
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
File: Br1EFUedLHUIN8XJQzYTuyWIrrg.mft (raw, json)
Hash identifier: kssZFcoBLE2RpTOIuzNFaFll0BJXfIgSw5ZfUfZK1Po=
Subject key identifier: D8:CA:AD:27:E1:F7:94:B4:CC:46:89:2F:63:4F:38:55:90:E9:D5:37
Authority key identifier: 06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8
Certificate issuer: /CN=A9177FC9/serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
Certificate serial: 84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
Manifest number: 7D
Signing time: Wed 05 Nov 2025 07:03:00 +0000
Manifest this update: Wed 05 Nov 2025 07:02:59 +0000
Manifest next update: Wed 12 Nov 2025 07:02:59 +0000
Files and hashes: 1: Br1EFUedLHUIN8XJQzYTuyWIrrg.crl (hash: FcLPrtQDwYiJphujhmn/KK762K4A8xzCItOhjXKFOV4=)
2: FDD39BD607B811F0AB98B333C4F9AE02.roa (hash: qoLPoA4lZ1ha+1hCNURiczpMXcx77W01//WQ1dkufkU=)
3: FD6DA4D407B811F0AB98B333C4F9AE02.roa (hash: 1A7do/sKIO8NT6R3NBCJ/yFYUs9LFmYB3G5A768MYYA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl
rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 07:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177FC9, serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
Validity
Not Before: Nov 5 07:02:59 2025 GMT
Not After : Nov 12 07:02:59 2025 GMT
Subject: CN=690af6a3-1169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2b:2b:59:7e:f6:6f:35:3d:ac:30:1b:bb:4a:
54:02:e7:fd:68:50:53:44:a8:2d:7c:27:3e:6e:75:
bd:4c:2f:bf:5f:37:9e:db:31:87:fc:d3:cd:75:c4:
37:52:f7:75:a2:9d:1f:da:df:35:e8:a9:71:4e:ab:
b2:f3:47:61:25:b2:f9:3c:f9:bb:6c:7f:f8:c9:fe:
b8:92:cc:97:8e:82:1c:8b:52:24:74:de:47:bb:a3:
d4:d1:46:b5:17:a8:dd:f4:ca:40:76:02:0b:b2:14:
28:ad:be:75:80:62:48:12:4b:cf:42:ff:e4:24:55:
5c:37:6c:af:a0:39:fa:e8:07:0e:0e:58:fc:9b:11:
02:a6:a1:1a:0b:ad:f9:43:4c:ea:46:2e:5d:ab:94:
66:33:ca:ea:75:21:fc:38:5c:e3:49:61:64:3e:b1:
a4:7f:0b:41:57:f4:06:1a:de:89:a2:c5:03:92:01:
91:16:9a:e9:74:6f:b2:f4:eb:d1:fa:6f:a0:1b:ad:
a5:4b:d8:77:92:84:de:4a:a5:17:d1:59:3d:9f:99:
d0:2b:37:a5:d8:42:60:77:f4:31:7c:bc:d9:1e:6f:
ac:a6:92:56:66:1f:3e:68:9d:ac:bf:2e:d3:d3:bb:
b2:31:db:d3:48:1b:31:7e:ef:6a:61:de:3e:d8:c0:
f0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CA:AD:27:E1:F7:94:B4:CC:46:89:2F:63:4F:38:55:90:E9:D5:37
X509v3 Authority Key Identifier:
keyid:06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:50:60:f9:30:d9:1a:22:b4:39:b9:99:4a:0e:61:db:48:da:
5f:31:19:d5:c2:2c:35:6d:46:9f:65:c5:da:24:61:9f:0c:1d:
37:b3:85:18:37:9c:84:b5:8b:4e:48:f1:32:b5:60:41:24:3e:
89:53:5a:cb:88:45:25:a8:1d:bf:e0:b5:48:fc:8a:08:30:8b:
2c:5b:25:37:bf:5a:0f:c2:d3:a9:77:8d:9d:26:ec:2a:0b:6e:
17:84:12:cb:77:58:f7:b8:6c:b6:5d:c0:54:60:0f:f7:45:5a:
53:38:a6:71:18:ef:45:ad:cc:62:01:02:94:c6:ff:cf:c0:8f:
d7:a7:4f:21:65:b4:ff:bf:ca:06:9d:39:c0:99:f1:68:59:a6:
96:03:9b:ec:17:3e:1c:a7:68:0a:b9:b0:da:fb:fc:8a:5d:e7:
7b:b2:eb:32:8e:ab:a2:92:52:bf:a1:58:fc:52:cf:9c:00:d0:
2b:a5:9f:b9:71:d3:73:c8:bd:db:3b:06:2d:d6:e0:1d:c2:47:
cc:d9:8e:fd:34:c9:9f:50:cf:2e:7a:3a:55:1a:ca:0c:84:7a:
8a:f6:21:0c:c6:16:69:37:ba:a1:99:b3:f2:cd:14:3f:f2:7b:
dd:90:84:8e:67:8c:d8:be:53:b6:08:e0:44:dd:e9:10:5c:aa:
41:e9:71:28
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzdGQzkxMTAvBgNVBAUTKDA2QkQ0NDE1NDc5RDJDNzUwODM3QzVDOTQzMzYxM0JC
MjU4OEFFQjgwHhcNMjUxMTA1MDcwMjU5WhcNMjUxMTEyMDcwMjU5WjAYMRYwFAYD
VQQDEw02OTBhZjZhMy0xMTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxisrWX72bzU9rDAbu0pUAuf9aFBTRKgtfCc+bnW9TC+/Xzee2zGH/NPNdcQ3
Uvd1op0f2t816KlxTquy80dhJbL5PPm7bH/4yf64ksyXjoIci1IkdN5Hu6PU0Ua1
F6jd9MpAdgILshQorb51gGJIEkvPQv/kJFVcN2yvoDn66AcODlj8mxECpqEaC635
Q0zqRi5dq5RmM8rqdSH8OFzjSWFkPrGkfwtBV/QGGt6JosUDkgGRFprpdG+y9OvR
+m+gG62lS9h3koTeSqUX0Vk9n5nQKzel2EJgd/QxfLzZHm+sppJWZh8+aJ2svy7T
07uyMdvTSBsxfu9qYd4+2MDw5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjKrSfh
95S0zEaJL2NPOFWQ6dU3MB8GA1UdIwQYMBaAFAa9RBVHnSx1CDfFyUM2E7sliK64
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0ZDOS9GM0NCRjU1MDA3
NTExMUYwODE4QTU0MzNDNEY5QUUwMi9CcjFFRlVlZExIVUlOOFhKUXpZVHV5V0ly
cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JyMUVGVWVkTEhVSU44WEpRellUdXlXSXJyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
N0ZDOS9GM0NCRjU1MDA3NTExMUYwODE4QTU0MzNDNEY5QUUwMi9CcjFFRlVlZExI
VUlOOFhKUXpZVHV5V0lycmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAsUGD5MNkaIrQ5uZlKDmHbSNpfMRnVwiw1bUafZcXaJGGfDB03s4UY
N5yEtYtOSPEytWBBJD6JU1rLiEUlqB2/4LVI/IoIMIssWyU3v1oPwtOpd42dJuwq
C24XhBLLd1j3uGy2XcBUYA/3RVpTOKZxGO9FrcxiAQKUxv/PwI/Xp08hZbT/v8oG
nTnAmfFoWaaWA5vsFz4cp2gKubDa+/yKXed7susyjquiklK/oVj8Us+cANArpZ+5
cdNzyL3bOwYt1uAdwkfM2Y79NMmfUM8uejpVGsoMhHqK9iEMxhZpN7qhmbPyzRQ/
8nvdkISOZ4zYvlO2COBE3ekQXKpB6XEo
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:57:39 2025 by rpki-client