
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
File: TPa6KUJsvCB032LFH683jELTuK8.mft (raw, json)
Hash identifier: 6Ue8It/7bVH9FhR+Ap/LrVQvCzdfJUuyaFijTsgWcxY=
Subject key identifier: 77:40:05:B5:5C:AC:EB:34:79:62:F4:14:5A:70:4D:DB:60:49:89:4D
Authority key identifier: 4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF
Certificate issuer: /CN=A9148F50/serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF
Certificate serial: 0763
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
Manifest number: 075B
Signing time: Tue 04 Nov 2025 21:45:55 +0000
Manifest this update: Tue 04 Nov 2025 21:45:55 +0000
Manifest next update: Tue 11 Nov 2025 21:45:55 +0000
Files and hashes: 1: TPa6KUJsvCB032LFH683jELTuK8.crl (hash: 0iI8jPK6KSKTUL0u3Jo7Rx3YHb7SylzSjqZmp/8/4Ro=)
2: B6A436A8411F11EBA45D5857C4F9AE02.roa (hash: 8umaFtJV5TgBXJUzmNOXuQWmgpWLTZbpyNtna3LX4IY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl
rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:45:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1891 (0x763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148F50, serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF
Validity
Not Before: Nov 4 21:45:55 2025 GMT
Not After : Nov 11 21:45:55 2025 GMT
Subject: CN=690a7413-5fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4f:bd:ea:e0:38:d9:25:46:9a:36:d2:df:96:
9a:99:4b:fc:df:0d:2d:f5:48:47:a9:9b:61:34:cc:
0b:2a:be:e6:2e:31:b3:fe:ac:ea:87:f0:72:40:c0:
6a:ae:15:5b:fa:7b:52:6f:98:6f:26:bf:af:93:d6:
f0:f7:27:ee:19:34:17:39:9b:48:12:81:af:c6:b1:
2c:ad:b4:95:14:ee:5b:e8:5e:e3:a6:33:ff:c2:9a:
16:e3:f8:9d:e2:d5:33:41:06:e8:8b:7d:d4:c1:5d:
77:78:99:39:1f:d1:a0:1f:74:3e:8c:43:a2:67:0c:
42:1d:b7:f9:f6:dd:e3:c5:b6:48:ab:28:af:b9:b5:
02:53:5a:82:da:c6:c9:ce:71:68:65:49:0e:aa:69:
d9:d8:59:b7:bc:0a:af:6c:3f:ce:02:48:dc:a4:f3:
b2:92:8d:12:1f:42:07:e3:0a:2b:34:77:4e:96:af:
04:e1:82:08:e6:fc:56:84:56:b8:f6:83:34:ba:d9:
e1:b5:20:d0:5c:a9:43:17:b6:75:9e:15:54:10:86:
d7:f4:00:ad:af:07:86:bc:d4:ee:27:17:4b:a6:e1:
86:10:33:87:17:5b:14:18:6a:ea:66:55:42:d3:3b:
31:72:30:32:5d:67:88:9b:9f:51:02:38:aa:6d:45:
3f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:40:05:B5:5C:AC:EB:34:79:62:F4:14:5A:70:4D:DB:60:49:89:4D
X509v3 Authority Key Identifier:
keyid:4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f6:f6:72:dc:56:e2:b9:2b:d0:0b:b2:c9:1b:80:38:f8:88:
9c:78:09:22:9d:58:a7:0f:87:35:56:a1:1e:ec:96:d9:16:a3:
9d:6a:d0:0b:57:c8:88:14:ef:68:04:5f:0a:a7:3a:e5:3b:b3:
c8:7d:2d:ab:81:43:18:e9:d9:e3:11:d6:15:2a:45:5a:82:e3:
62:c3:e0:3f:7f:0a:c3:ef:4f:6c:e8:c9:45:13:33:0e:6b:d5:
7e:50:c5:e5:fa:67:da:6a:37:0c:96:8c:7f:3b:de:93:14:8f:
32:b5:b8:9e:cc:62:29:e1:80:d4:05:72:22:de:77:50:f1:3e:
99:48:c9:d2:35:80:6b:da:64:9f:54:db:b2:90:ad:04:04:3d:
05:b2:f3:e5:83:18:a5:02:14:92:be:a0:7e:c2:71:42:fc:c8:
de:c1:9a:2b:33:44:fe:e9:da:99:2b:7f:39:7e:8d:5f:f1:60:
53:a6:13:28:27:0d:49:d4:de:e1:56:f0:5b:4e:b0:8d:ad:67:
a2:76:27:a6:0d:bf:0d:0f:63:76:0e:d3:fd:96:95:ee:a0:3d:
fd:9e:64:7f:40:ff:2f:f2:64:ac:25:27:d0:09:26:e6:d1:09:
af:ee:dc:e9:b3:93:c7:d6:9c:2d:0b:ab:65:3c:ae:6b:3f:92:
0d:4f:88:dd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhGNTAxMTAvBgNVBAUTKDRDRjZCQTI5NDI2Q0JDMjA3NERGNjJDNTFGQUYzNzhD
NDJEM0I4QUYwHhcNMjUxMTA0MjE0NTU1WhcNMjUxMTExMjE0NTU1WjAYMRYwFAYD
VQQDEw02OTBhNzQxMy01ZmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyU+96uA42SVGmjbS35aamUv83w0t9UhHqZthNMwLKr7mLjGz/qzqh/ByQMBq
rhVb+ntSb5hvJr+vk9bw9yfuGTQXOZtIEoGvxrEsrbSVFO5b6F7jpjP/wpoW4/id
4tUzQQboi33UwV13eJk5H9GgH3Q+jEOiZwxCHbf59t3jxbZIqyivubUCU1qC2sbJ
znFoZUkOqmnZ2Fm3vAqvbD/OAkjcpPOyko0SH0IH4worNHdOlq8E4YII5vxWhFa4
9oM0utnhtSDQXKlDF7Z1nhVUEIbX9ACtrweGvNTuJxdLpuGGEDOHF1sUGGrqZlVC
0zsxcjAyXWeIm59RAjiqbUU/MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdABbVc
rOs0eWL0FFpwTdtgSYlNMB8GA1UdIwQYMBaAFEz2uilCbLwgdN9ixR+vN4xC07iv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEY1MC9BMUUxRjc5QzQx
MUUxMUVCQTBCOEZBNTZDNEY5QUUwMi9UUGE2S1VKc3ZDQjAzMkxGSDY4M2pFTFR1
SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RQYTZLVUpzdkNCMDMyTEZINjgzakVMVHVLOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OEY1MC9BMUUxRjc5QzQxMUUxMUVCQTBCOEZBNTZDNEY5QUUwMi9UUGE2S1VKc3ZD
QjAzMkxGSDY4M2pFTFR1SzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBK9vZy3FbiuSvQC7LJG4A4+IiceAkinVinD4c1VqEe7JbZFqOdatAL
V8iIFO9oBF8KpzrlO7PIfS2rgUMY6dnjEdYVKkVaguNiw+A/fwrD709s6MlFEzMO
a9V+UMXl+mfaajcMlox/O96TFI8ytbiezGIp4YDUBXIi3ndQ8T6ZSMnSNYBr2mSf
VNuykK0EBD0FsvPlgxilAhSSvqB+wnFC/MjewZorM0T+6dqZK385fo1f8WBTphMo
Jw1J1N7hVvBbTrCNrWeidiemDb8ND2N2DtP9lpXuoD39nmR/QP8v8mSsJSfQCSbm
0Qmv7tzps5PH1pwtC6tlPK5rP5INT4jd
-----END CERTIFICATE-----
Generated at Wed Nov 5 22:34:45 2025 by rpki-client