
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft
File: V88585q2G1OO6nyy1Wo0vle4mvs.mft (raw, json)
Hash identifier: hjY5o27bDSc36yuJJjJGX2mOteRWkYXd3Z0PxQNq/Xk=
Subject key identifier: C1:D9:EC:FA:3C:EA:B0:EF:D0:55:9D:C1:84:B9:51:7E:8B:F3:87:D6
Authority key identifier: 57:CF:39:F3:9A:B6:1B:53:8E:EA:7C:B2:D5:6A:34:BE:57:B8:9A:FB
Certificate issuer: /CN=A917D4C4/serialNumber=57CF39F39AB61B538EEA7CB2D56A34BE57B89AFB
Certificate serial: 06AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft
Manifest number: 06A6
Signing time: Tue 04 Nov 2025 14:51:08 +0000
Manifest this update: Tue 04 Nov 2025 14:51:07 +0000
Manifest next update: Tue 11 Nov 2025 14:51:07 +0000
Files and hashes: 1: V88585q2G1OO6nyy1Wo0vle4mvs.crl (hash: lMZ70MNnbnszcoa5uxfEvntkEJjoFh116w83oO7W8VU=)
2: 6DB6146E0E2F11EDB4659653C4F9AE02.roa (hash: jVO5wSX7TJcWYZD+VE2YuDs8rKtO7MY++7pypycZONE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.crl
rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:51:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1707 (0x6ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D4C4, serialNumber=57CF39F39AB61B538EEA7CB2D56A34BE57B89AFB
Validity
Not Before: Nov 4 14:51:07 2025 GMT
Not After : Nov 11 14:51:07 2025 GMT
Subject: CN=690a12db-077e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:84:f7:3a:25:42:69:04:4f:80:45:ef:3d:a1:
ba:b4:18:39:cb:a4:06:f2:60:e1:0b:5e:78:b8:e6:
a4:b9:6c:36:ba:20:00:40:d8:03:9f:5e:25:c6:54:
9f:7a:4c:e9:28:98:9f:39:7b:30:be:9f:40:c7:60:
a4:3a:95:d5:d8:42:73:e4:f2:43:97:76:55:3c:44:
76:8f:9b:66:95:76:6f:5c:a9:b0:01:e4:0b:fc:94:
1d:bb:7c:2b:ff:b4:f7:9b:f6:c5:8d:39:69:85:df:
92:66:1f:e1:d1:94:c3:be:b2:d9:00:b9:b3:98:c3:
51:a4:43:cf:29:e3:79:7d:32:fe:55:f1:77:3a:e6:
fa:e0:15:0e:09:9a:d1:96:1e:84:54:f0:48:63:9e:
9d:eb:dc:5d:29:4c:87:e5:04:a5:61:8c:39:f4:f7:
b4:e8:7e:2a:57:70:d1:39:c6:04:d1:0a:04:46:a8:
38:41:3a:7f:5b:38:96:7c:88:75:c9:9c:5f:df:33:
ba:5d:fb:4c:bc:a2:48:cf:32:fd:11:ad:1d:ca:3a:
ef:7b:6e:0c:91:7b:5f:f3:f6:3c:89:f3:b7:68:b8:
0f:54:32:a6:42:b4:da:ce:3a:b0:37:07:c1:94:de:
04:bf:01:e4:b6:02:68:42:55:ae:81:2d:fc:4e:09:
72:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D9:EC:FA:3C:EA:B0:EF:D0:55:9D:C1:84:B9:51:7E:8B:F3:87:D6
X509v3 Authority Key Identifier:
keyid:57:CF:39:F3:9A:B6:1B:53:8E:EA:7C:B2:D5:6A:34:BE:57:B8:9A:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:0e:6e:52:f9:23:2b:ca:22:9c:f5:56:79:dc:af:6a:dd:68:
c9:54:d2:78:ed:1a:11:b2:b7:85:88:55:2f:2f:fc:25:d1:e1:
70:14:78:88:3f:9e:6f:4f:68:17:b2:5e:a2:17:15:87:d8:ea:
9e:73:0d:75:f4:26:30:1c:aa:85:d5:c7:79:14:fb:13:87:dd:
6d:37:f0:6c:08:7c:fd:7a:02:c1:c6:8a:ac:87:99:61:4c:95:
9d:51:04:63:f2:51:0c:2d:6e:8b:96:fe:c8:b8:20:61:9b:a9:
7b:ff:8f:29:fd:55:55:f1:7a:71:19:39:d9:0e:6d:ba:40:7d:
98:ea:47:d5:46:83:a2:1b:94:42:9e:3a:88:cc:1c:82:71:ff:
94:58:ef:a3:c4:e6:f0:e2:99:7a:4c:07:b1:97:61:e4:eb:6b:
ea:a2:05:cd:77:7a:73:3f:77:f2:8e:10:1b:25:9e:08:b6:ef:
bb:59:c1:d2:7e:ce:f8:04:05:07:4a:50:d3:5d:a1:f6:14:40:
27:ff:ef:3c:4d:74:b4:10:28:1d:b6:cb:2b:17:31:b7:fa:ac:
68:0c:46:95:54:4e:b8:96:ba:c8:37:cb:fa:fc:2c:0e:0a:d5:
bb:27:27:9f:9f:23:5c:25:70:b7:76:3c:bf:ea:09:7d:da:20:
2c:6f:64:43
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0Q0QzQxMTAvBgNVBAUTKDU3Q0YzOUYzOUFCNjFCNTM4RUVBN0NCMkQ1NkEzNEJF
NTdCODlBRkIwHhcNMjUxMTA0MTQ1MTA3WhcNMjUxMTExMTQ1MTA3WjAYMRYwFAYD
VQQDEw02OTBhMTJkYi0wNzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0YT3OiVCaQRPgEXvPaG6tBg5y6QG8mDhC154uOakuWw2uiAAQNgDn14lxlSf
ekzpKJifOXswvp9Ax2CkOpXV2EJz5PJDl3ZVPER2j5tmlXZvXKmwAeQL/JQdu3wr
/7T3m/bFjTlphd+SZh/h0ZTDvrLZALmzmMNRpEPPKeN5fTL+VfF3Oub64BUOCZrR
lh6EVPBIY56d69xdKUyH5QSlYYw59Pe06H4qV3DROcYE0QoERqg4QTp/WziWfIh1
yZxf3zO6XftMvKJIzzL9Ea0dyjrve24MkXtf8/Y8ifO3aLgPVDKmQrTazjqwNwfB
lN4EvwHktgJoQlWugS38TglyTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHZ7Po8
6rDv0FWdwYS5UX6L84fWMB8GA1UdIwQYMBaAFFfPOfOathtTjup8stVqNL5XuJr7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDRDNC8zQTA3RTBCQThE
N0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9WODg1ODVxMkcxT082bnl5MVdvMHZsZTRt
dnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1Y4ODU4NXEyRzFPTzZueXkxV28wdmxlNG12cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RDRDNC8zQTA3RTBCQThEN0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9WODg1ODVxMkcx
T082bnl5MVdvMHZsZTRtdnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAFDm5S+SMryiKc9VZ53K9q3WjJVNJ47RoRsreFiFUvL/wl0eFwFHiI
P55vT2gXsl6iFxWH2Oqecw119CYwHKqF1cd5FPsTh91tN/BsCHz9egLBxoqsh5lh
TJWdUQRj8lEMLW6Llv7IuCBhm6l7/48p/VVV8XpxGTnZDm26QH2Y6kfVRoOiG5RC
njqIzByCcf+UWO+jxObw4pl6TAexl2Hk62vqogXNd3pzP3fyjhAbJZ4Itu+7WcHS
fs74BAUHSlDTXaH2FEAn/+88TXS0ECgdtssrFzG3+qxoDEaVVE64lrrIN8v6/CwO
CtW7JyefnyNcJXC3djy/6gl92iAsb2RD
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:18:05 2025 by rpki-client