
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft
File: TR4XV9LTAT5AudfK9e_JxHs3KwM.mft (raw, json)
Hash identifier: mQQ10XPa7sk8lzagChIa4X9If4UjQ4TRg5HeZSeeOfo=
Subject key identifier: 62:EE:A8:7F:D1:61:06:BB:30:84:A3:02:76:E4:2C:91:4E:A8:A2:29
Authority key identifier: 4D:1E:17:57:D2:D3:01:3E:40:B9:D7:CA:F5:EF:C9:C4:7B:37:2B:03
Certificate issuer: /CN=A91B5CEF/serialNumber=4D1E1757D2D3013E40B9D7CAF5EFC9C47B372B03
Certificate serial: 0324
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft
Manifest number: 0324
Signing time: Wed 05 Nov 2025 01:09:47 +0000
Manifest this update: Wed 05 Nov 2025 01:09:46 +0000
Manifest next update: Wed 12 Nov 2025 01:09:46 +0000
Files and hashes: 1: TR4XV9LTAT5AudfK9e_JxHs3KwM.crl (hash: yT0fIfn3q4HEFVyoRBBQjQgrFP74JUlAr5fDYLYrt/E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.crl
rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:09:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 804 (0x324)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5CEF, serialNumber=4D1E1757D2D3013E40B9D7CAF5EFC9C47B372B03
Validity
Not Before: Nov 5 01:09:46 2025 GMT
Not After : Nov 12 01:09:46 2025 GMT
Subject: CN=690aa3db-701f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:21:19:51:7c:2d:98:9c:20:23:0c:b0:b6:7b:
07:9a:c2:97:ef:3a:0d:c5:02:dd:bc:02:e4:1f:68:
02:94:cb:bf:02:05:d0:98:2c:69:83:ea:e8:57:ca:
50:59:7e:88:7a:c7:74:99:25:8f:94:1a:05:1e:28:
be:57:be:d7:13:5f:6f:da:dd:85:28:09:6b:85:ba:
60:3d:3d:24:00:1e:08:99:a1:00:86:03:93:52:52:
15:13:ba:21:db:a0:21:78:84:93:f3:09:b4:4f:d6:
2e:07:c5:12:5d:60:76:c1:22:98:a9:bf:06:4f:76:
b2:1a:0b:81:e5:bb:22:8b:b7:d9:9c:d5:c2:c2:f8:
51:19:96:84:b2:41:46:e4:d8:78:87:d3:7a:49:44:
22:fa:d2:20:c0:f0:61:2d:ea:d4:06:6b:ee:de:39:
f9:12:e3:de:c5:c8:3e:1e:de:5b:d2:fd:ad:e2:26:
db:4f:cb:22:8d:46:ed:a6:8d:12:ed:2d:46:67:77:
aa:36:fc:93:05:22:ed:ad:d3:4f:6c:0b:38:c9:05:
bd:45:9e:d2:0b:61:90:05:6e:7f:38:25:82:0a:d2:
c2:d7:f4:c6:51:47:5e:c6:50:cc:bb:36:7c:76:8e:
e9:78:3a:98:d4:5c:e0:ab:0a:e4:dc:7a:cd:58:9c:
a3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EE:A8:7F:D1:61:06:BB:30:84:A3:02:76:E4:2C:91:4E:A8:A2:29
X509v3 Authority Key Identifier:
keyid:4D:1E:17:57:D2:D3:01:3E:40:B9:D7:CA:F5:EF:C9:C4:7B:37:2B:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:1f:45:6c:80:4d:94:77:c7:63:09:0b:32:35:1a:ba:83:7a:
d1:8e:d9:d0:c4:10:3e:e9:3f:5f:01:b6:4f:57:51:95:f2:1c:
26:b3:27:56:67:4c:ec:70:2a:b2:c2:2b:44:60:d3:19:b6:e1:
ae:41:42:6a:7d:43:99:c2:fe:d7:71:b9:63:b4:52:fa:c9:be:
50:0b:45:e2:64:47:ff:2a:57:48:8d:89:e8:35:80:d9:3d:82:
e0:0c:46:86:a7:38:b3:06:a9:10:10:2b:91:a7:da:ea:82:21:
7d:94:7a:39:43:57:17:9c:21:f2:9f:4f:0f:05:93:b5:ea:4a:
3a:f9:5c:15:84:54:93:9c:ab:0b:a3:a2:53:61:59:c1:e6:c1:
44:d3:af:0e:be:f8:f3:e6:94:8a:63:ff:fa:75:08:2e:f0:09:
02:a9:f6:ec:9a:85:4f:95:a9:44:f8:f2:f0:20:dd:fe:55:84:
42:9a:b3:e4:65:af:07:5a:f7:d1:c9:e8:3e:5a:c1:57:98:f0:
4e:86:bd:46:e7:f1:20:a9:9e:33:30:7d:7d:5d:5c:50:2f:eb:
0e:06:5a:57:30:55:a6:2b:20:ec:04:cc:5d:6f:05:21:7f:49:
a3:a6:6f:16:56:05:fb:ff:4f:c1:9e:f0:44:43:2a:f5:8d:81:
eb:df:79:e2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVDRUYxMTAvBgNVBAUTKDREMUUxNzU3RDJEMzAxM0U0MEI5RDdDQUY1RUZDOUM0
N0IzNzJCMDMwHhcNMjUxMTA1MDEwOTQ2WhcNMjUxMTEyMDEwOTQ2WjAYMRYwFAYD
VQQDEw02OTBhYTNkYi03MDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyCEZUXwtmJwgIwywtnsHmsKX7zoNxQLdvALkH2gClMu/AgXQmCxpg+roV8pQ
WX6Iesd0mSWPlBoFHii+V77XE19v2t2FKAlrhbpgPT0kAB4ImaEAhgOTUlIVE7oh
26AheIST8wm0T9YuB8USXWB2wSKYqb8GT3ayGguB5bsii7fZnNXCwvhRGZaEskFG
5Nh4h9N6SUQi+tIgwPBhLerUBmvu3jn5EuPexcg+Ht5b0v2t4ibbT8sijUbtpo0S
7S1GZ3eqNvyTBSLtrdNPbAs4yQW9RZ7SC2GQBW5/OCWCCtLC1/TGUUdexlDMuzZ8
do7peDqY1Fzgqwrk3HrNWJyjKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLuqH/R
YQa7MISjAnbkLJFOqKIpMB8GA1UdIwQYMBaAFE0eF1fS0wE+QLnXyvXvycR7NysD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNFRi85Q0EzRjU0RUU3
QTUxMUVDQTE4OEJFMTJDNEY5QUUwMi9UUjRYVjlMVEFUNUF1ZGZLOWVfSnhIczNL
d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RSNFhWOUxUQVQ1QXVkZks5ZV9KeEhzM0t3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NUNFRi85Q0EzRjU0RUU3QTUxMUVDQTE4OEJFMTJDNEY5QUUwMi9UUjRYVjlMVEFU
NUF1ZGZLOWVfSnhIczNLd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBFH0VsgE2Ud8djCQsyNRq6g3rRjtnQxBA+6T9fAbZPV1GV8hwmsydW
Z0zscCqywitEYNMZtuGuQUJqfUOZwv7XcbljtFL6yb5QC0XiZEf/KldIjYnoNYDZ
PYLgDEaGpzizBqkQECuRp9rqgiF9lHo5Q1cXnCHyn08PBZO16ko6+VwVhFSTnKsL
o6JTYVnB5sFE068Ovvjz5pSKY//6dQgu8AkCqfbsmoVPlalE+PLwIN3+VYRCmrPk
Za8HWvfRyeg+WsFXmPBOhr1G5/EgqZ4zMH19XVxQL+sOBlpXMFWmKyDsBMxdbwUh
f0mjpm8WVgX7/0/BnvBEQyr1jYHr33ni
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:00:38 2025 by rpki-client