
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
File: R8vvcL1VuVMzMbi8wumClWOizpQ.mft (raw, json)
Hash identifier: mnWGI2A/PRXvuadm6DCu7u7PGK708b43D/BXGrWiL6M=
Subject key identifier: 59:D6:A7:AA:1D:F3:85:3E:7F:A8:DA:15:A0:52:5A:8F:C9:49:1C:09
Authority key identifier: 47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94
Certificate issuer: /CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
Certificate serial: 0688
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
Manifest number: 0674
Signing time: Tue 04 Nov 2025 22:38:48 +0000
Manifest this update: Tue 04 Nov 2025 22:38:48 +0000
Manifest next update: Tue 11 Nov 2025 22:38:48 +0000
Files and hashes: 1: R8vvcL1VuVMzMbi8wumClWOizpQ.crl (hash: 9RarfyudvMFyoeT3kZ+flyE6t31KalMENCTArMkhTRY=)
2: 440BBCC8D50411EB8AB09711C4F9AE02.roa (hash: qO/kt1cMyB8zrA4ykFY3E6NDvsrSs/t7vGIuj96fEPU=)
3: 0C65AFCECE8511ECAEF2C52BC4F9AE02.roa (hash: 5VW5u5nV4cWkOhmuhHmaXAMAI+xByp0pPJ4g2dPBTqE=)
4: 2C9AF3A2659411EDA3257D0AC4F9AE02.roa (hash: l5U4Aj0G/of9H3Qhhfeqyo1Zivkl+XdCF8RMvmc+X6E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl
rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:38:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1672 (0x688)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142A1D, serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
Validity
Not Before: Nov 4 22:38:48 2025 GMT
Not After : Nov 11 22:38:48 2025 GMT
Subject: CN=690a8078-97c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:37:a4:e9:fa:3e:40:eb:4f:c4:71:c2:76:a4:
af:33:19:0f:b9:70:93:48:76:0e:0d:ae:0f:4a:97:
7c:66:da:1e:74:26:f1:7f:9b:fa:ef:02:fb:6d:e5:
03:cb:8b:bc:3b:4e:cb:60:49:6a:52:6b:f1:12:75:
15:08:d9:4d:14:71:c2:9b:8d:f0:07:dc:3f:a5:a6:
0c:f8:08:3e:60:63:b2:7d:36:49:66:3f:6f:61:6c:
e6:3b:5d:96:66:53:0a:22:9a:70:50:1f:b4:d3:4a:
34:02:07:50:1e:b9:bf:13:28:42:a8:30:35:a1:6b:
e1:5d:10:ac:a3:db:c6:35:a3:03:63:78:83:d6:58:
8b:24:c0:65:04:52:6f:5d:fa:42:e9:13:a1:b5:8b:
40:20:01:f8:76:3a:a6:d5:66:d0:25:6d:6b:08:a0:
d7:4b:3b:d3:0e:02:ad:3c:1d:58:46:7d:f2:46:29:
2f:e1:4f:68:4f:cc:e8:f4:05:f8:db:7f:2d:32:15:
05:4f:01:e6:55:21:ca:04:90:91:9f:97:3b:9b:c5:
c7:cf:12:60:87:02:43:66:53:dc:37:ab:8f:67:79:
3e:4c:90:d0:de:7d:d8:08:4a:94:38:56:8f:8d:f4:
15:0f:f4:1b:30:fc:2e:b5:1f:93:b9:4e:60:f7:31:
94:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D6:A7:AA:1D:F3:85:3E:7F:A8:DA:15:A0:52:5A:8F:C9:49:1C:09
X509v3 Authority Key Identifier:
keyid:47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:81:12:63:b3:86:27:9f:8e:a6:cc:3c:76:85:e2:81:7a:25:
4d:e7:26:2f:71:42:b7:bd:e9:92:de:8e:42:b0:78:bb:c6:52:
2e:6a:a2:08:67:17:ea:45:cb:31:5e:2c:89:ae:24:d2:1f:8d:
26:fb:07:fc:49:a1:f3:13:1a:8c:32:67:a3:24:8e:c7:4e:93:
d8:47:0e:3c:4e:73:27:02:9f:1d:00:59:fe:bb:04:54:38:06:
92:e9:b4:44:a0:71:76:11:82:e4:34:79:f9:10:32:45:ca:2a:
4e:b8:50:51:b4:2a:c1:b3:31:bb:3b:e4:97:f0:c6:07:6c:2a:
09:b6:ed:e0:e6:34:b3:7f:b5:5a:16:99:de:61:c4:85:b6:f3:
e9:91:d7:d9:5e:f3:1f:0d:8d:18:91:4e:1d:91:ab:c6:b8:9f:
8c:ce:fb:9d:4b:68:5d:96:36:3b:27:95:0f:9e:57:0a:f7:94:
19:45:07:29:5a:a5:74:1c:e7:a7:1d:e6:45:66:46:4c:9c:8f:
4f:7e:b8:0c:f6:5e:ef:44:27:3f:91:75:54:d7:33:90:33:4c:
30:a9:3c:16:b9:a2:03:16:3e:d1:f9:2e:95:82:ce:af:07:89:
9c:91:a1:7c:63:a0:3e:82:d3:1f:aa:65:0c:c2:bf:f9:b6:19:
40:22:f8:69
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDJBMUQxMTAvBgNVBAUTKDQ3Q0JFRjcwQkQ1NUI5NTMzMzMxQjhCQ0MyRTk4Mjk1
NjNBMkNFOTQwHhcNMjUxMTA0MjIzODQ4WhcNMjUxMTExMjIzODQ4WjAYMRYwFAYD
VQQDEw02OTBhODA3OC05N2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Tek6fo+QOtPxHHCdqSvMxkPuXCTSHYODa4PSpd8ZtoedCbxf5v67wL7beUD
y4u8O07LYElqUmvxEnUVCNlNFHHCm43wB9w/paYM+Ag+YGOyfTZJZj9vYWzmO12W
ZlMKIppwUB+000o0AgdQHrm/EyhCqDA1oWvhXRCso9vGNaMDY3iD1liLJMBlBFJv
XfpC6ROhtYtAIAH4djqm1WbQJW1rCKDXSzvTDgKtPB1YRn3yRikv4U9oT8zo9AX4
238tMhUFTwHmVSHKBJCRn5c7m8XHzxJghwJDZlPcN6uPZ3k+TJDQ3n3YCEqUOFaP
jfQVD/QbMPwutR+TuU5g9zGUvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnWp6od
84U+f6jaFaBSWo/JSRwJMB8GA1UdIwQYMBaAFEfL73C9VblTMzG4vMLpgpVjos6U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkExRC80NTRCQ0RBNDlF
OTQxMUVCQkM4MERGMjBDNEY5QUUwMi9SOHZ2Y0wxVnVWTXpNYmk4d3VtQ2xXT2l6
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1I4dnZjTDFWdVZNek1iaTh3dW1DbFdPaXpwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MkExRC80NTRCQ0RBNDlFOTQxMUVCQkM4MERGMjBDNEY5QUUwMi9SOHZ2Y0wxVnVW
TXpNYmk4d3VtQ2xXT2l6cFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAtgRJjs4Ynn46mzDx2heKBeiVN5yYvcUK3vemS3o5CsHi7xlIuaqII
ZxfqRcsxXiyJriTSH40m+wf8SaHzExqMMmejJI7HTpPYRw48TnMnAp8dAFn+uwRU
OAaS6bREoHF2EYLkNHn5EDJFyipOuFBRtCrBszG7O+SX8MYHbCoJtu3g5jSzf7Va
FpneYcSFtvPpkdfZXvMfDY0YkU4dkavGuJ+MzvudS2hdljY7J5UPnlcK95QZRQcp
WqV0HOenHeZFZkZMnI9PfrgM9l7vRCc/kXVU1zOQM0wwqTwWuaIDFj7R+S6Vgs6v
B4mckaF8Y6A+gtMfqmUMwr/5thlAIvhp
-----END CERTIFICATE-----
Generated at Wed Nov 5 18:01:12 2025 by rpki-client