
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
File: GpfC9HEfe8gC4misZvEQhivleIg.mft (raw, json)
Hash identifier: 003qaz4XUkKoM2t0WNcntrRk4g79W8+NSfvlI+S6fOE=
Subject key identifier: 75:BC:83:90:51:7D:62:76:8E:31:0A:94:9B:01:CB:BE:75:57:E0:65
Authority key identifier: 1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88
Certificate issuer: /CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888
Certificate serial: 234F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
Manifest number: 22FF
Signing time: Wed 05 Nov 2025 07:21:21 +0000
Manifest this update: Wed 05 Nov 2025 07:21:21 +0000
Manifest next update: Wed 12 Nov 2025 07:21:21 +0000
Files and hashes: 1: GpfC9HEfe8gC4misZvEQhivleIg.crl (hash: kYtDngGW617601LSa+PDAK7mhoRd1GFueA+VbUqv2fA=)
2: ECB36EBCA54211F08D0FD466C4F9AE02.roa (hash: SuKYaB6T0tGfEKvGlTa0CLqgp2xb848WliNxbdmfrSw=)
3: 55D95690A13811F0BF53567FC4F9AE02.roa (hash: wfIg4YQ25Mg9FB53wM9axrO11ggNzJyyDGc+cl9NhDU=)
4: 05596FAEBA1811F080138957C4F9AE02.roa (hash: h0JWy7ziGkjmOsJL8dHAJhvnalo12yE0dGnYrcqdH2A=)
5: 32758AB4A54011F0ADC9D13BC4F9AE02.roa (hash: EqPoHokWPSQ1L2lcAAXRF+UXl8dKiWjU9iYk2iUWo3s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl
rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 07:21:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9039 (0x234f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2663, serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888
Validity
Not Before: Nov 5 07:21:21 2025 GMT
Not After : Nov 12 07:21:21 2025 GMT
Subject: CN=690afaf1-fe51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7d:ab:6c:26:46:d0:cf:0e:3f:bf:f0:bf:f6:
50:e3:b7:33:5c:02:0e:22:22:01:1b:b9:26:ad:47:
08:66:90:03:8f:70:1c:dc:47:6d:5e:fa:e8:cd:54:
d6:76:22:b4:9c:e5:91:cf:c5:22:9a:cb:26:9e:8b:
05:2e:e0:7f:6a:3e:71:04:4f:59:b9:b6:fb:15:f5:
76:20:0e:f9:53:1f:6d:fa:e5:f9:25:a5:e7:89:ae:
4e:db:d0:8a:9a:6b:8c:12:3e:7e:a6:d2:f3:b5:42:
30:49:11:ab:b1:ba:34:1d:e7:68:01:2f:9e:e1:18:
9f:66:d9:54:69:d2:fb:71:b4:b8:4b:ec:44:60:41:
1e:44:3a:c8:3c:82:95:69:49:e3:43:81:6f:e0:17:
fd:a0:91:05:0b:7e:65:54:d3:87:e6:5b:b8:7a:89:
68:a3:e6:47:40:06:f3:da:3f:c4:48:b7:67:eb:96:
0f:af:c5:37:15:e7:1c:67:bb:2e:d1:2b:5f:21:10:
b6:ea:ec:8e:39:79:cc:1d:3b:92:91:c0:d1:15:c3:
1d:0b:6b:15:7d:36:7f:61:53:6c:2b:8d:f6:25:6a:
5b:3c:d0:70:bf:01:44:96:a9:8f:57:53:91:03:9b:
61:4a:94:93:99:55:1c:50:30:17:b4:f7:57:75:5a:
d5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BC:83:90:51:7D:62:76:8E:31:0A:94:9B:01:CB:BE:75:57:E0:65
X509v3 Authority Key Identifier:
keyid:1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:5f:63:8a:74:cf:f5:0a:41:ea:29:2e:af:93:c7:1e:a3:5e:
2a:bb:2f:9f:59:06:14:49:35:3b:0b:23:4d:a5:0d:73:98:7c:
57:78:c8:1c:c3:7b:7c:b3:b0:ce:a0:c0:72:1a:16:c6:e0:1c:
12:49:3a:d9:ab:b0:a8:e5:b8:da:d5:55:dc:4a:ab:07:b7:48:
de:54:fa:22:ea:bc:c7:0d:0c:80:96:4b:93:fd:b3:ce:1f:2a:
bc:01:3c:db:92:4e:bc:9e:5d:bc:d0:2f:3e:3e:a8:28:3a:6d:
b9:e1:3d:bf:3c:51:2a:8f:8b:7b:c3:0e:b0:8c:70:52:75:a3:
49:6c:1d:8c:c8:98:fa:44:54:7f:89:ea:db:0e:cf:ab:79:f4:
ba:fc:c2:05:fe:83:2a:a3:64:a5:5e:67:bc:fd:66:96:b1:04:
d1:c1:e4:d6:ee:51:b9:f0:15:d1:d7:6b:99:9e:e7:a0:9e:af:
73:ab:9c:46:96:a4:0e:6f:97:c4:a5:4a:31:18:12:5a:a8:cf:
69:ef:7b:d9:89:2d:c7:84:40:e3:e2:bb:0f:c4:9c:56:e6:1f:
58:1c:4c:9a:4c:bb:a1:14:c1:d6:60:8c:5d:9e:72:99:92:39:
b6:d3:45:e2:3c:6e:e3:0f:0d:f2:15:35:d1:5c:01:99:04:0b:
62:6a:22:11
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICI08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzI2NjMxMTAvBgNVBAUTKDFBOTdDMkY0NzExRjdCQzgwMkUyNjhBQzY2RjExMDg2
MkJFNTc4ODgwHhcNMjUxMTA1MDcyMTIxWhcNMjUxMTEyMDcyMTIxWjAYMRYwFAYD
VQQDEw02OTBhZmFmMS1mZTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzH2rbCZG0M8OP7/wv/ZQ47czXAIOIiIBG7kmrUcIZpADj3Ac3EdtXvrozVTW
diK0nOWRz8UimssmnosFLuB/aj5xBE9Zubb7FfV2IA75Ux9t+uX5JaXnia5O29CK
mmuMEj5+ptLztUIwSRGrsbo0HedoAS+e4RifZtlUadL7cbS4S+xEYEEeRDrIPIKV
aUnjQ4Fv4Bf9oJEFC35lVNOH5lu4eoloo+ZHQAbz2j/ESLdn65YPr8U3FeccZ7su
0StfIRC26uyOOXnMHTuSkcDRFcMdC2sVfTZ/YVNsK432JWpbPNBwvwFElqmPV1OR
A5thSpSTmVUcUDAXtPdXdVrVSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHW8g5BR
fWJ2jjEKlJsBy751V+BlMB8GA1UdIwQYMBaAFBqXwvRxH3vIAuJorGbxEIYr5XiI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY2My9COEFFRjEzOEE5
NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4Z0M0bWlzWnZFUWhpdmxl
SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dwZkM5SEVmZThnQzRtaXNadkVRaGl2bGVJZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MjY2My9COEFFRjEzOEE5NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4
Z0M0bWlzWnZFUWhpdmxlSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB5X2OKdM/1CkHqKS6vk8ceo14quy+fWQYUSTU7CyNNpQ1zmHxXeMgc
w3t8s7DOoMByGhbG4BwSSTrZq7Co5bja1VXcSqsHt0jeVPoi6rzHDQyAlkuT/bPO
Hyq8ATzbkk68nl280C8+PqgoOm254T2/PFEqj4t7ww6wjHBSdaNJbB2MyJj6RFR/
ierbDs+refS6/MIF/oMqo2SlXme8/WaWsQTRweTW7lG58BXR12uZnuegnq9zq5xG
lqQOb5fEpUoxGBJaqM9p73vZiS3HhEDj4rsPxJxW5h9YHEyaTLuhFMHWYIxdnnKZ
kjm200XiPG7jDw3yFTXRXAGZBAtiaiIR
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:07:03 2025 by rpki-client