
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft
File: Iq_UzdnE9MODdis-k-7PGub_nRY.mft (raw, json)
Hash identifier: +rQ5YbVpcmns14uOUj6Iz9WSaINnwDvR/bO81kW0cBo=
Subject key identifier: A6:91:3D:C6:75:AD:DD:20:B6:F4:87:42:DA:4C:DF:4F:43:1F:43:90
Authority key identifier: 22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16
Certificate issuer: /CN=A917DFDA/serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16
Certificate serial: 0112
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft
Manifest number: 010D
Signing time: Mon 03 Nov 2025 04:58:42 +0000
Manifest this update: Mon 03 Nov 2025 04:58:42 +0000
Manifest next update: Mon 10 Nov 2025 04:58:42 +0000
Files and hashes: 1: Iq_UzdnE9MODdis-k-7PGub_nRY.crl (hash: Y7W0aA1q2oTULaHM3sjY0TeSrEpjeZGqZnqQj3QIqlw=)
2: 493F98CE230111EFB4355F5FC4F9AE02.roa (hash: 2Ea6pfyMHuu7UJGQSJfsHF3FX8pvDKiDVHdhUSz8QqA=)
3: 1E85ABA6231E11EFA893585AC4F9AE02.roa (hash: fSTt/OP/CCIEWdda0wFEWb+9ChFos6G9oFISz4g6itU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl
rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 04:58:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DFDA, serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16
Validity
Not Before: Nov 3 04:58:42 2025 GMT
Not After : Nov 10 04:58:42 2025 GMT
Subject: CN=69083682-cabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a8:45:0c:32:3c:12:00:2c:21:95:2e:7e:5b:
57:78:a0:1f:1f:ee:36:29:32:f5:30:6d:98:5f:6d:
45:99:91:e2:46:69:2d:95:34:32:fa:6e:f4:1a:e3:
ad:e7:a9:bc:d6:09:02:42:1c:84:8b:a2:e4:dd:80:
b3:87:a7:05:a6:3e:9d:a1:f3:d5:77:a3:b1:68:a2:
6d:cd:65:72:95:0a:84:52:a6:7e:ba:e2:c6:37:85:
c9:ed:1b:8f:b1:8a:75:53:52:2d:90:f8:b7:43:c1:
69:3e:76:1c:03:d1:72:b4:85:35:bf:65:c7:47:cb:
fb:7e:55:ab:20:35:4e:18:ad:fe:39:57:f6:82:b1:
56:74:10:fe:bd:b9:70:a5:cd:21:90:1c:67:75:d2:
1b:3e:87:45:e3:9b:aa:ec:9c:bb:f8:7a:cc:e3:f6:
ba:05:14:f7:4d:2a:be:35:e0:1f:9b:a5:b3:aa:cf:
c9:8a:52:93:f4:26:ec:2f:c6:79:75:f1:c6:3e:9a:
e6:30:35:70:0b:89:05:10:2a:8e:97:cd:69:3a:0c:
ac:02:be:95:89:cc:f6:4e:9e:1c:39:d4:a4:b8:75:
4d:e3:e5:e2:96:5a:03:05:4e:45:34:b2:be:ba:dc:
4a:45:44:da:f6:57:4e:d4:bc:59:e2:54:34:8d:2f:
53:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:91:3D:C6:75:AD:DD:20:B6:F4:87:42:DA:4C:DF:4F:43:1F:43:90
X509v3 Authority Key Identifier:
keyid:22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:c7:0f:b1:a8:74:ca:fb:34:a0:03:16:9a:91:a5:83:d7:f3:
5d:da:33:89:d4:9f:92:ab:ef:76:e2:46:73:55:b2:fe:41:17:
43:2a:08:84:fd:40:9f:42:5c:d6:0e:a0:6f:12:4b:5c:23:2b:
1e:16:7c:c5:e7:01:85:76:cd:aa:b2:a0:bb:4f:a7:52:ab:3c:
ca:87:1c:f9:ea:1d:22:f3:a8:e6:2e:b4:ae:a6:51:42:a2:69:
f1:7c:2c:f0:56:cb:ce:49:03:bc:00:96:c4:ba:ed:dd:22:a4:
77:c1:3c:2f:0a:46:ba:cf:01:36:e4:ba:85:d7:d6:0d:a3:d9:
ff:85:80:28:75:18:b6:c5:a2:d6:df:b8:58:2d:f2:83:1c:86:
46:21:d9:a4:27:be:77:9b:db:e5:2a:70:4e:a7:ab:63:df:1b:
96:e1:44:2f:8e:8c:05:0c:c7:54:2f:78:f4:54:00:4c:b6:5c:
07:59:26:5e:ae:97:b3:ce:2d:f1:c1:5b:2f:9d:13:40:75:4e:
5a:19:45:4f:16:b4:62:32:21:d9:1f:fc:c1:f9:09:5c:ba:ad:
bc:fa:25:aa:d3:0c:6f:ad:a1:92:d1:05:70:7e:e2:73:92:1d:
67:12:b6:fa:56:bb:c4:1e:1f:d3:2e:05:49:f8:90:a2:bb:1f:
5a:0f:43:51
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0RGREExMTAvBgNVBAUTKDIyQUZENENERDlDNEY0QzM4Mzc2MkIzRTkzRUVDRjFB
RTZGRjlEMTYwHhcNMjUxMTAzMDQ1ODQyWhcNMjUxMTEwMDQ1ODQyWjAYMRYwFAYD
VQQDEw02OTA4MzY4Mi1jYWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyKhFDDI8EgAsIZUufltXeKAfH+42KTL1MG2YX21FmZHiRmktlTQy+m70GuOt
56m81gkCQhyEi6Lk3YCzh6cFpj6dofPVd6OxaKJtzWVylQqEUqZ+uuLGN4XJ7RuP
sYp1U1ItkPi3Q8FpPnYcA9FytIU1v2XHR8v7flWrIDVOGK3+OVf2grFWdBD+vblw
pc0hkBxnddIbPodF45uq7Jy7+HrM4/a6BRT3TSq+NeAfm6Wzqs/JilKT9CbsL8Z5
dfHGPprmMDVwC4kFECqOl81pOgysAr6Vicz2Tp4cOdSkuHVN4+XilloDBU5FNLK+
utxKRUTa9ldO1LxZ4lQ0jS9TgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKaRPcZ1
rd0gtvSHQtpM309DH0OQMB8GA1UdIwQYMBaAFCKv1M3ZxPTDg3YrPpPuzxrm/50W
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REZEQS9BRjJENTBFNjIz
MDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlNT0RkaXMtay03UEd1Yl9u
UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lxX1V6ZG5FOU1PRGRpcy1rLTdQR3ViX25SWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
REZEQS9BRjJENTBFNjIzMDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlN
T0RkaXMtay03UEd1Yl9uUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBjxw+xqHTK+zSgAxaakaWD1/Nd2jOJ1J+Sq+924kZzVbL+QRdDKgiE
/UCfQlzWDqBvEktcIyseFnzF5wGFds2qsqC7T6dSqzzKhxz56h0i86jmLrSuplFC
omnxfCzwVsvOSQO8AJbEuu3dIqR3wTwvCka6zwE25LqF19YNo9n/hYAodRi2xaLW
37hYLfKDHIZGIdmkJ753m9vlKnBOp6tj3xuW4UQvjowFDMdUL3j0VABMtlwHWSZe
rpezzi3xwVsvnRNAdU5aGUVPFrRiMiHZH/zB+Qlcuq28+iWq0wxvraGS0QVwfuJz
kh1nErb6VrvEHh/TLgVJ+JCiux9aD0NR
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:48:55 2025 by rpki-client