
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
File: lsYqB50ufY56mV0g9CKdgmk5jmk.mft (raw, json)
Hash identifier: KRk/SoX8UyRMBPwaWeC1IWXGEp/03rHSC0/AQ1+USyM=
Subject key identifier: 27:29:7B:4C:39:23:C4:3A:D3:4E:D7:14:17:19:F6:AC:03:E6:83:7C
Authority key identifier: 96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69
Certificate issuer: /CN=A9186F69/serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69
Certificate serial: 011C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
Manifest number: 0119
Signing time: Wed 05 Nov 2025 04:59:49 +0000
Manifest this update: Wed 05 Nov 2025 04:59:48 +0000
Manifest next update: Wed 12 Nov 2025 04:59:48 +0000
Files and hashes: 1: lsYqB50ufY56mV0g9CKdgmk5jmk.crl (hash: uDGcyJHY0nxZb4Val1tH8WnXl+51C9Z5ESlzjN7D2JE=)
2: B5C7CDFC112911EFBDE1BF3BC4F9AE02.roa (hash: oY5WSp4sZ7toMUqPDRkXBJjJe0s8xpTFO+pZJ7qlj14=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl
rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186F69, serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69
Validity
Not Before: Nov 5 04:59:48 2025 GMT
Not After : Nov 12 04:59:48 2025 GMT
Subject: CN=690ad9c5-7c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a4:ba:db:5e:ff:29:95:31:6d:2f:a8:fe:56:
9c:6d:bf:2c:9b:f1:be:db:2b:ff:50:7c:22:9b:fe:
04:4a:ac:56:64:53:50:5d:2d:53:4f:a4:a6:b5:13:
07:30:9f:a7:98:fb:2b:bf:31:de:91:ac:c8:83:ea:
9c:c1:77:df:f3:3e:17:f5:41:2d:7c:18:89:94:1e:
be:c0:04:7a:c0:64:99:d6:c5:78:f5:71:73:cb:fc:
e6:59:f8:a2:12:cc:49:a6:53:6a:1a:ee:ee:27:4a:
a5:19:4a:fb:ad:5f:8b:48:b6:40:11:b4:09:7f:7b:
b9:e4:e0:9c:2d:38:9a:88:38:c8:b0:6e:b8:73:7b:
fd:19:5c:b8:ac:d7:0f:e8:80:31:72:80:0e:9c:52:
30:d5:da:82:13:c1:87:3b:27:bf:2a:f2:20:7d:c5:
10:e6:41:b6:7f:57:58:de:09:a8:0d:32:b7:8f:8f:
e7:0c:81:c9:61:b3:f6:48:73:22:4a:8f:96:80:61:
e9:55:74:81:0d:7e:75:85:3f:6a:8e:13:4b:6e:da:
36:2d:6d:22:06:bc:b0:57:4e:7d:35:3b:1e:b3:0c:
c2:e5:ab:e6:9b:8d:5f:d2:93:39:96:eb:3a:f6:a8:
89:ee:a6:42:5b:ee:34:ae:63:e9:01:25:7a:f8:f5:
5f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:29:7B:4C:39:23:C4:3A:D3:4E:D7:14:17:19:F6:AC:03:E6:83:7C
X509v3 Authority Key Identifier:
keyid:96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:74:75:29:89:9d:00:60:cc:c0:9b:83:68:df:f2:33:22:79:
89:81:4e:36:b3:de:c7:f8:64:e9:b3:ca:f3:e1:d8:85:69:09:
e7:32:4e:c2:25:3e:17:d8:09:72:08:11:f6:25:17:c5:70:c4:
2f:00:f0:b0:23:6e:e9:d6:d5:62:6d:eb:b8:b4:6e:e4:e8:09:
a3:3d:3b:44:76:9d:b1:c9:fe:6c:42:5b:92:5e:61:54:2e:cd:
a4:7c:98:f7:50:5b:0c:aa:5f:0f:e6:3b:76:16:e7:e2:ec:b8:
15:67:5f:c2:1b:42:55:a7:cf:6a:a3:64:0b:6a:4c:11:9b:b5:
0e:37:d6:f1:2c:3e:f9:dc:2a:54:f2:b7:e7:1c:94:84:41:90:
04:cf:fc:7d:e3:da:47:1e:4f:d9:a6:43:1a:7b:1d:33:6f:b6:
71:27:9c:c4:86:76:f2:6a:22:23:91:99:e9:e8:94:be:10:f5:
49:1a:7b:df:eb:c2:6e:f9:5d:41:ed:ad:ff:e1:ab:f9:12:00:
32:6a:32:5d:b7:72:21:1c:7a:0d:8c:16:c6:4e:1f:ba:b3:fb:
97:4a:03:aa:6e:8a:f4:00:aa:27:b3:7f:40:bb:eb:df:3d:11:
dc:5c:4a:44:8a:af:35:01:f5:f0:5e:d6:38:c1:e3:ea:fa:86:
23:1d:4f:1c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZGNjkxMTAvBgNVBAUTKDk2QzYyQTA3OUQyRTdEOEU3QTk5NUQyMEY0MjI5RDgy
NjkzOThFNjkwHhcNMjUxMTA1MDQ1OTQ4WhcNMjUxMTEyMDQ1OTQ4WjAYMRYwFAYD
VQQDEw02OTBhZDljNS03YzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4aS6217/KZUxbS+o/lacbb8sm/G+2yv/UHwim/4ESqxWZFNQXS1TT6SmtRMH
MJ+nmPsrvzHekazIg+qcwXff8z4X9UEtfBiJlB6+wAR6wGSZ1sV49XFzy/zmWfii
EsxJplNqGu7uJ0qlGUr7rV+LSLZAEbQJf3u55OCcLTiaiDjIsG64c3v9GVy4rNcP
6IAxcoAOnFIw1dqCE8GHOye/KvIgfcUQ5kG2f1dY3gmoDTK3j4/nDIHJYbP2SHMi
So+WgGHpVXSBDX51hT9qjhNLbto2LW0iBrywV059NTseswzC5avmm41f0pM5lus6
9qiJ7qZCW+40rmPpASV6+PVf2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcpe0w5
I8Q6007XFBcZ9qwD5oN8MB8GA1UdIwQYMBaAFJbGKgedLn2OepldIPQinYJpOY5p
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkY2OS82NkEwQURBMjEx
MjkxMUVGODA2MzVCMjdDNEY5QUUwMi9sc1lxQjUwdWZZNTZtVjBnOUNLZGdtazVq
bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xzWXFCNTB1Zlk1Nm1WMGc5Q0tkZ21rNWptay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NkY2OS82NkEwQURBMjExMjkxMUVGODA2MzVCMjdDNEY5QUUwMi9sc1lxQjUwdWZZ
NTZtVjBnOUNLZGdtazVqbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB2dHUpiZ0AYMzAm4No3/IzInmJgU42s97H+GTps8rz4diFaQnnMk7C
JT4X2AlyCBH2JRfFcMQvAPCwI27p1tVibeu4tG7k6AmjPTtEdp2xyf5sQluSXmFU
Ls2kfJj3UFsMql8P5jt2Fufi7LgVZ1/CG0JVp89qo2QLakwRm7UON9bxLD753CpU
8rfnHJSEQZAEz/x949pHHk/ZpkMaex0zb7ZxJ5zEhnbyaiIjkZnp6JS+EPVJGnvf
68Ju+V1B7a3/4av5EgAyajJdt3IhHHoNjBbGTh+6s/uXSgOqbor0AKons39Au+vf
PRHcXEpEiq81AfXwXtY4wePq+oYjHU8c
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:37:15 2025 by rpki-client