
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft
File: doh0adZBC-RoB3WHhH7qoIC0InI.mft (raw, json)
Hash identifier: /FCwsWFXUIj8kPV6u8/VAQUY+cXKwiQwYIl4GJY3Ty4=
Subject key identifier: 6E:59:E1:FA:B5:50:C2:21:54:E7:01:D9:1A:37:0F:D3:0D:0B:DE:B6
Authority key identifier: 76:88:74:69:D6:41:0B:E4:68:07:75:87:84:7E:EA:A0:80:B4:22:72
Certificate issuer: /CN=A9114382/serialNumber=76887469D6410BE468077587847EEAA080B42272
Certificate serial: 80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft
Manifest number: 7B
Signing time: Mon 03 Nov 2025 06:53:50 +0000
Manifest this update: Mon 03 Nov 2025 06:53:50 +0000
Manifest next update: Mon 10 Nov 2025 06:53:50 +0000
Files and hashes: 1: doh0adZBC-RoB3WHhH7qoIC0InI.crl (hash: Jq5Yx2hA+WG+JTL06ZibtMcuqE2kToA6XUg6X7AmYok=)
2: 069483747E7F11F091356E86C4F9AE02.roa (hash: Yrv7o+i08VMkPfTsO9wW2G4Ntl0tTtmIsoOx+zJY4Xo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.crl
rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:53:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114382, serialNumber=76887469D6410BE468077587847EEAA080B42272
Validity
Not Before: Nov 3 06:53:50 2025 GMT
Not After : Nov 10 06:53:50 2025 GMT
Subject: CN=6908517e-1faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:f8:49:c0:03:68:1e:02:56:96:34:e5:a3:
7b:bc:c4:2e:0e:ef:cb:a3:54:0a:69:50:a6:42:74:
49:10:84:c3:5c:53:50:00:f9:09:0f:7b:02:a3:2e:
27:3a:cf:58:97:7b:18:75:39:7a:99:31:35:21:30:
a3:f3:6c:03:ae:06:f3:97:61:8e:f5:a4:ee:ff:13:
a7:e8:ed:61:41:81:f7:73:e3:f0:8f:63:cf:16:c7:
0d:ad:e7:cd:d3:58:e2:1c:01:bb:99:b8:aa:41:9b:
8f:54:3c:51:57:ee:7b:71:cb:80:43:7b:0f:92:71:
85:80:43:72:69:3d:8a:88:d3:75:27:b2:31:27:03:
97:32:8d:5e:ae:93:f8:ec:7c:72:7f:8e:fc:e4:bf:
6f:54:db:da:14:f9:8e:a4:73:2c:ba:6b:5a:7e:71:
4a:9b:79:ae:9f:6f:c2:8c:8b:5a:41:7c:f2:0f:21:
d7:90:bb:f8:1f:72:d7:47:6f:28:20:4b:d4:b1:82:
83:ca:89:79:0a:9d:8d:09:a9:04:8a:b9:e6:5d:fe:
71:57:07:49:fc:40:65:90:d9:7f:ae:b5:16:00:43:
68:4d:c6:18:6c:4c:af:4f:3a:ff:d2:8b:49:f6:f6:
4a:99:43:2c:6b:8f:7e:26:f8:01:f7:1d:6f:41:df:
ef:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:59:E1:FA:B5:50:C2:21:54:E7:01:D9:1A:37:0F:D3:0D:0B:DE:B6
X509v3 Authority Key Identifier:
keyid:76:88:74:69:D6:41:0B:E4:68:07:75:87:84:7E:EA:A0:80:B4:22:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:a9:4f:23:c1:84:80:bf:51:2e:dc:0d:bd:c3:aa:a4:fd:6e:
23:58:bc:6d:e0:60:ba:1b:26:98:e6:6b:e5:2d:1d:78:a9:18:
f5:62:bc:e2:5e:e0:9d:f1:50:a1:e8:4a:63:87:77:87:be:f0:
00:2f:8f:a5:33:20:3a:e1:4e:ea:43:03:2f:cc:61:88:38:ba:
ed:61:29:3a:a2:09:8f:0f:3c:1e:8c:09:ff:18:69:c1:17:88:
a1:d3:2f:ea:11:58:8c:07:c6:bb:ad:21:80:05:52:8a:62:aa:
a1:ad:6f:be:2a:ed:d8:da:c6:a9:79:57:8e:69:10:a7:ee:0a:
9a:f0:cc:21:75:82:1e:02:b6:53:34:c1:45:87:be:01:d8:8c:
f1:33:1b:fe:f9:ac:b8:3b:87:64:7a:ab:18:36:09:24:c0:25:
69:33:dd:82:32:a6:26:a5:f6:5c:28:4e:57:9e:10:1c:c0:68:
44:43:fd:54:5f:1f:6d:55:64:c8:8c:78:17:5e:20:05:e3:39:
48:0e:37:0a:33:09:fb:1b:7c:6b:68:68:2c:27:7d:0f:3f:ec:
aa:dd:7f:fb:8c:bb:55:6a:38:01:32:55:f7:8d:4a:bb:a4:c5:
42:b4:89:81:3e:18:1d:64:d5:9e:9f:ab:00:73:41:cc:12:39:
d4:5a:08:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQzODIxMTAvBgNVBAUTKDc2ODg3NDY5RDY0MTBCRTQ2ODA3NzU4Nzg0N0VFQUEw
ODBCNDIyNzIwHhcNMjUxMTAzMDY1MzUwWhcNMjUxMTEwMDY1MzUwWjAYMRYwFAYD
VQQDEw02OTA4NTE3ZS0xZmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuz74ScADaB4CVpY05aN7vMQuDu/Lo1QKaVCmQnRJEITDXFNQAPkJD3sCoy4n
Os9Yl3sYdTl6mTE1ITCj82wDrgbzl2GO9aTu/xOn6O1hQYH3c+Pwj2PPFscNrefN
01jiHAG7mbiqQZuPVDxRV+57ccuAQ3sPknGFgENyaT2KiNN1J7IxJwOXMo1erpP4
7Hxyf4785L9vVNvaFPmOpHMsumtafnFKm3mun2/CjItaQXzyDyHXkLv4H3LXR28o
IEvUsYKDyol5Cp2NCakEirnmXf5xVwdJ/EBlkNl/rrUWAENoTcYYbEyvTzr/0otJ
9vZKmUMsa49+JvgB9x1vQd/vTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5Z4fq1
UMIhVOcB2Ro3D9MNC962MB8GA1UdIwQYMBaAFHaIdGnWQQvkaAd1h4R+6qCAtCJy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDM4Mi80NEI1RkExQzBB
QzAxMUYwQjU4RjgyNDdDNEY5QUUwMi9kb2gwYWRaQkMtUm9CM1dIaEg3cW9JQzBJ
bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RvaDBhZFpCQy1Sb0IzV0hoSDdxb0lDMEluSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NDM4Mi80NEI1RkExQzBBQzAxMUYwQjU4RjgyNDdDNEY5QUUwMi9kb2gwYWRaQkMt
Um9CM1dIaEg3cW9JQzBJbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC1qU8jwYSAv1Eu3A29w6qk/W4jWLxt4GC6GyaY5mvlLR14qRj1Yrzi
XuCd8VCh6Epjh3eHvvAAL4+lMyA64U7qQwMvzGGIOLrtYSk6ogmPDzwejAn/GGnB
F4ih0y/qEViMB8a7rSGABVKKYqqhrW++Ku3Y2sapeVeOaRCn7gqa8MwhdYIeArZT
NMFFh74B2IzxMxv++ay4O4dkeqsYNgkkwCVpM92CMqYmpfZcKE5XnhAcwGhEQ/1U
Xx9tVWTIjHgXXiAF4zlIDjcKMwn7G3xraGgsJ30PP+yq3X/7jLtVajgBMlX3jUq7
pMVCtImBPhgdZNWen6sAc0HMEjnUWghx
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:19:05 2025 by rpki-client