLP8IUw.mft (raw, json)
Hash identifier: FWm7/UBQbnOHPHJXULd8+rjMr9jhiYvmUjeatwZi4TE=
Subject key identifier: CC:9F:9E:68:F1:00:0D:CE:D5:50:BC:79:97:6F:24:A3:66:CD:18:01
Authority key identifier: 9C:F3:2C:A5:11:9A:22:F8:A3:30:59:10:D4:03:5F:68:B3:FC:21:4C
Certificate issuer: /CN=A9113E79/serialNumber=9CF32CA5119A22F8A3305910D4035F68B3FC214C
Certificate serial: 0542
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft
Manifest number: 053E
Signing time: Sun 02 Nov 2025 23:26:18 +0000
Manifest this update: Sun 02 Nov 2025 23:26:18 +0000
Manifest next update: Sun 09 Nov 2025 23:26:18 +0000
Files and hashes: 1: nPMspRGaIvijMFkQ1ANfaLP8IUw.crl (hash: /azmHZiKiuQJDmYEBYaVl43WwnFap8xL5f6H49SdFdQ=)
2: 55D5848813E411EC9BE4C87FC4F9AE02.roa (hash: IhuzHy2i1HilFEQnpW2ccDVOUFu06otCgruwg3LwU+w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.crl
rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 23:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1346 (0x542)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113E79, serialNumber=9CF32CA5119A22F8A3305910D4035F68B3FC214C
Validity
Not Before: Nov 2 23:26:18 2025 GMT
Not After : Nov 9 23:26:18 2025 GMT
Subject: CN=6907e89a-bb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2d:bf:a3:60:02:9a:db:0b:67:9f:e2:82:16:
41:af:37:8e:d3:d7:7e:c4:84:18:0a:80:f7:3e:f1:
49:e1:4e:5a:38:96:f1:f1:0d:6f:d5:c3:23:4d:99:
49:35:1b:9e:96:c3:3a:b5:07:7a:6c:dd:e9:50:f1:
37:77:c2:8c:2c:84:67:37:21:47:83:d0:b4:22:17:
0a:fb:d5:3d:6c:32:62:79:50:a2:b9:b7:1a:05:0c:
3d:b8:18:9b:e8:29:c2:69:f1:75:54:b4:43:48:33:
0a:55:7c:9f:3c:3e:d5:05:25:cc:15:6e:f6:06:f1:
c3:de:8e:21:d7:06:98:77:c1:ae:a1:5c:ca:64:0d:
c2:d8:e6:a8:2f:c0:c9:6a:51:55:8b:cd:18:18:b8:
f6:de:4b:cc:63:bd:a4:ad:05:48:41:8c:47:31:07:
8c:42:24:41:df:0a:20:6d:0e:a2:42:d8:42:4d:d9:
0b:45:c5:fb:7f:5a:3d:96:c2:54:86:21:69:2f:53:
88:44:c3:3c:fb:fb:22:c4:c3:1b:8b:69:ef:4b:bb:
cd:6b:35:86:3f:70:aa:39:ef:db:9d:89:60:a5:3a:
bd:fa:43:47:f4:8c:83:56:09:0a:f4:40:40:74:7c:
0e:89:b9:42:ee:41:ad:69:29:fb:5a:78:c5:ae:b9:
95:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9F:9E:68:F1:00:0D:CE:D5:50:BC:79:97:6F:24:A3:66:CD:18:01
X509v3 Authority Key Identifier:
keyid:9C:F3:2C:A5:11:9A:22:F8:A3:30:59:10:D4:03:5F:68:B3:FC:21:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:b3:92:ab:47:6e:87:90:cc:2d:63:f8:b2:3b:bd:f6:5d:69:
c2:68:83:86:d5:32:2f:da:7b:9e:24:b2:c9:37:15:5d:c2:2f:
bd:2e:bf:1e:f9:ab:f5:31:68:f4:4d:1d:d3:e5:42:5c:57:ef:
69:7a:98:57:7b:e5:95:02:01:8a:b3:0f:3e:64:0e:70:27:d6:
cc:f3:df:dd:37:45:0b:26:9a:03:7c:28:0f:56:30:d0:01:0c:
1b:0c:6e:50:c5:0e:cd:71:c6:26:4a:5f:e7:9e:dd:5e:85:20:
11:1e:a3:fa:e6:c1:54:24:02:cb:33:bf:5e:7a:ed:88:3a:dd:
12:54:93:0a:61:e7:74:b0:17:d6:b1:ea:1e:72:ef:9e:fd:81:
34:fd:4a:e0:9c:45:c2:b6:93:fa:00:60:a5:b8:4e:f0:5d:05:
42:ca:43:d6:f6:5b:f3:2b:f0:e1:6e:2c:9e:32:9c:fe:c5:8c:
4e:48:61:1b:4e:01:d3:f5:9d:75:c4:b4:23:ce:db:cd:ac:63:
f9:b9:9c:45:f2:0f:33:00:55:f7:4a:19:f5:32:65:d1:58:75:
d9:17:dc:f5:97:95:54:27:95:fe:24:ac:84:ed:0b:ba:0d:70:
ac:3d:0a:f6:fe:d7:50:d8:d5:26:44:9c:1d:85:f6:09:3e:f3:
cb:43:be:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTNFNzkxMTAvBgNVBAUTKDlDRjMyQ0E1MTE5QTIyRjhBMzMwNTkxMEQ0MDM1RjY4
QjNGQzIxNEMwHhcNMjUxMTAyMjMyNjE4WhcNMjUxMTA5MjMyNjE4WjAYMRYwFAYD
VQQDEw02OTA3ZTg5YS1iYjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmi2/o2ACmtsLZ5/ighZBrzeO09d+xIQYCoD3PvFJ4U5aOJbx8Q1v1cMjTZlJ
NRuelsM6tQd6bN3pUPE3d8KMLIRnNyFHg9C0IhcK+9U9bDJieVCiubcaBQw9uBib
6CnCafF1VLRDSDMKVXyfPD7VBSXMFW72BvHD3o4h1waYd8GuoVzKZA3C2OaoL8DJ
alFVi80YGLj23kvMY72krQVIQYxHMQeMQiRB3wogbQ6iQthCTdkLRcX7f1o9lsJU
hiFpL1OIRMM8+/sixMMbi2nvS7vNazWGP3CqOe/bnYlgpTq9+kNH9IyDVgkK9EBA
dHwOiblC7kGtaSn7WnjFrrmV8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMyfnmjx
AA3O1VC8eZdvJKNmzRgBMB8GA1UdIwQYMBaAFJzzLKURmiL4ozBZENQDX2iz/CFM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0U3OS8xMTE1NEREQzEz
RTAxMUVDOTc3RTQxNzhDNEY5QUUwMi9uUE1zcFJHYUl2aWpNRmtRMUFOZmFMUDhJ
VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25QTXNwUkdhSXZpak1Ga1ExQU5mYUxQOElVdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
M0U3OS8xMTE1NEREQzEzRTAxMUVDOTc3RTQxNzhDNEY5QUUwMi9uUE1zcFJHYUl2
aWpNRmtRMUFOZmFMUDhJVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA0s5KrR26HkMwtY/iyO732XWnCaIOG1TIv2nueJLLJNxVdwi+9Lr8e
+av1MWj0TR3T5UJcV+9pephXe+WVAgGKsw8+ZA5wJ9bM89/dN0ULJpoDfCgPVjDQ
AQwbDG5QxQ7NccYmSl/nnt1ehSARHqP65sFUJALLM79eeu2IOt0SVJMKYed0sBfW
seoecu+e/YE0/UrgnEXCtpP6AGCluE7wXQVCykPW9lvzK/DhbiyeMpz+xYxOSGEb
TgHT9Z11xLQjztvNrGP5uZxF8g8zAFX3Shn1MmXRWHXZF9z1l5VUJ5X+JKyE7Qu6
DXCsPQr2/tdQ2NUmRJwdhfYJPvPLQ76P
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:12:24 2025 by rpki-client