
$ rpki-client -vvf rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft
File: uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft (raw, json)
Hash identifier: UgUQKFHC5WqmNaCxGhvwULK2clkQxTeOLkk2QEWo3+c=
Subject key identifier: 90:17:12:30:3F:E2:81:C9:EA:0F:99:31:18:57:EE:9E:52:D3:5E:08
Authority key identifier: B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25
Certificate issuer: /CN=A917068E/serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25
Certificate serial: 06B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft
Manifest number: 06AD
Signing time: Tue 04 Nov 2025 22:20:01 +0000
Manifest this update: Tue 04 Nov 2025 22:20:01 +0000
Manifest next update: Tue 11 Nov 2025 22:20:01 +0000
Files and hashes: 1: uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl (hash: HUs7ZoepoE2i5TsIBpb+kwH5vG6Tuwl3nGsrq/iWTLI=)
2: 8889F4E484A711EBB701E773C4F9AE02.roa (hash: lWZRobhtO0oFUd+vRpiCuxRaZUL791izmBtb3cII0fo=)
3: 7464EB1E876411EE8971C221C4F9AE02.roa (hash: zpTvJznQ+5mTsWYuBwFqmhL2aTwH3SE1aCKMAY/WGXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl
rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:20:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1719 (0x6b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917068E, serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25
Validity
Not Before: Nov 4 22:20:01 2025 GMT
Not After : Nov 11 22:20:01 2025 GMT
Subject: CN=690a7c11-0404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3d:70:08:9f:83:39:4c:08:85:19:d1:2b:12:
14:bc:93:75:93:70:9e:54:bb:d9:cc:b7:1a:e0:c1:
0b:97:3c:88:b6:79:86:26:83:b1:72:64:09:95:df:
90:79:10:8c:a1:d8:ba:bd:12:79:07:d3:ce:58:da:
cf:d5:f5:6d:8b:fa:fa:93:dd:84:68:8d:9b:f1:71:
d1:a4:2c:55:39:f9:37:72:ba:4a:ef:78:57:4a:f4:
0c:c6:17:1e:8e:40:24:7f:d6:ae:83:88:d6:61:06:
f4:2e:99:6c:70:9c:94:12:7b:5b:39:b8:ff:91:81:
6c:8f:e2:00:8d:64:58:38:35:e0:e4:f9:8b:eb:fc:
97:d6:4a:5a:b3:3a:a8:88:1b:c4:8c:ef:2b:f9:f1:
a2:85:71:e8:eb:28:8b:72:80:f8:23:3e:70:2e:3e:
fd:99:12:41:03:8c:af:ff:e3:b4:49:02:2a:d7:6a:
4e:78:a7:b8:eb:b5:1c:25:46:6e:92:ab:a1:ba:5d:
bb:00:c6:cd:d5:8b:ca:a1:11:56:a3:db:62:43:bc:
56:97:29:4a:e5:08:af:28:76:96:83:87:ef:53:da:
a7:9a:34:4f:ba:ad:01:68:ea:07:c9:94:0d:c0:ba:
65:01:05:27:dd:ad:da:5a:d4:c6:7f:f7:44:c9:4e:
26:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:17:12:30:3F:E2:81:C9:EA:0F:99:31:18:57:EE:9E:52:D3:5E:08
X509v3 Authority Key Identifier:
keyid:B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:8f:fc:33:41:60:c9:fe:ef:2c:db:ed:99:b8:89:d3:dc:46:
44:88:2e:da:21:df:94:af:d1:d4:77:ce:8d:58:5a:6f:84:1e:
8d:57:91:7b:0b:27:5f:2f:5c:8b:00:34:8b:e6:46:92:72:86:
57:ec:7b:7d:60:65:b5:15:c5:d3:97:83:e4:52:c6:fd:44:6a:
09:9d:46:e5:6d:71:3f:d9:95:c7:9f:89:6e:2e:6f:57:b3:c4:
27:69:e6:39:6d:a9:a2:b7:0b:b4:ef:ee:7a:0f:24:bf:72:a1:
87:61:a8:24:81:f2:df:eb:fc:b7:46:02:df:3f:4c:95:59:8e:
82:b4:fa:36:de:48:d0:02:0a:72:2f:12:e3:ff:9d:69:58:33:
d1:91:35:05:11:6f:ad:22:fc:18:1b:99:dc:d4:64:da:47:7c:
92:35:b2:9b:c3:b6:ca:00:49:8e:79:04:9c:63:af:05:a4:4b:
40:bf:02:b1:aa:81:e2:4a:9c:78:b4:82:b2:63:87:5b:af:b8:
c2:e7:25:d4:57:aa:aa:9b:f9:00:bf:28:a0:bd:68:59:32:36:
bb:8b:00:ba:e7:d0:98:8c:26:49:99:75:ee:4c:d7:3b:4b:f6:
34:5e:fc:f3:8f:49:c2:99:1e:b6:13:8e:be:a3:61:8e:79:98:
fd:3c:33:f9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA2OEUxMTAvBgNVBAUTKEI4RjhDMzYyNkREMDYxNjJFNjdFMjVGNTlBOUE4MUZB
RTQ3MjBBMjUwHhcNMjUxMTA0MjIyMDAxWhcNMjUxMTExMjIyMDAxWjAYMRYwFAYD
VQQDEw02OTBhN2MxMS0wNDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuz1wCJ+DOUwIhRnRKxIUvJN1k3CeVLvZzLca4MELlzyItnmGJoOxcmQJld+Q
eRCModi6vRJ5B9POWNrP1fVti/r6k92EaI2b8XHRpCxVOfk3crpK73hXSvQMxhce
jkAkf9aug4jWYQb0LplscJyUEntbObj/kYFsj+IAjWRYODXg5PmL6/yX1kpaszqo
iBvEjO8r+fGihXHo6yiLcoD4Iz5wLj79mRJBA4yv/+O0SQIq12pOeKe467UcJUZu
kquhul27AMbN1YvKoRFWo9tiQ7xWlylK5QivKHaWg4fvU9qnmjRPuq0BaOoHyZQN
wLplAQUn3a3aWtTGf/dEyU4m/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJAXEjA/
4oHJ6g+ZMRhX7p5S014IMB8GA1UdIwQYMBaAFLj4w2Jt0GFi5n4l9Zqagfrkcgol
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDY4RS9ENkVGNjcxQTg0
QTUxMUVCQUU5RTQ0NzJDNEY5QUUwMi91UGpEWW0zUVlXTG1maVgxbXBxQi11UnlD
aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VQakRZbTNRWVdMbWZpWDFtcHFCLXVSeUNpVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDY4RS9ENkVGNjcxQTg0QTUxMUVCQUU5RTQ0NzJDNEY5QUUwMi91UGpEWW0zUVlX
TG1maVgxbXBxQi11UnlDaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAJj/wzQWDJ/u8s2+2ZuInT3EZEiC7aId+Ur9HUd86NWFpvhB6NV5F7
CydfL1yLADSL5kaScoZX7Ht9YGW1FcXTl4PkUsb9RGoJnUblbXE/2ZXHn4luLm9X
s8QnaeY5bamitwu07+56DyS/cqGHYagkgfLf6/y3RgLfP0yVWY6CtPo23kjQAgpy
LxLj/51pWDPRkTUFEW+tIvwYG5nc1GTaR3ySNbKbw7bKAEmOeQScY68FpEtAvwKx
qoHiSpx4tIKyY4dbr7jC5yXUV6qqm/kAvyigvWhZMja7iwC659CYjCZJmXXuTNc7
S/Y0Xvzzj0nCmR62E46+o2GOeZj9PDP5
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:29:30 2025 by rpki-client