
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
File: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft (raw, json)
Hash identifier: MF+OtfHbN0xhyjQqLZYtrcq+dmK8G5a2Yf+UeKfj7jY=
Subject key identifier: D8:03:FB:E3:59:40:10:5E:E7:CD:CA:1E:64:4B:E0:78:2D:3E:44:6E
Authority key identifier: F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65
Certificate issuer: /CN=A915D0AC/serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865
Certificate serial: 01C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
Manifest number: 01BE
Signing time: Mon 03 Nov 2025 03:03:07 +0000
Manifest this update: Mon 03 Nov 2025 03:03:07 +0000
Manifest next update: Mon 10 Nov 2025 03:03:07 +0000
Files and hashes: 1: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl (hash: Wn+v0B7GPMMwZpzGP7BuerT/XwYKx7SDwpXvyj77f9Q=)
2: 5F52F24EBD2811EE9459FF47C4F9AE02.roa (hash: 9NHfjKZ92JKgdcrA4N9M5ns+wKMTAc0NwSsWt7LXuOk=)
3: DD2A5994182F11EE82A0FC48C4F9AE02.roa (hash: Nc2DNs1eibu6K2aHjIt+L2SkvNewi7SdNMt96VyUl+w=)
4: B9CCF2D4BD2711EE9958E946C4F9AE02.roa (hash: Tr1GoB0OJ0WV/koJHwH589Dyk++1e8UfDHIpzpMoMFU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl
rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 03:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456 (0x1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D0AC, serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865
Validity
Not Before: Nov 3 03:03:07 2025 GMT
Not After : Nov 10 03:03:07 2025 GMT
Subject: CN=69081b6b-48e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e0:35:2a:5f:87:3d:37:45:87:ae:72:86:69:
06:8e:0e:a6:bd:5a:e5:a6:c0:64:01:3f:52:71:75:
ba:7f:79:8e:46:29:08:09:96:7b:87:15:9c:5a:39:
13:14:fd:46:7f:cf:51:f1:3d:9c:52:2e:7c:4e:40:
69:bc:f0:c9:7c:5d:c9:de:b2:f4:eb:81:27:5a:8d:
18:65:b8:27:09:75:af:3c:d1:91:8c:ee:b7:59:04:
a4:6c:fd:d8:77:e6:68:ff:8b:dc:ff:84:81:df:c4:
0e:47:f1:09:63:d0:49:fb:df:a3:60:5c:e7:22:19:
ff:46:22:15:bb:bc:8d:eb:03:ec:97:d9:52:95:20:
e8:20:4d:b1:9e:58:c2:5d:31:49:48:b5:c9:43:44:
37:7d:f0:13:f6:db:e9:7f:b9:e4:29:3f:18:fd:57:
94:24:e9:e1:0e:38:5b:b2:1d:9c:db:d3:b5:fd:77:
9e:83:99:52:d6:f6:2f:f2:de:02:b4:43:22:c5:bb:
93:93:71:92:c9:cc:4a:29:85:de:67:34:00:28:83:
cc:d2:85:bf:ad:d5:44:f2:28:a2:08:a5:91:17:13:
19:39:be:6b:6a:26:c9:5c:a6:ba:af:36:75:c0:0a:
f1:b8:1a:e2:4e:ee:8b:1b:33:f0:55:b1:7d:4d:c1:
01:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:03:FB:E3:59:40:10:5E:E7:CD:CA:1E:64:4B:E0:78:2D:3E:44:6E
X509v3 Authority Key Identifier:
keyid:F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:e5:68:86:5d:bc:11:7c:15:26:9a:6d:3e:fe:2e:a9:8b:ab:
3b:36:1e:24:e8:e3:5d:ce:26:89:07:c8:ba:4d:08:c0:a9:72:
d3:5d:d8:87:4d:3d:51:44:26:39:5d:ec:09:b4:b7:0a:67:5a:
5a:d6:22:05:c1:40:86:cd:9f:cb:92:cf:80:7d:97:b7:0d:2b:
56:a5:62:9c:ae:96:7f:30:99:05:ef:9c:d0:cf:94:e6:d6:f3:
05:8b:35:bd:38:b3:8e:9c:db:49:e4:ee:1c:3e:b7:ae:c7:68:
5b:1c:e4:8b:6c:9c:c8:94:b9:65:62:19:cb:d8:c0:96:a1:73:
9f:ea:67:f5:3a:39:c9:50:d7:bd:a6:f8:c9:49:6d:c6:15:61:
f2:b7:31:2e:b8:c1:a9:ca:60:99:0f:3e:b2:e7:b2:11:d2:36:
e4:0b:0d:0f:60:b6:f7:9d:35:c3:9e:ce:05:c0:5e:7e:11:05:
9a:73:6e:e1:7b:b0:14:31:1a:55:72:f9:c6:56:2d:fc:06:45:
e1:99:8f:16:41:6a:71:3d:b0:a4:8a:d5:59:7d:52:91:3f:02:
be:39:b8:86:79:18:99:da:54:48:2f:75:e3:22:99:c5:b6:0f:
0e:95:9a:04:55:69:50:b2:45:24:ad:ee:8f:4d:20:57:75:78:
35:d8:c1:75
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQwQUMxMTAvBgNVBAUTKEY3QUVENTg3NTExMkNDRkIyMDhFNzE4MjQ3QjFFNDlC
QUFGRkI4NjUwHhcNMjUxMTAzMDMwMzA3WhcNMjUxMTEwMDMwMzA3WjAYMRYwFAYD
VQQDEw02OTA4MWI2Yi00OGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyeA1Kl+HPTdFh65yhmkGjg6mvVrlpsBkAT9ScXW6f3mORikICZZ7hxWcWjkT
FP1Gf89R8T2cUi58TkBpvPDJfF3J3rL064EnWo0YZbgnCXWvPNGRjO63WQSkbP3Y
d+Zo/4vc/4SB38QOR/EJY9BJ+9+jYFznIhn/RiIVu7yN6wPsl9lSlSDoIE2xnljC
XTFJSLXJQ0Q3ffAT9tvpf7nkKT8Y/VeUJOnhDjhbsh2c29O1/Xeeg5lS1vYv8t4C
tEMixbuTk3GSycxKKYXeZzQAKIPM0oW/rdVE8iiiCKWRFxMZOb5raibJXKa6rzZ1
wArxuBriTu6LGzPwVbF9TcEBMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgD++NZ
QBBe583KHmRL4HgtPkRuMB8GA1UdIwQYMBaAFPeu1YdREsz7II5xgkex5Juq/7hl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy9BMjlBQTJEODE1
MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi85NjdWaDFFU3pQc2dqbkdDUjdIa202cl91
R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzk2N1ZoMUVTelBzZ2puR0NSN0hrbTZyX3VHVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDBBQy9BMjlBQTJEODE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi85NjdWaDFFU3pQ
c2dqbkdDUjdIa202cl91R1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBn5WiGXbwRfBUmmm0+/i6pi6s7Nh4k6ONdziaJB8i6TQjAqXLTXdiH
TT1RRCY5XewJtLcKZ1pa1iIFwUCGzZ/Lks+AfZe3DStWpWKcrpZ/MJkF75zQz5Tm
1vMFizW9OLOOnNtJ5O4cPreux2hbHOSLbJzIlLllYhnL2MCWoXOf6mf1OjnJUNe9
pvjJSW3GFWHytzEuuMGpymCZDz6y57IR0jbkCw0PYLb3nTXDns4FwF5+EQWac27h
e7AUMRpVcvnGVi38BkXhmY8WQWpxPbCkitVZfVKRPwK+ObiGeRiZ2lRIL3XjIpnF
tg8OlZoEVWlQskUkre6PTSBXdXg12MF1
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:03:19 2025 by rpki-client