
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
File: IugbMnyx-zUB4Fr6uUEhkY_bW14.mft (raw, json)
Hash identifier: OdldjrsK8/pPGaLsBbGXy5Q6gCINa6i67/YhukfHm/g=
Subject key identifier: 88:F6:DA:8C:EB:84:DF:EC:E3:B5:05:C6:57:E8:1D:73:2E:DB:4F:FD
Authority key identifier: 22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E
Certificate issuer: /CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
Certificate serial: 18BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
Manifest number: 188A
Signing time: Tue 04 Nov 2025 16:36:00 +0000
Manifest this update: Tue 04 Nov 2025 16:35:59 +0000
Manifest next update: Tue 11 Nov 2025 16:35:59 +0000
Files and hashes: 1: IugbMnyx-zUB4Fr6uUEhkY_bW14.crl (hash: mYLygrUsudc5YV0237A9x+vrNI7LmVkvZfxL6gwgXMU=)
2: 99D6FBE6341F11E9BF826924C4F9AE02.roa (hash: YlOygXlIDX3GFV4d167GBuN4YNBn3vpIbjUm1yh/9cQ=)
3: AF066E3E8BF711F08B841259C4F9AE02.roa (hash: I9IuYeKsVkPA5gYO/x+81RjmFQuZFPQkT2hjEsy5mDk=)
4: 609B8BC27D7B11EDB6B77173C4F9AE02.roa (hash: iFueyXd2lHMmKAfnAjCjI5GADReoL75SeKIy87AJaM0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl
rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6333 (0x18bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B5BD, serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
Validity
Not Before: Nov 4 16:35:59 2025 GMT
Not After : Nov 11 16:35:59 2025 GMT
Subject: CN=690a2b6f-c4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2f:f7:d7:eb:97:42:ca:90:ab:8f:cc:7c:dd:
ad:1a:ab:ba:0e:57:92:d7:04:0d:b3:ac:9f:76:86:
9f:ce:9a:93:86:0f:82:95:85:6e:7a:85:c5:36:ce:
bc:a6:49:d7:a5:45:f2:92:79:98:ab:1c:a4:d8:ab:
6f:d5:a3:bf:b5:a6:8b:bb:37:82:af:95:27:0a:03:
e5:1c:f0:b7:33:31:fa:4c:13:4a:52:ff:b6:82:4b:
09:a5:b9:11:e6:ee:30:1d:61:4d:5e:62:05:cf:71:
5d:d6:95:39:c3:5f:43:8e:01:c5:bb:1c:89:fc:50:
3d:c0:2a:88:a4:f8:87:fb:e8:90:62:6c:02:98:75:
f0:37:fa:c1:9e:87:6e:7b:4a:f0:d4:06:1f:8a:d7:
cc:43:37:1f:2b:cc:95:f0:c7:ec:25:8d:0b:02:18:
d7:73:da:4e:74:34:5d:a5:d9:3a:0f:85:3d:9c:9a:
25:9c:70:2a:0c:c5:39:d8:2c:52:e7:25:b2:5e:27:
ae:83:29:72:bb:31:e2:cf:14:b8:15:6f:11:70:72:
d5:34:4b:64:ea:13:90:24:14:bd:21:99:fc:31:fc:
fc:79:96:2c:74:9f:9a:cb:ca:c6:f9:e4:90:e9:3d:
0d:e8:c6:9d:ac:b1:28:d1:98:1c:cd:06:22:db:99:
59:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F6:DA:8C:EB:84:DF:EC:E3:B5:05:C6:57:E8:1D:73:2E:DB:4F:FD
X509v3 Authority Key Identifier:
keyid:22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:5d:e9:65:ad:09:cf:40:5b:4c:ed:a6:82:54:a8:96:d2:1c:
dc:59:e0:c3:17:f7:ab:39:f4:7b:03:0b:7f:30:6d:d7:a3:10:
36:ab:5c:7a:b1:cb:2a:95:48:23:22:8a:99:f7:6f:c3:38:fb:
71:43:f8:1f:42:30:f8:a1:d0:bf:cc:f4:ff:e5:c5:7d:81:68:
34:2f:2d:9f:99:2a:b3:c9:40:12:8d:ca:d8:c5:aa:3b:c5:84:
11:08:c5:e7:b7:ef:c4:94:91:7d:bf:6a:74:88:23:84:55:be:
c8:7a:5d:6b:7a:2f:dc:a9:68:7a:e7:72:1b:7c:da:f9:15:ee:
bf:60:69:a4:e3:c3:a4:b9:cb:2f:40:d2:0f:f9:23:6d:19:af:
e5:9b:4e:d9:ea:9a:45:7d:4b:9f:73:cc:ac:b8:82:52:41:25:
e6:f6:e6:f3:5a:46:c7:80:e8:36:bb:3a:2a:88:2d:21:26:f6:
bd:2d:ea:99:18:66:c8:73:af:3a:21:60:1c:c3:6b:55:bd:df:
8d:47:1d:b8:69:b6:16:e9:1c:05:18:eb:56:6d:e9:ab:09:6e:
77:a9:b6:7f:5b:c7:cb:a2:2f:bb:fa:65:b4:88:72:3a:a3:35:
54:95:f1:c1:71:f1:8b:40:d4:c4:96:48:ba:c8:01:9a:b2:b0:
ff:0f:90:48
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEI1QkQxMTAvBgNVBAUTKDIyRTgxQjMyN0NCMUZCMzUwMUUwNUFGQUI5NDEyMTkx
OEZEQjVCNUUwHhcNMjUxMTA0MTYzNTU5WhcNMjUxMTExMTYzNTU5WjAYMRYwFAYD
VQQDEw02OTBhMmI2Zi1jNGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyC/31+uXQsqQq4/MfN2tGqu6DleS1wQNs6yfdoafzpqThg+ClYVueoXFNs68
pknXpUXyknmYqxyk2Ktv1aO/taaLuzeCr5UnCgPlHPC3MzH6TBNKUv+2gksJpbkR
5u4wHWFNXmIFz3Fd1pU5w19DjgHFuxyJ/FA9wCqIpPiH++iQYmwCmHXwN/rBnodu
e0rw1AYfitfMQzcfK8yV8MfsJY0LAhjXc9pOdDRdpdk6D4U9nJolnHAqDMU52CxS
5yWyXieugylyuzHizxS4FW8RcHLVNEtk6hOQJBS9IZn8Mfz8eZYsdJ+ay8rG+eSQ
6T0N6MadrLEo0ZgczQYi25lZjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIj22ozr
hN/s47UFxlfoHXMu20/9MB8GA1UdIwQYMBaAFCLoGzJ8sfs1AeBa+rlBIZGP21te
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjVCRC8zM0NCMTE3QUI1
QTkxMUU3OUM3NENCNzJDNEY5QUUwMi9JdWdiTW55eC16VUI0RnI2dVVFaGtZX2JX
MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0l1Z2JNbnl4LXpVQjRGcjZ1VUVoa1lfYlcxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QjVCRC8zM0NCMTE3QUI1QTkxMUU3OUM3NENCNzJDNEY5QUUwMi9JdWdiTW55eC16
VUI0RnI2dVVFaGtZX2JXMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAnXellrQnPQFtM7aaCVKiW0hzcWeDDF/erOfR7Awt/MG3XoxA2q1x6
scsqlUgjIoqZ92/DOPtxQ/gfQjD4odC/zPT/5cV9gWg0Ly2fmSqzyUASjcrYxao7
xYQRCMXnt+/ElJF9v2p0iCOEVb7Iel1rei/cqWh653IbfNr5Fe6/YGmk48Okucsv
QNIP+SNtGa/lm07Z6ppFfUufc8ysuIJSQSXm9ubzWkbHgOg2uzoqiC0hJva9LeqZ
GGbIc686IWAcw2tVvd+NRx24abYW6RwFGOtWbemrCW53qbZ/W8fLoi+7+mW0iHI6
ozVUlfHBcfGLQNTElki6yAGasrD/D5BI
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:33:50 2025 by rpki-client