
$ rpki-client -vvf rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft
File: MayWR8f4cKZrot54hUTNjDJr3_k.mft (raw, json)
Hash identifier: QYpFaXrFqvhEoZ01RBX0R2p+xYzH/A5QoWRVmQp/jbQ=
Subject key identifier: 25:D4:7B:DF:A5:0E:57:85:26:2B:E7:4A:E3:16:D6:D7:00:97:1A:0B
Authority key identifier: 31:AC:96:47:C7:F8:70:A6:6B:A2:DE:78:85:44:CD:8C:32:6B:DF:F9
Certificate issuer: /CN=A91218BB/serialNumber=31AC9647C7F870A66BA2DE788544CD8C326BDFF9
Certificate serial: 9F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft
Manifest number: 9E
Signing time: Mon 03 Nov 2025 06:19:59 +0000
Manifest this update: Mon 03 Nov 2025 06:19:58 +0000
Manifest next update: Mon 10 Nov 2025 06:19:58 +0000
Files and hashes: 1: MayWR8f4cKZrot54hUTNjDJr3_k.crl (hash: +aalFiUrqOk1sD5FY0A61oE/HKMa7dd+B8l7V3QkOu0=)
2: 4DD6D628C8D211EF9F1BE312C4F9AE02.roa (hash: sUWfAuRTWaVVgcAthywuFU4ZlijXzthACuza893doh4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.crl
rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:19:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91218BB, serialNumber=31AC9647C7F870A66BA2DE788544CD8C326BDFF9
Validity
Not Before: Nov 3 06:19:58 2025 GMT
Not After : Nov 10 06:19:58 2025 GMT
Subject: CN=6908498e-98f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:08:9c:f7:4c:55:21:92:e6:5c:51:97:9a:4d:
af:5d:09:63:d2:3a:cb:79:43:11:12:91:63:b0:ab:
77:e6:f4:b8:01:a2:94:25:cc:f1:57:c0:c8:09:2a:
0c:39:c2:aa:18:54:9c:37:a3:dd:47:d8:c9:25:f8:
f7:d6:86:a2:43:4f:ef:61:54:d5:48:e7:cc:c7:0d:
d3:b4:43:24:aa:e2:d7:45:c0:f2:7f:ef:7b:ae:e8:
8b:33:ce:ee:98:bd:69:07:07:38:3d:a4:53:f8:a5:
af:09:38:35:d0:26:6b:38:de:c0:6d:07:3f:8f:e0:
7f:c1:2a:7a:cb:26:d0:01:38:c2:40:4f:89:99:71:
54:5e:f0:dd:5d:be:68:51:fc:e4:f8:a7:fd:75:c7:
f6:cf:da:97:ad:a0:09:f1:4d:b8:f8:c4:3e:1d:6c:
51:72:4d:b2:ab:52:28:d2:90:40:90:59:b1:06:94:
f5:fc:88:8e:9c:a5:e0:c8:be:b8:a7:f0:df:c8:dc:
e5:f0:bc:1a:92:93:71:44:79:ab:0f:89:39:8d:5a:
e2:f4:ba:63:88:0d:a8:2b:a5:9b:42:8d:b0:17:35:
43:ac:09:31:1a:41:0b:6e:59:f3:9a:55:d2:9f:5e:
b6:48:d7:51:af:92:7e:b1:f3:04:83:24:51:72:7f:
e2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D4:7B:DF:A5:0E:57:85:26:2B:E7:4A:E3:16:D6:D7:00:97:1A:0B
X509v3 Authority Key Identifier:
keyid:31:AC:96:47:C7:F8:70:A6:6B:A2:DE:78:85:44:CD:8C:32:6B:DF:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e8:61:32:c9:72:88:2d:88:72:73:15:00:26:a1:34:d4:ba:
9e:7d:ae:19:43:6a:8a:76:1d:46:5d:f8:5c:48:bd:d6:96:f7:
bc:0a:12:3e:0f:e6:a2:b4:42:b7:e5:e4:f8:14:e6:8f:a9:d5:
f6:e8:ab:d2:3d:2d:91:d0:b0:0a:b3:01:80:9b:a7:d9:8a:e9:
da:16:80:9d:80:46:c3:e8:ad:f8:a4:98:8b:d7:09:09:0f:54:
da:b8:8b:50:24:d3:07:e4:a6:c9:d1:56:0c:67:bf:a4:64:e9:
3d:55:4c:2a:37:09:04:c7:67:1a:03:2f:29:8c:ec:f9:69:fe:
37:5a:45:29:d7:f9:dd:4c:9e:f5:4c:a2:89:d9:9d:46:a9:2f:
04:a1:b7:03:ca:29:62:49:9e:84:09:a5:fc:06:46:f3:83:84:
71:48:63:7b:cb:cd:12:99:30:69:59:5a:e6:c9:8e:2c:96:6e:
e7:d9:dd:73:86:6a:74:bd:4d:bf:48:73:05:7a:87:85:a4:70:
36:48:c0:73:c7:b7:25:21:6a:e3:07:34:d6:46:42:e7:78:83:
28:56:72:03:3c:59:b5:dd:ed:f1:1a:39:8e:b8:9e:0f:49:e9:
8c:74:f5:63:87:84:79:8a:91:53:4a:31:5c:78:cd:38:1f:44:
c4:8d:e6:ea
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjE4QkIxMTAvBgNVBAUTKDMxQUM5NjQ3QzdGODcwQTY2QkEyREU3ODg1NDRDRDhD
MzI2QkRGRjkwHhcNMjUxMTAzMDYxOTU4WhcNMjUxMTEwMDYxOTU4WjAYMRYwFAYD
VQQDEw02OTA4NDk4ZS05OGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1wic90xVIZLmXFGXmk2vXQlj0jrLeUMREpFjsKt35vS4AaKUJczxV8DICSoM
OcKqGFScN6PdR9jJJfj31oaiQ0/vYVTVSOfMxw3TtEMkquLXRcDyf+97ruiLM87u
mL1pBwc4PaRT+KWvCTg10CZrON7AbQc/j+B/wSp6yybQATjCQE+JmXFUXvDdXb5o
Ufzk+Kf9dcf2z9qXraAJ8U24+MQ+HWxRck2yq1Io0pBAkFmxBpT1/IiOnKXgyL64
p/DfyNzl8LwakpNxRHmrD4k5jVri9LpjiA2oK6WbQo2wFzVDrAkxGkELblnzmlXS
n162SNdRr5J+sfMEgyRRcn/ibwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXUe9+l
DleFJivnSuMW1tcAlxoLMB8GA1UdIwQYMBaAFDGslkfH+HCma6LeeIVEzYwya9/5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMThCQi82QTBCMjA1NEM4
QzUxMUVGOEVDNTU1NjVDNEY5QUUwMi9NYXlXUjhmNGNLWnJvdDU0aFVUTmpESnIz
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL01heVdSOGY0Y0tacm90NTRoVVROakRKcjNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MThCQi82QTBCMjA1NEM4QzUxMUVGOEVDNTU1NjVDNEY5QUUwMi9NYXlXUjhmNGNL
WnJvdDU0aFVUTmpESnIzX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCa6GEyyXKILYhycxUAJqE01Lqefa4ZQ2qKdh1GXfhcSL3Wlve8ChI+
D+aitEK35eT4FOaPqdX26KvSPS2R0LAKswGAm6fZiunaFoCdgEbD6K34pJiL1wkJ
D1TauItQJNMH5KbJ0VYMZ7+kZOk9VUwqNwkEx2caAy8pjOz5af43WkUp1/ndTJ71
TKKJ2Z1GqS8EobcDyiliSZ6ECaX8Bkbzg4RxSGN7y80SmTBpWVrmyY4slm7n2d1z
hmp0vU2/SHMFeoeFpHA2SMBzx7clIWrjBzTWRkLneIMoVnIDPFm13e3xGjmOuJ4P
SemMdPVjh4R5ipFTSjFceM04H0TEjebq
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:49:29 2025 by rpki-client