
$ rpki-client -vvf rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
File: -ZNXCqDVSW713ufpBjcOaPvcy4Q.mft (raw, json)
Hash identifier: /AFKnCEqin5jd3ifA1vY0FJNnBR2d6QGoWiNiBmW8Yw=
Subject key identifier: 05:C5:13:A2:01:FF:DB:96:F6:61:93:1A:4D:C1:F3:69:AB:7D:32:76
Authority key identifier: F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84
Certificate issuer: /CN=A912359E/serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84
Certificate serial: 2496
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
Manifest number: 2486
Signing time: Tue 04 Nov 2025 15:51:39 +0000
Manifest this update: Tue 04 Nov 2025 15:51:39 +0000
Manifest next update: Tue 11 Nov 2025 15:51:39 +0000
Files and hashes: 1: -ZNXCqDVSW713ufpBjcOaPvcy4Q.crl (hash: +JyzF9zhDj5KAh2xE/Tf4J+Ip2wMvCBVOzyXvzrFKCs=)
2: B6A9D8EEB0F411E5BE86D757C4F9AE02.roa (hash: VDpmphxvHhMX+CJMPgP6cR0fivPr/6sPxVPmLHM4q+o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl
rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 15:51:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9366 (0x2496)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912359E, serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84
Validity
Not Before: Nov 4 15:51:39 2025 GMT
Not After : Nov 11 15:51:39 2025 GMT
Subject: CN=690a210b-7207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:59:71:cc:aa:34:fa:72:f4:5c:0b:00:66:
c9:49:25:3e:68:30:4f:ee:85:53:78:21:5c:dc:19:
bb:c3:da:f4:ae:0c:79:4a:44:ce:fb:37:33:9b:86:
5a:14:92:df:0c:34:46:25:cf:5e:07:7f:5f:48:13:
b7:6f:5b:d7:d1:a9:f7:9b:8e:b3:e3:bc:d4:6d:ba:
c4:fe:3e:66:87:a7:40:3a:d8:94:65:33:7a:30:ee:
25:26:bb:0f:19:15:40:85:8d:d1:c5:88:9a:e9:80:
ab:75:38:9b:c3:8c:ad:de:ed:cd:a7:3e:b2:5b:96:
ae:8a:da:86:4f:b7:ac:2b:db:6c:c0:41:17:02:59:
8b:58:ce:4a:91:d8:6a:a9:04:16:ff:2c:12:95:9a:
80:d5:5d:6a:c3:27:f2:32:dd:e0:4e:bd:1b:09:11:
ca:00:3b:a7:9a:21:b9:af:83:29:1e:a5:cd:45:32:
32:d8:a7:06:37:76:72:bf:b4:f0:48:14:40:b7:4c:
14:1b:87:77:3f:0a:ab:6a:00:7b:d3:a6:1e:25:14:
9c:34:63:8a:d6:a9:72:e4:e8:1e:d5:7c:ed:ad:2e:
9e:d1:82:c4:13:62:19:ff:7e:09:ec:c3:35:16:18:
9b:f4:ca:b7:55:5b:ab:0d:44:68:56:6a:dd:37:bd:
d2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C5:13:A2:01:FF:DB:96:F6:61:93:1A:4D:C1:F3:69:AB:7D:32:76
X509v3 Authority Key Identifier:
keyid:F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7e:e0:72:bb:ed:52:5f:8a:fa:36:1e:7d:68:57:38:b1:ac:
62:d4:88:24:eb:2c:3c:58:bb:c6:74:0a:01:c8:f3:3c:76:02:
c2:8e:4f:68:e1:ad:2f:0d:4a:06:a7:a1:32:61:93:d9:37:27:
00:e5:ed:83:89:d6:ca:d6:3a:11:ed:fe:72:59:6d:27:30:b2:
96:c8:7d:ec:82:77:e1:12:3d:2a:a7:1a:34:d4:eb:f8:06:ce:
a1:5e:12:bc:c7:4b:07:27:36:98:8a:db:a6:1f:85:1a:45:88:
8e:83:ef:02:ef:09:4d:09:dd:83:24:e9:97:da:43:f9:32:2b:
2d:6f:6b:92:8a:d2:af:55:16:c8:5b:12:4f:f1:b6:d9:0f:30:
f8:c4:de:a7:0c:3d:b1:2f:f8:99:5e:c7:4c:e0:b4:d2:e9:45:
b9:88:98:a1:12:f9:9d:02:92:3d:e0:09:fc:b5:e8:90:b1:ff:
fa:63:d5:63:6d:5f:ca:61:6b:90:96:a2:ff:72:03:62:3c:50:
f6:e2:2b:6a:b5:53:79:a5:91:6d:28:31:a5:94:13:cf:3f:a3:
c6:47:a7:1f:45:24:be:62:1e:90:27:08:17:49:7f:7e:13:d9:
f4:7e:f3:ca:5b:45:00:c0:ff:ce:8e:71:cc:26:c5:3c:53:f2:
3b:25:87:7a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjM1OUUxMTAvBgNVBAUTKEY5OTM1NzBBQTBENTQ5NkVGNURFRTdFOTA2MzcwRTY4
RkJEQ0NCODQwHhcNMjUxMTA0MTU1MTM5WhcNMjUxMTExMTU1MTM5WjAYMRYwFAYD
VQQDEw02OTBhMjEwYi03MjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxZhZccyqNPpy9FwLAGbJSSU+aDBP7oVTeCFc3Bm7w9r0rgx5SkTO+zczm4Za
FJLfDDRGJc9eB39fSBO3b1vX0an3m46z47zUbbrE/j5mh6dAOtiUZTN6MO4lJrsP
GRVAhY3RxYia6YCrdTibw4yt3u3Npz6yW5auitqGT7esK9tswEEXAlmLWM5Kkdhq
qQQW/ywSlZqA1V1qwyfyMt3gTr0bCRHKADunmiG5r4MpHqXNRTIy2KcGN3Zyv7Tw
SBRAt0wUG4d3PwqragB706YeJRScNGOK1qly5Oge1XztrS6e0YLEE2IZ/34J7MM1
Fhib9Mq3VVurDURoVmrdN73SdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAXFE6IB
/9uW9mGTGk3B82mrfTJ2MB8GA1UdIwQYMBaAFPmTVwqg1Ulu9d7n6QY3Dmj73MuE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzU5RS82RjJCNjU1MjU0
N0MxMUU1OTcxRjNCNDhDNEY5QUUwMi8tWk5YQ3FEVlNXNzEzdWZwQmpjT2FQdmN5
NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1aTlhDcURWU1c3MTN1ZnBCamNPYVB2Y3k0US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MzU5RS82RjJCNjU1MjU0N0MxMUU1OTcxRjNCNDhDNEY5QUUwMi8tWk5YQ3FEVlNX
NzEzdWZwQmpjT2FQdmN5NFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBcfuByu+1SX4r6Nh59aFc4saxi1Igk6yw8WLvGdAoByPM8dgLCjk9o
4a0vDUoGp6EyYZPZNycA5e2DidbK1joR7f5yWW0nMLKWyH3sgnfhEj0qpxo01Ov4
Bs6hXhK8x0sHJzaYitumH4UaRYiOg+8C7wlNCd2DJOmX2kP5Mistb2uSitKvVRbI
WxJP8bbZDzD4xN6nDD2xL/iZXsdM4LTS6UW5iJihEvmdApI94An8teiQsf/6Y9Vj
bV/KYWuQlqL/cgNiPFD24itqtVN5pZFtKDGllBPPP6PGR6cfRSS+Yh6QJwgXSX9+
E9n0fvPKW0UAwP/OjnHMJsU8U/I7JYd6
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:07:50 2025 by rpki-client