
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
File: gp8PQIhN2ZESEAWwfQmiy_-03sY.mft (raw, json)
Hash identifier: 6cweMpHhjXQmTFJ2mMqIfW97m0OPfvOKY+Qy6Avbe5Q=
Subject key identifier: F5:26:CA:8D:80:61:8E:2B:EB:C1:6C:4B:E8:59:AC:74:42:C4:51:87
Authority key identifier: 82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6
Certificate issuer: /CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
Certificate serial: 0C47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
Manifest number: 0C34
Signing time: Tue 04 Nov 2025 18:47:56 +0000
Manifest this update: Tue 04 Nov 2025 18:47:56 +0000
Manifest next update: Tue 11 Nov 2025 18:47:56 +0000
Files and hashes: 1: gp8PQIhN2ZESEAWwfQmiy_-03sY.crl (hash: amIoCiot4gVweLvKtQlSb/argj/8U5cv3PnNHVcYDyc=)
2: 46D7B1B468F911EFAB3D9424C4F9AE02.roa (hash: onDSKcNFc/pDMIziyGqjtuK2E8Imk/xI2T23hdeIbB0=)
3: 13DE95F668FA11EFAE700D5FC4F9AE02.roa (hash: CWmRoXyI8djvZbQWvBLpL+DLa+AiV1dhvDwiE3HLKt4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl
rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 18:47:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3143 (0xc47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A16CF, serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
Validity
Not Before: Nov 4 18:47:56 2025 GMT
Not After : Nov 11 18:47:56 2025 GMT
Subject: CN=690a4a5c-c29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:10:ec:3f:6e:d1:64:3c:ac:39:cb:1f:28:38:
57:95:ce:40:c6:59:ec:18:2c:b6:d8:87:2b:84:e1:
40:d8:eb:0d:76:80:ea:dd:3c:d9:28:f9:f8:05:c3:
ea:45:8c:04:fd:c8:29:e0:c3:62:f8:33:df:c8:dd:
8d:2e:3d:bc:6a:b5:90:1b:22:9f:41:d7:5e:d7:db:
41:d4:d6:a4:5f:ac:8b:73:77:32:37:2f:f5:33:f2:
ce:33:d8:ad:4a:42:f0:2d:dd:8f:cc:d4:6e:dd:72:
37:25:7d:14:70:8d:3d:41:9d:03:11:3e:fd:09:e4:
9f:b9:b1:92:a4:e8:60:ab:dd:40:53:80:d3:ad:3d:
fa:0b:83:09:66:60:7c:49:d1:73:e6:b0:ce:19:2b:
b6:e8:b1:b5:e5:f9:fe:9b:2c:48:ef:4f:6e:69:6c:
9d:6f:be:4c:7c:4b:ee:80:81:98:8b:c8:9b:d6:93:
31:12:6e:1e:f2:7d:37:51:6d:58:7f:2f:85:fc:ba:
7e:83:e5:98:da:43:95:b6:53:12:28:4b:c6:c5:d8:
54:51:88:d7:ac:94:2a:85:15:35:44:b2:b1:a8:78:
69:5b:b0:6a:0f:2c:a9:ab:64:65:58:9c:54:9f:95:
80:5c:1c:c2:1a:31:51:75:83:c5:6b:19:3c:2e:75:
47:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:26:CA:8D:80:61:8E:2B:EB:C1:6C:4B:E8:59:AC:74:42:C4:51:87
X509v3 Authority Key Identifier:
keyid:82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9e:69:9f:2c:05:49:47:10:74:13:d7:fa:a9:bb:4b:d6:97:
05:fa:5e:12:f1:57:13:c7:d0:4f:fe:2d:2a:91:93:ec:e9:6a:
f3:ff:82:38:e0:6c:d2:4a:5f:2d:0b:6a:e2:46:77:16:58:ff:
d2:d7:be:41:3e:90:bf:f7:ab:9c:97:aa:47:c5:a0:70:77:21:
f4:06:48:7c:89:5d:e3:ea:70:b6:41:cc:63:39:94:08:80:2d:
39:16:61:5b:3b:30:6f:67:7a:f3:f1:a8:70:2b:4c:d4:47:1a:
99:b2:4d:6a:d7:eb:9e:4e:ec:12:0a:6e:e5:c4:cd:eb:d8:4e:
df:56:27:e4:1c:ef:77:d7:c6:25:2c:49:12:48:7a:6f:52:ea:
4e:b0:bb:d0:5c:42:3c:f9:6d:c9:f2:70:fa:f4:8c:1e:06:12:
8e:62:a4:d5:cb:7d:15:ad:00:6d:62:c1:4a:f8:fd:65:a4:30:
bd:b8:ab:d1:af:e4:ef:05:0c:54:43:f9:39:3f:d7:b4:ae:f5:
44:05:c5:ab:bd:83:e5:b3:34:5c:c4:f8:a0:4d:f5:69:e4:2f:
2f:6a:f7:2b:e8:5f:c3:61:6e:6e:bc:0c:91:ba:f9:71:a1:4f:
05:13:d1:74:14:c4:6e:73:ce:16:73:21:e0:b0:4f:a5:ee:a3:
12:18:9a:ad
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE2Q0YxMTAvBgNVBAUTKDgyOUYwRjQwODg0REQ5OTExMjEwMDVCMDdEMDlBMkNC
RkZCNERFQzYwHhcNMjUxMTA0MTg0NzU2WhcNMjUxMTExMTg0NzU2WjAYMRYwFAYD
VQQDEw02OTBhNGE1Yy1jMjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA/BDsP27RZDysOcsfKDhXlc5AxlnsGCy22IcrhOFA2OsNdoDq3TzZKPn4BcPq
RYwE/cgp4MNi+DPfyN2NLj28arWQGyKfQdde19tB1NakX6yLc3cyNy/1M/LOM9it
SkLwLd2PzNRu3XI3JX0UcI09QZ0DET79CeSfubGSpOhgq91AU4DTrT36C4MJZmB8
SdFz5rDOGSu26LG15fn+myxI709uaWydb75MfEvugIGYi8ib1pMxEm4e8n03UW1Y
fy+F/Lp+g+WY2kOVtlMSKEvGxdhUUYjXrJQqhRU1RLKxqHhpW7BqDyypq2RlWJxU
n5WAXBzCGjFRdYPFaxk8LnVHnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUmyo2A
YY4r68FsS+hZrHRCxFGHMB8GA1UdIwQYMBaAFIKfD0CITdmREhAFsH0Josv/tN7G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTZDRi8yQ0FENTA4ODE5
QTIxMUVBQUU4MTFDNzFDNEY5QUUwMi9ncDhQUUloTjJaRVNFQVd3ZlFtaXlfLTAz
c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dwOFBRSWhOMlpFU0VBV3dmUW1peV8tMDNzWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTZDRi8yQ0FENTA4ODE5QTIxMUVBQUU4MTFDNzFDNEY5QUUwMi9ncDhQUUloTjJa
RVNFQVd3ZlFtaXlfLTAzc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBenmmfLAVJRxB0E9f6qbtL1pcF+l4S8VcTx9BP/i0qkZPs6Wrz/4I4
4GzSSl8tC2riRncWWP/S175BPpC/96ucl6pHxaBwdyH0Bkh8iV3j6nC2QcxjOZQI
gC05FmFbOzBvZ3rz8ahwK0zURxqZsk1q1+ueTuwSCm7lxM3r2E7fVifkHO9318Yl
LEkSSHpvUupOsLvQXEI8+W3J8nD69IweBhKOYqTVy30VrQBtYsFK+P1lpDC9uKvR
r+TvBQxUQ/k5P9e0rvVEBcWrvYPlszRcxPigTfVp5C8vavcr6F/DYW5uvAyRuvlx
oU8FE9F0FMRuc84WcyHgsE+l7qMSGJqt
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:18:26 2025 by rpki-client