
$ rpki-client -vvf rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft
File: EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft (raw, json)
Hash identifier: OYoXt0zn34/Zn3d95mKolmdc6DvCvyeBf0wKlnv5J+w=
Subject key identifier: D9:72:2D:8D:47:73:E4:D9:B1:E4:FF:4D:F9:92:29:BB:FB:17:D0:38
Authority key identifier: 10:36:C1:E0:FF:E1:CF:C3:7D:65:5D:89:FA:65:D6:5F:E2:2E:1F:7A
Certificate issuer: /CN=A91383F0/serialNumber=1036C1E0FFE1CFC37D655D89FA65D65FE22E1F7A
Certificate serial: 01F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft
Manifest number: 01D8
Signing time: Wed 05 Nov 2025 03:06:41 +0000
Manifest this update: Wed 05 Nov 2025 03:06:41 +0000
Manifest next update: Wed 12 Nov 2025 03:06:41 +0000
Files and hashes: 1: EDbB4P_hz8N9ZV2J-mXWX-IuH3o.crl (hash: 5igUu6tIflvdg5BT6NvMbrYnXCXsua17BA3TKgDBkUc=)
2: F098580828C511EFB2C79E5FC4F9AE02.roa (hash: PKXjuoEZrlzUW0PjdUqu51WxN11R0HED8PlE1wRRsEI=)
3: 14C77BFA28C611EFA33ED95FC4F9AE02.roa (hash: 4hFJyb4Htly+0MgN5MQ1eA6U2/XBgJOR97QTSYzL/J8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.crl
rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 500 (0x1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91383F0, serialNumber=1036C1E0FFE1CFC37D655D89FA65D65FE22E1F7A
Validity
Not Before: Nov 5 03:06:41 2025 GMT
Not After : Nov 12 03:06:41 2025 GMT
Subject: CN=690abf41-123d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:55:5b:b5:de:51:0d:c2:82:3d:17:f4:e8:65:
0d:6c:04:39:f4:92:b3:95:6a:6e:5c:76:5a:fb:d5:
5b:00:23:8b:b0:6d:60:59:17:98:21:7d:97:94:fb:
2c:90:d6:09:c7:38:21:2d:3b:e3:69:17:aa:42:1c:
ef:e3:f1:27:3b:91:0b:79:66:ec:b6:5b:e8:a4:8f:
f2:6b:79:a9:82:dc:8a:16:4a:dc:66:50:67:e6:7d:
74:75:3d:b5:bd:20:2f:bf:42:85:b1:84:0e:9d:d2:
d9:96:83:44:1a:e3:4a:78:fa:15:c5:31:9a:1d:94:
be:25:d6:fc:3f:61:f1:1e:1c:5a:b3:b1:01:0b:99:
89:d3:41:94:2a:1f:70:cd:57:ba:0b:58:8e:8f:99:
58:e1:93:dd:f7:8e:ca:0e:ae:90:2f:74:23:02:cb:
79:6a:84:47:f9:59:9f:20:f9:2e:10:7b:6a:c8:16:
89:e2:27:a1:68:b4:4a:b9:ab:17:aa:0a:d5:2e:dc:
77:27:0e:c1:54:e1:c0:12:81:4c:51:9e:7f:ed:c3:
98:dc:fd:b9:7b:3d:98:51:e7:8c:d3:fb:96:92:5d:
32:17:d8:c7:ad:b9:23:ea:c7:37:42:89:2e:4d:49:
ea:af:01:10:60:48:32:33:85:62:17:f8:18:21:ef:
a8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:72:2D:8D:47:73:E4:D9:B1:E4:FF:4D:F9:92:29:BB:FB:17:D0:38
X509v3 Authority Key Identifier:
keyid:10:36:C1:E0:FF:E1:CF:C3:7D:65:5D:89:FA:65:D6:5F:E2:2E:1F:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:ac:7a:c9:65:6f:6c:7c:6d:30:19:47:22:d3:3e:7c:64:fd:
06:a3:3e:39:61:f7:4c:0c:c9:d8:1d:7a:6c:df:8c:76:25:10:
f8:76:94:10:5d:2e:c6:0b:0b:9c:42:52:2b:c2:24:de:22:1a:
56:7b:22:f0:58:83:6e:2f:4e:6b:4f:ad:b2:e3:54:a0:e1:b2:
cf:97:1d:c3:80:c3:da:08:2e:6d:1d:6f:48:0e:a1:de:af:11:
28:64:49:2f:f7:68:a0:1e:37:f4:89:ca:a2:81:af:4a:bf:e1:
7c:be:77:58:ad:e3:25:a5:3a:36:b9:a8:ee:77:ef:9c:92:55:
7a:28:c9:4f:1f:17:b9:7c:98:aa:95:93:32:10:e5:42:f1:72:
24:26:35:b0:09:6c:3d:f4:88:48:a0:4e:a1:a1:5e:e6:0a:20:
41:83:57:55:c0:55:55:c4:86:d7:f9:2a:99:58:64:75:49:cb:
f8:a9:ac:98:8b:51:2c:e9:a5:37:97:5a:a9:42:aa:22:40:38:
42:c2:bf:86:87:2e:fd:04:af:f1:5f:da:aa:69:ac:5c:f7:a9:
76:f4:cc:d9:9b:63:18:35:45:6b:f2:8a:c9:a3:60:68:7f:0c:
05:15:44:52:e2:4e:e0:91:2a:d6:fc:91:22:d9:c2:8b:d4:b8:
47:f2:b8:24
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzgzRjAxMTAvBgNVBAUTKDEwMzZDMUUwRkZFMUNGQzM3RDY1NUQ4OUZBNjVENjVG
RTIyRTFGN0EwHhcNMjUxMTA1MDMwNjQxWhcNMjUxMTEyMDMwNjQxWjAYMRYwFAYD
VQQDEw02OTBhYmY0MS0xMjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0VVbtd5RDcKCPRf06GUNbAQ59JKzlWpuXHZa+9VbACOLsG1gWReYIX2XlPss
kNYJxzghLTvjaReqQhzv4/EnO5ELeWbstlvopI/ya3mpgtyKFkrcZlBn5n10dT21
vSAvv0KFsYQOndLZloNEGuNKePoVxTGaHZS+Jdb8P2HxHhxas7EBC5mJ00GUKh9w
zVe6C1iOj5lY4ZPd947KDq6QL3QjAst5aoRH+VmfIPkuEHtqyBaJ4iehaLRKuasX
qgrVLtx3Jw7BVOHAEoFMUZ5/7cOY3P25ez2YUeeM0/uWkl0yF9jHrbkj6sc3Qoku
TUnqrwEQYEgyM4ViF/gYIe+ogQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNlyLY1H
c+TZseT/TfmSKbv7F9A4MB8GA1UdIwQYMBaAFBA2weD/4c/DfWVdifpl1l/iLh96
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNGMC9EQ0ZDQTZBMjBB
ODMxMUVFOUU2QTkyNTBDNEY5QUUwMi9FRGJCNFBfaHo4TjlaVjJKLW1YV1gtSXVI
M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VEYkI0UF9oejhOOVpWMkotbVhXWC1JdUgzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODNGMC9EQ0ZDQTZBMjBBODMxMUVFOUU2QTkyNTBDNEY5QUUwMi9FRGJCNFBfaHo4
TjlaVjJKLW1YV1gtSXVIM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCRrHrJZW9sfG0wGUci0z58ZP0Goz45YfdMDMnYHXps34x2JRD4dpQQ
XS7GCwucQlIrwiTeIhpWeyLwWINuL05rT62y41Sg4bLPlx3DgMPaCC5tHW9IDqHe
rxEoZEkv92igHjf0icqiga9Kv+F8vndYreMlpTo2uajud++cklV6KMlPHxe5fJiq
lZMyEOVC8XIkJjWwCWw99IhIoE6hoV7mCiBBg1dVwFVVxIbX+SqZWGR1Scv4qayY
i1Es6aU3l1qpQqoiQDhCwr+Ghy79BK/xX9qqaaxc96l29MzZm2MYNUVr8orJo2Bo
fwwFFURS4k7gkSrW/JEi2cKL1LhH8rgk
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:32:11 2025 by rpki-client