
$ rpki-client -vvf rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft
File: bZZ_vdG4dHSCRqy41KqQuotWG0o.mft (raw, json)
Hash identifier: RfVQZkEONRJ/5t1iexHoTQSvf3Y/KKNsS3Mvbo1EGa8=
Subject key identifier: F4:E7:8E:E3:41:92:B6:29:54:E5:76:FA:FB:BB:F3:F2:4F:E2:B8:10
Authority key identifier: 6D:96:7F:BD:D1:B8:74:74:82:46:AC:B8:D4:AA:90:BA:8B:56:1B:4A
Certificate issuer: /CN=A915365A/serialNumber=6D967FBDD1B874748246ACB8D4AA90BA8B561B4A
Certificate serial: 80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft
Manifest number: 7E
Signing time: Wed 05 Nov 2025 06:56:10 +0000
Manifest this update: Wed 05 Nov 2025 06:56:10 +0000
Manifest next update: Wed 12 Nov 2025 06:56:09 +0000
Files and hashes: 1: bZZ_vdG4dHSCRqy41KqQuotWG0o.crl (hash: WmNMNBmB4yXwDpYpAkg8KSdLsuVY0FEcZelD89vY4ng=)
2: 186817D6FAAA11EFA67E0D81C4F9AE02.roa (hash: XqbSA7pTHQu8ks4FQOA3vJ/bHZOe/8eB0bJZqpH2INk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.crl
rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:56:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915365A, serialNumber=6D967FBDD1B874748246ACB8D4AA90BA8B561B4A
Validity
Not Before: Nov 5 06:56:10 2025 GMT
Not After : Nov 12 06:56:09 2025 GMT
Subject: CN=690af50a-f3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c3:1b:5c:a1:69:09:2e:d5:aa:df:ee:61:3b:
4e:b8:3d:76:f4:de:30:e6:92:1d:54:f2:07:55:ad:
46:43:7b:c1:1e:f7:70:94:6d:85:ee:d0:0e:b4:7c:
00:ae:a7:3c:10:83:54:9c:32:d3:75:23:3f:a4:db:
45:71:bc:5d:66:86:c2:3c:46:e4:28:65:b7:d3:6c:
b5:60:d2:94:fe:64:af:79:03:91:ad:87:d9:25:ca:
ad:72:ba:23:7b:19:c6:1b:25:5e:e5:d7:4e:7f:4b:
69:80:ac:3c:60:af:a5:46:1f:0f:0f:97:ea:35:4a:
94:70:9f:fa:a6:a7:66:cb:81:4d:b5:18:1b:4c:5c:
dd:ca:e7:c9:c9:87:bc:34:28:19:91:10:fd:64:ef:
7c:51:66:23:0c:0c:f1:43:10:84:ad:44:de:84:6d:
22:f3:0b:1e:d6:01:9a:1a:5d:92:00:b3:96:cf:7d:
00:7d:7d:f3:41:a3:4a:32:c8:5f:11:c7:5c:b5:b7:
ee:d3:a3:0c:12:61:ef:bf:0f:e6:32:ad:bd:bd:af:
40:59:af:39:fe:a8:5b:47:5c:4b:68:dc:b0:f5:f5:
d7:b3:2e:27:c0:95:3b:18:8b:37:7e:fc:34:14:bc:
94:6c:ed:3d:26:a2:da:cd:f3:14:e9:cc:7e:40:b3:
78:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E7:8E:E3:41:92:B6:29:54:E5:76:FA:FB:BB:F3:F2:4F:E2:B8:10
X509v3 Authority Key Identifier:
keyid:6D:96:7F:BD:D1:B8:74:74:82:46:AC:B8:D4:AA:90:BA:8B:56:1B:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:9d:ec:89:4d:2d:98:99:8f:81:ac:49:ff:c1:70:cd:60:51:
07:1a:17:38:20:5d:f2:4a:8d:5b:58:f8:24:37:ed:49:d2:78:
15:14:44:4a:c5:69:16:38:4e:8a:f9:c7:8e:a0:8f:02:1d:b7:
9c:8f:6e:35:fc:3e:db:49:1b:c6:66:b9:33:bd:f9:a0:63:db:
57:a0:c2:9c:e0:2c:da:96:e2:ee:a1:50:47:40:e0:02:69:b0:
b3:b4:5e:ec:17:0e:dd:17:fa:e5:44:9b:f6:14:cf:55:88:e2:
61:a9:fb:b9:ae:24:79:f8:31:bf:74:5f:cc:4f:5e:38:78:1b:
bd:ae:e2:fc:b8:af:ca:ec:f3:e2:23:c6:60:31:ee:18:9f:f7:
d4:65:31:4b:ab:27:f3:be:d0:07:e5:ff:a8:37:ab:c3:0f:9d:
9b:e8:e5:84:2c:36:dd:50:44:3f:a1:aa:5b:d9:0d:95:d3:c3:
9f:88:f4:86:d8:3c:f6:64:bb:36:77:bc:1b:b2:23:d6:50:27:
3f:5a:98:0a:ab:c3:31:af:9c:f0:50:74:28:9e:24:86:4c:6a:
11:41:5c:66:56:b3:ec:a2:87:7c:18:ad:af:0c:66:f6:b7:99:
a0:d7:3f:21:7f:69:fe:c5:b1:35:15:39:4a:c4:75:88:59:f0:
85:c9:9e:52
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM2NUExMTAvBgNVBAUTKDZEOTY3RkJERDFCODc0NzQ4MjQ2QUNCOEQ0QUE5MEJB
OEI1NjFCNEEwHhcNMjUxMTA1MDY1NjEwWhcNMjUxMTEyMDY1NjA5WjAYMRYwFAYD
VQQDEw02OTBhZjUwYS1mM2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzsMbXKFpCS7Vqt/uYTtOuD129N4w5pIdVPIHVa1GQ3vBHvdwlG2F7tAOtHwA
rqc8EINUnDLTdSM/pNtFcbxdZobCPEbkKGW302y1YNKU/mSveQORrYfZJcqtcroj
exnGGyVe5ddOf0tpgKw8YK+lRh8PD5fqNUqUcJ/6pqdmy4FNtRgbTFzdyufJyYe8
NCgZkRD9ZO98UWYjDAzxQxCErUTehG0i8wse1gGaGl2SALOWz30AfX3zQaNKMshf
Ecdctbfu06MMEmHvvw/mMq29va9AWa85/qhbR1xLaNyw9fXXsy4nwJU7GIs3fvw0
FLyUbO09JqLazfMU6cx+QLN4oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTnjuNB
krYpVOV2+vu78/JP4rgQMB8GA1UdIwQYMBaAFG2Wf73RuHR0gkasuNSqkLqLVhtK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzY1QS9GQTcwOEFERUZB
QTgxMUVGQkU1QzA0N0JDNEY5QUUwMi9iWlpfdmRHNGRIU0NScXk0MUtxUXVvdFdH
MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JaWl92ZEc0ZEhTQ1JxeTQxS3FRdW90V0cwby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MzY1QS9GQTcwOEFERUZBQTgxMUVGQkU1QzA0N0JDNEY5QUUwMi9iWlpfdmRHNGRI
U0NScXk0MUtxUXVvdFdHMG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCWneyJTS2YmY+BrEn/wXDNYFEHGhc4IF3ySo1bWPgkN+1J0ngVFERK
xWkWOE6K+ceOoI8CHbecj241/D7bSRvGZrkzvfmgY9tXoMKc4CzaluLuoVBHQOAC
abCztF7sFw7dF/rlRJv2FM9ViOJhqfu5riR5+DG/dF/MT144eBu9ruL8uK/K7PPi
I8ZgMe4Yn/fUZTFLqyfzvtAH5f+oN6vDD52b6OWELDbdUEQ/oapb2Q2V08OfiPSG
2Dz2ZLs2d7wbsiPWUCc/WpgKq8Mxr5zwUHQoniSGTGoRQVxmVrPsood8GK2vDGb2
t5mg1z8hf2n+xbE1FTlKxHWIWfCFyZ5S
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:59:11 2025 by rpki-client