
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
File: _uphQ5owmLhcyxg7WkGqEq9Fyh4.mft (raw, json)
Hash identifier: Rylxq2MvdTIzIXVQchFIPN90i3Rjkk3NAZVXASHCrvw=
Subject key identifier: 56:E2:2B:84:74:5B:D8:51:A8:6D:AF:00:53:76:B6:EA:AF:DA:98:0D
Authority key identifier: FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
Certificate issuer: /CN=A91A19C8/serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
Certificate serial: 081E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
Manifest number: 080E
Signing time: Tue 04 Nov 2025 21:04:09 +0000
Manifest this update: Tue 04 Nov 2025 21:04:09 +0000
Manifest next update: Tue 11 Nov 2025 21:04:09 +0000
Files and hashes: 1: _uphQ5owmLhcyxg7WkGqEq9Fyh4.crl (hash: 2TptpE+/5p7fOHizYBedEOehCQzSbJRnUV8FE1SD5FI=)
2: 12C3076850E111F09D297C74C4F9AE02.roa (hash: VPPWSocLnuSKtcVnd5S6tAbC+12jEdjVyuRLBXg6FF0=)
3: 2B219CDC1FE811EF96F54D5AC4F9AE02.roa (hash: Sj5dG6gkaXT4SUEh6ZNnO+di4MLVli4VB7cBIKCvXJs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl
rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:04:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2078 (0x81e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A19C8, serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
Validity
Not Before: Nov 4 21:04:09 2025 GMT
Not After : Nov 11 21:04:09 2025 GMT
Subject: CN=690a6a49-2f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3d:1f:6c:46:9b:92:fd:60:20:a8:41:69:a8:
23:9a:64:9e:fc:c5:11:8a:84:c6:cb:a8:4c:08:91:
a8:b2:b0:f0:cc:26:db:08:46:13:d3:46:86:84:6a:
2a:13:70:7c:8f:d4:66:94:66:6b:58:dc:01:91:51:
45:b8:2a:83:12:c6:a3:5a:47:5a:ed:e5:83:d3:8e:
16:64:65:75:30:e3:a4:b9:3a:56:4a:4a:66:ad:65:
05:0c:74:67:62:96:2d:8f:9d:8c:6b:13:3a:7e:46:
5c:48:d0:82:86:43:33:3b:4f:05:2b:2b:e4:f5:49:
4a:78:fe:67:82:fb:87:64:cf:99:09:c4:fe:32:00:
d5:01:4e:d5:64:d4:c1:d3:69:9c:3c:fe:37:a4:32:
3a:d9:92:6b:02:dc:16:ae:da:5f:57:59:04:0c:c9:
0f:f9:96:33:5c:db:36:d0:54:e7:5d:f6:fd:ac:33:
3f:d6:2b:8a:4d:3d:cc:3c:4b:5b:32:2a:82:8c:fb:
55:2e:57:d6:36:61:6b:41:5d:65:c3:a5:16:70:62:
d4:b0:eb:ac:27:8d:b2:72:16:df:ac:58:f0:db:b7:
46:0d:55:b2:17:5e:e3:11:06:62:90:b9:95:ce:a5:
ec:8a:90:e5:5a:79:bb:7f:94:e7:10:cf:29:e7:89:
c6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E2:2B:84:74:5B:D8:51:A8:6D:AF:00:53:76:B6:EA:AF:DA:98:0D
X509v3 Authority Key Identifier:
keyid:FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:cb:ae:4d:d9:68:d2:33:c9:d9:ed:32:29:43:d8:13:df:6b:
a3:a8:72:d8:12:29:98:07:31:3d:d6:1d:46:4d:e9:a6:d7:27:
41:6d:0e:c4:1d:ba:05:b5:e4:e6:ac:2b:b5:1e:2a:9a:f9:48:
e4:b8:4f:58:2a:9f:99:40:77:71:6a:15:8d:90:e9:9e:c0:6a:
e5:ed:69:2c:f8:95:5e:f1:20:e9:0b:09:09:c6:03:d2:66:de:
40:fc:4c:6b:99:a5:f8:aa:35:0a:c1:11:f2:74:7d:16:ea:61:
81:88:66:02:f0:06:73:7a:dc:bf:51:02:68:03:69:85:aa:02:
6f:63:90:f2:97:87:b4:ca:78:28:6b:ed:41:62:44:32:dc:d6:
71:66:75:0f:87:0d:2a:1d:3b:26:0c:bf:e4:7c:45:f3:e5:31:
bf:48:aa:56:79:42:29:a3:56:fb:71:3b:20:52:9d:fb:ae:b8:
e9:7a:b3:65:7c:59:d0:3c:b3:bb:a2:10:b3:d2:52:2a:f6:53:
0a:96:63:51:2f:ba:10:d8:02:58:cc:69:fa:28:29:52:b5:ad:
3f:e4:66:ae:d4:4f:bb:45:56:a5:c7:49:0e:fd:26:89:aa:01:
aa:6a:d7:1f:87:98:f0:9f:af:b1:6f:1e:1b:41:dd:64:d1:a3:
87:b4:a2:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE5QzgxMTAvBgNVBAUTKEZFRUE2MTQzOUEzMDk4Qjg1Q0NCMTgzQjVBNDFBQTEy
QUY0NUNBMUUwHhcNMjUxMTA0MjEwNDA5WhcNMjUxMTExMjEwNDA5WjAYMRYwFAYD
VQQDEw02OTBhNmE0OS0yZjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0D0fbEabkv1gIKhBaagjmmSe/MURioTGy6hMCJGosrDwzCbbCEYT00aGhGoq
E3B8j9RmlGZrWNwBkVFFuCqDEsajWkda7eWD044WZGV1MOOkuTpWSkpmrWUFDHRn
YpYtj52MaxM6fkZcSNCChkMzO08FKyvk9UlKeP5ngvuHZM+ZCcT+MgDVAU7VZNTB
02mcPP43pDI62ZJrAtwWrtpfV1kEDMkP+ZYzXNs20FTnXfb9rDM/1iuKTT3MPEtb
MiqCjPtVLlfWNmFrQV1lw6UWcGLUsOusJ42ychbfrFjw27dGDVWyF17jEQZikLmV
zqXsipDlWnm7f5TnEM8p54nGaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbiK4R0
W9hRqG2vAFN2tuqv2pgNMB8GA1UdIwQYMBaAFP7qYUOaMJi4XMsYO1pBqhKvRcoe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTlDOC9GNUE1RUVBQTAx
NDExMUVCQTMzRjhFMTFDNEY5QUUwMi9fdXBoUTVvd21MaGN5eGc3V2tHcUVxOUZ5
aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL191cGhRNW93bUxoY3l4ZzdXa0dxRXE5RnloNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTlDOC9GNUE1RUVBQTAxNDExMUVCQTMzRjhFMTFDNEY5QUUwMi9fdXBoUTVvd21M
aGN5eGc3V2tHcUVxOUZ5aDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAiy65N2WjSM8nZ7TIpQ9gT32ujqHLYEimYBzE91h1GTemm1ydBbQ7E
HboFteTmrCu1Hiqa+UjkuE9YKp+ZQHdxahWNkOmewGrl7Wks+JVe8SDpCwkJxgPS
Zt5A/ExrmaX4qjUKwRHydH0W6mGBiGYC8AZzety/UQJoA2mFqgJvY5Dyl4e0yngo
a+1BYkQy3NZxZnUPhw0qHTsmDL/kfEXz5TG/SKpWeUIpo1b7cTsgUp37rrjperNl
fFnQPLO7ohCz0lIq9lMKlmNRL7oQ2AJYzGn6KClSta0/5Gau1E+7RValx0kO/SaJ
qgGqatcfh5jwn6+xbx4bQd1k0aOHtKII
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:05:33 2025 by rpki-client