
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.mft
File: akunmdqw8ib6Y2bG8ceOIqwMBz0.mft (raw, json)
Hash identifier: HjWCd7r9AlpeCH7Fq4mMzweaHKeuWpGH9B4ERzkkfUI=
Subject key identifier: BD:CA:84:4B:05:49:8A:79:1A:7A:4F:94:A8:C1:4C:DC:E2:68:63:71
Authority key identifier: 6A:4B:A7:99:DA:B0:F2:26:FA:63:66:C6:F1:C7:8E:22:AC:0C:07:3D
Certificate issuer: /CN=A9122CB9/serialNumber=6A4BA799DAB0F226FA6366C6F1C78E22AC0C073D
Certificate serial: 07CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akunmdqw8ib6Y2bG8ceOIqwMBz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.mft
Manifest number: 07C7
Signing time: Tue 04 Nov 2025 21:21:06 +0000
Manifest this update: Tue 04 Nov 2025 21:21:05 +0000
Manifest next update: Tue 11 Nov 2025 21:21:05 +0000
Files and hashes: 1: akunmdqw8ib6Y2bG8ceOIqwMBz0.crl (hash: lW33T+6ST0e2IxwjbAIktbhXZOSlv7wd158yOwQb20w=)
2: FA77145A14EB11EBA13B881DC4F9AE02.roa (hash: ygKkSy5tEoB9zxWe3tE91HsxRo4iq+pdS2owY5S912g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.crl
rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akunmdqw8ib6Y2bG8ceOIqwMBz0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:21:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1997 (0x7cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122CB9, serialNumber=6A4BA799DAB0F226FA6366C6F1C78E22AC0C073D
Validity
Not Before: Nov 4 21:21:05 2025 GMT
Not After : Nov 11 21:21:05 2025 GMT
Subject: CN=690a6e42-d87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:20:58:03:90:18:25:30:66:72:16:8f:2a:ef:
51:88:26:67:0f:c1:45:dd:c2:d5:84:ff:c2:6d:a5:
d1:f0:b2:ec:4e:ef:a3:09:74:81:3f:0d:21:33:fc:
ff:c7:85:d8:4c:fd:4d:c9:03:c8:71:f4:be:a4:9a:
91:ad:bd:59:ce:5d:82:4c:a2:b0:29:74:e8:05:9e:
16:00:e3:58:12:b7:0c:90:2c:4a:b7:3c:9c:a0:2b:
0c:f4:82:b6:61:dc:77:99:9f:20:75:21:db:d0:ad:
96:78:6b:4a:df:11:9e:78:a9:74:fe:58:92:3d:18:
00:51:ab:5e:60:6d:e1:61:69:b1:30:2f:e7:1e:b4:
5e:d1:be:6f:fd:84:73:1b:e8:5d:19:2d:74:3d:4c:
56:08:77:3e:94:a2:4b:b5:20:00:be:da:cc:ba:6b:
de:f0:23:f6:3d:5a:41:68:07:40:56:79:a0:4b:c2:
c7:a4:2d:7d:7d:f9:7f:7b:73:0b:1d:32:6f:de:82:
56:d8:f3:55:93:1b:c9:ed:5c:44:15:0b:43:38:80:
04:91:87:f5:3e:a4:89:cb:f6:dd:a5:d3:20:39:a1:
e9:5c:5f:60:fc:f8:4f:0f:d0:c3:03:99:06:d7:0e:
af:06:85:a9:e7:07:58:27:7d:d1:37:6b:40:bd:ab:
b2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CA:84:4B:05:49:8A:79:1A:7A:4F:94:A8:C1:4C:DC:E2:68:63:71
X509v3 Authority Key Identifier:
keyid:6A:4B:A7:99:DA:B0:F2:26:FA:63:66:C6:F1:C7:8E:22:AC:0C:07:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akunmdqw8ib6Y2bG8ceOIqwMBz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:ab:f3:c3:f7:7f:49:3a:14:e4:36:4b:19:6e:98:3d:c1:e9:
87:5c:de:17:ed:cc:e7:64:a1:c7:51:01:4c:58:94:aa:35:73:
44:d6:a2:4e:79:d7:50:a1:7a:41:fe:f4:b9:53:30:20:07:e6:
f9:62:19:55:c6:4e:f2:97:90:cd:b6:ff:60:60:83:e4:18:b0:
24:81:72:85:0f:18:25:4a:80:80:8a:50:4b:eb:3c:4d:6b:2a:
ac:48:e0:3d:b3:4e:44:28:9d:45:42:22:c0:03:c3:39:47:91:
76:cf:78:9a:f3:ee:52:87:25:e1:9a:46:e9:00:1d:26:a6:82:
55:15:f9:25:fe:ef:b1:3a:0d:9a:d9:27:ed:2f:43:ac:e1:b7:
2a:04:b3:aa:25:7c:fb:b6:bc:1c:e7:0c:3b:e3:44:78:bf:85:
64:0c:5d:96:da:f8:bf:17:ec:23:67:65:6d:0c:18:64:dc:f3:
90:ae:f8:5c:d3:f2:80:66:52:a0:22:b6:ad:41:51:a5:67:70:
79:b7:42:f9:35:a4:1b:95:08:52:d5:ae:64:83:86:27:d3:4f:
66:71:c3:d1:e3:fb:a2:44:59:5c:ba:db:b5:46:4e:09:a8:19:
27:37:0c:8a:1c:bd:34:fa:6d:5f:fc:d6:6c:af:58:8e:9c:b7:
9b:b9:0a:4c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjJDQjkxMTAvBgNVBAUTKDZBNEJBNzk5REFCMEYyMjZGQTYzNjZDNkYxQzc4RTIy
QUMwQzA3M0QwHhcNMjUxMTA0MjEyMTA1WhcNMjUxMTExMjEyMTA1WjAYMRYwFAYD
VQQDEw02OTBhNmU0Mi1kODdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtCBYA5AYJTBmchaPKu9RiCZnD8FF3cLVhP/CbaXR8LLsTu+jCXSBPw0hM/z/
x4XYTP1NyQPIcfS+pJqRrb1Zzl2CTKKwKXToBZ4WAONYErcMkCxKtzycoCsM9IK2
Ydx3mZ8gdSHb0K2WeGtK3xGeeKl0/liSPRgAUateYG3hYWmxMC/nHrRe0b5v/YRz
G+hdGS10PUxWCHc+lKJLtSAAvtrMumve8CP2PVpBaAdAVnmgS8LHpC19ffl/e3ML
HTJv3oJW2PNVkxvJ7VxEFQtDOIAEkYf1PqSJy/bdpdMgOaHpXF9g/PhPD9DDA5kG
1w6vBoWp5wdYJ33RN2tAvauy6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3KhEsF
SYp5GnpPlKjBTNziaGNxMB8GA1UdIwQYMBaAFGpLp5nasPIm+mNmxvHHjiKsDAc9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkNCOS81NkFBMzExNDE0
RUExMUVCQkUzN0VCMUFDNEY5QUUwMi9ha3VubWRxdzhpYjZZMmJHOGNlT0lxd01C
ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FrdW5tZHF3OGliNlkyYkc4Y2VPSXF3TUJ6MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MkNCOS81NkFBMzExNDE0RUExMUVCQkUzN0VCMUFDNEY5QUUwMi9ha3VubWRxdzhp
YjZZMmJHOGNlT0lxd01CejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDYq/PD939JOhTkNksZbpg9wemHXN4X7cznZKHHUQFMWJSqNXNE1qJO
eddQoXpB/vS5UzAgB+b5YhlVxk7yl5DNtv9gYIPkGLAkgXKFDxglSoCAilBL6zxN
ayqsSOA9s05EKJ1FQiLAA8M5R5F2z3ia8+5ShyXhmkbpAB0mpoJVFfkl/u+xOg2a
2SftL0Os4bcqBLOqJXz7trwc5ww740R4v4VkDF2W2vi/F+wjZ2VtDBhk3POQrvhc
0/KAZlKgIratQVGlZ3B5t0L5NaQblQhS1a5kg4Yn009mccPR4/uiRFlcutu1Rk4J
qBknNwyKHL00+m1f/NZsr1iOnLebuQpM
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:18:37 2025 by rpki-client