
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft
File: rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft (raw, json)
Hash identifier: Dj0uTk1Ue/tdT0gw5y3ymhCXKGg3ZxZJoGQHi2IqxoU=
Subject key identifier: 52:54:49:54:EE:90:29:D4:66:CB:41:97:2F:3C:DE:FF:C8:D5:32:F8
Authority key identifier: AD:54:5D:25:04:FE:1D:E9:2A:E1:76:6D:F4:65:76:37:DB:7A:7E:75
Certificate issuer: /CN=A9172FC5/serialNumber=AD545D2504FE1DE92AE1766DF4657637DB7A7E75
Certificate serial: B4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rVRdJQT-Hekq4XZt9GV2N9t6fnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft
Manifest number: B1
Signing time: Mon 03 Nov 2025 06:06:24 +0000
Manifest this update: Mon 03 Nov 2025 06:06:24 +0000
Manifest next update: Mon 10 Nov 2025 06:06:24 +0000
Files and hashes: 1: rVRdJQT-Hekq4XZt9GV2N9t6fnU.crl (hash: 6tC7PLh67QbsR6mp5xTwvFod2QpHrjRe7fmiSiDWqXg=)
2: 15B99EFC016111F0B1B6A34EC4F9AE02.roa (hash: fNaQxATAW6BCNgpllm+ul+pMRSXup8I9s/wGqDPcAs4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.crl
rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rVRdJQT-Hekq4XZt9GV2N9t6fnU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172FC5, serialNumber=AD545D2504FE1DE92AE1766DF4657637DB7A7E75
Validity
Not Before: Nov 3 06:06:24 2025 GMT
Not After : Nov 10 06:06:24 2025 GMT
Subject: CN=69084660-0329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:e7:e7:74:d2:35:3d:51:3b:5c:be:e8:0d:
9c:5e:3f:ba:b1:72:7b:44:de:17:90:8f:03:8d:e0:
20:41:60:93:d0:d4:1d:2a:9a:2c:98:f5:f1:f6:b1:
81:e7:a4:64:f0:59:ae:39:35:a8:d0:8c:5b:7d:7e:
13:24:54:f2:cf:c8:71:5e:2d:14:40:7e:91:63:ab:
d9:fa:dd:11:2a:c8:85:ce:51:69:1d:2c:1a:b2:35:
94:26:dc:f7:ce:e3:24:af:02:a2:35:4e:3d:c0:c9:
4a:4e:a2:23:3e:ac:68:5d:a6:01:51:b8:aa:f5:7b:
d9:64:f8:27:b5:b2:bd:b7:8f:f8:09:99:a2:4a:7c:
4d:1c:14:7e:01:c7:a0:7e:8f:96:99:54:1b:7d:c6:
eb:ca:d8:7a:97:fa:14:c5:c9:56:bb:f3:a4:2a:c4:
49:e6:67:f1:0c:7d:2b:c6:cd:e9:af:bb:6f:fd:1c:
4b:69:5f:ad:84:3a:69:da:d1:be:01:06:5f:48:6e:
cc:bc:a2:68:08:42:38:2c:7a:b8:b1:e4:95:2f:0d:
20:e1:a2:40:f7:a5:1a:eb:85:4f:0e:a7:3d:ba:71:
86:16:2e:a7:fe:90:5f:2d:74:7f:50:4f:11:48:9d:
23:c8:0c:7b:28:89:92:70:fd:ca:b4:cc:33:3c:79:
0c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:54:49:54:EE:90:29:D4:66:CB:41:97:2F:3C:DE:FF:C8:D5:32:F8
X509v3 Authority Key Identifier:
keyid:AD:54:5D:25:04:FE:1D:E9:2A:E1:76:6D:F4:65:76:37:DB:7A:7E:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rVRdJQT-Hekq4XZt9GV2N9t6fnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:8c:eb:68:9a:90:ec:da:f9:36:ed:43:a0:ea:44:2c:f7:86:
6c:be:2f:09:35:11:ca:11:7d:41:94:b3:1e:dc:ae:8b:4c:16:
3d:74:e6:26:75:28:56:03:f3:86:d2:80:fc:37:d5:5e:c3:97:
34:91:dc:20:43:74:72:44:8c:cd:a0:15:b6:53:49:fe:99:2f:
a2:da:42:6b:8b:e1:e5:35:4c:58:e5:b6:64:0c:2b:b9:a3:a6:
ae:fd:3b:ab:d2:c3:c5:71:fa:32:7d:fc:7e:85:e3:cc:82:38:
15:9e:2c:8a:16:a4:b1:73:5a:8e:da:b8:e6:30:85:f4:12:aa:
29:e5:c9:f9:63:65:d2:9a:dc:e8:1c:de:fd:6f:4b:c9:18:c2:
87:02:3f:e3:3d:1b:49:e5:c1:74:85:8d:ee:23:e4:d3:aa:94:
80:6e:58:19:4c:bc:a1:0e:18:88:00:1b:96:47:fc:88:95:51:
6a:8a:84:e6:7b:63:de:ae:d9:fd:9e:f4:27:45:48:16:08:be:
9a:1a:74:99:67:0c:6c:9a:11:13:1f:38:4c:56:17:aa:86:27:
48:7b:6f:7b:d2:ac:0a:e7:e8:4e:f3:e7:7f:83:4d:07:5b:35:
f3:ea:67:eb:73:52:68:d6:79:e8:54:b6:93:08:ea:42:a2:79:
b3:1e:56:9a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJGQzUxMTAvBgNVBAUTKEFENTQ1RDI1MDRGRTFERTkyQUUxNzY2REY0NjU3NjM3
REI3QTdFNzUwHhcNMjUxMTAzMDYwNjI0WhcNMjUxMTEwMDYwNjI0WjAYMRYwFAYD
VQQDEw02OTA4NDY2MC0wMzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqfXn53TSNT1RO1y+6A2cXj+6sXJ7RN4XkI8DjeAgQWCT0NQdKposmPXx9rGB
56Rk8FmuOTWo0IxbfX4TJFTyz8hxXi0UQH6RY6vZ+t0RKsiFzlFpHSwasjWUJtz3
zuMkrwKiNU49wMlKTqIjPqxoXaYBUbiq9XvZZPgntbK9t4/4CZmiSnxNHBR+Aceg
fo+WmVQbfcbryth6l/oUxclWu/OkKsRJ5mfxDH0rxs3pr7tv/RxLaV+thDpp2tG+
AQZfSG7MvKJoCEI4LHq4seSVLw0g4aJA96Ua64VPDqc9unGGFi6n/pBfLXR/UE8R
SJ0jyAx7KImScP3KtMwzPHkMBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJUSVTu
kCnUZstBly883v/I1TL4MB8GA1UdIwQYMBaAFK1UXSUE/h3pKuF2bfRldjfben51
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkZDNS9FNTM5Q0RBMEFC
M0YxMUVGQkUwMkNGMTRDNEY5QUUwMi9yVlJkSlFULUhla3E0WFp0OUdWMk45dDZm
blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3JWUmRKUVQtSGVrcTRYWnQ5R1YyTjl0NmZuVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MkZDNS9FNTM5Q0RBMEFCM0YxMUVGQkUwMkNGMTRDNEY5QUUwMi9yVlJkSlFULUhl
a3E0WFp0OUdWMk45dDZmblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQARjOtompDs2vk27UOg6kQs94Zsvi8JNRHKEX1BlLMe3K6LTBY9dOYm
dShWA/OG0oD8N9Vew5c0kdwgQ3RyRIzNoBW2U0n+mS+i2kJri+HlNUxY5bZkDCu5
o6au/Tur0sPFcfoyffx+hePMgjgVniyKFqSxc1qO2rjmMIX0Eqop5cn5Y2XSmtzo
HN79b0vJGMKHAj/jPRtJ5cF0hY3uI+TTqpSAblgZTLyhDhiIABuWR/yIlVFqioTm
e2Pertn9nvQnRUgWCL6aGnSZZwxsmhETHzhMVheqhidIe2970qwK5+hO8+d/g00H
WzXz6mfrc1Jo1nnoVLaTCOpConmzHlaa
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:07:33 2025 by rpki-client