
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
File: o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft (raw, json)
Hash identifier: L1WovElcSYdZLnFsaxgy95uvyU0nOgl2aqJCpDMS4Gc=
Subject key identifier: 75:4E:B5:A8:76:07:B4:B3:28:17:BC:BE:C4:94:8F:0D:94:D5:74:59
Authority key identifier: A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF
Certificate issuer: /CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
Certificate serial: 0385
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
Manifest number: 037E
Signing time: Wed 05 Nov 2025 00:56:21 +0000
Manifest this update: Wed 05 Nov 2025 00:56:20 +0000
Manifest next update: Wed 12 Nov 2025 00:56:20 +0000
Files and hashes: 1: o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl (hash: sHPJAvqDOF6M4zCpnW0Mo9q9tbIUhHCmbDhzauuujNY=)
2: 24578ECED56A11EFB764F716C4F9AE02.roa (hash: DhDV/fmV49KF53LCzY2iPFhFE+P1oeX1k0nYiQfDFpM=)
3: 1445557CC6C011EC9D09EF1DC4F9AE02.roa (hash: xTkFFGEwoSM0XslM057b0r3pWef291E2LlOQWfzYUXc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl
rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:56:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901 (0x385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C913E, serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
Validity
Not Before: Nov 5 00:56:20 2025 GMT
Not After : Nov 12 00:56:20 2025 GMT
Subject: CN=690aa0b4-971a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:67:f0:37:d8:87:92:c3:92:7e:9f:79:c9:92:
4e:84:3d:69:a8:ef:db:a1:09:4f:9d:64:a5:25:5e:
7a:91:7c:a1:61:fe:84:f9:76:e3:cc:c8:20:72:0a:
77:36:86:b6:e9:67:fe:66:28:e2:d5:9c:72:2f:17:
ac:ad:51:8a:3b:e2:0d:f5:c9:5d:e6:c6:cb:f2:fe:
d1:ff:6d:38:0c:4c:9a:d1:28:8a:96:74:b1:e0:6a:
e0:c5:80:16:88:47:c3:6d:82:6f:0e:a6:f9:61:cb:
76:c4:2d:92:a4:6d:3f:9f:7a:ab:b4:1a:d9:c0:89:
24:a9:8c:52:81:c0:a9:2d:57:e0:2f:bc:f7:ac:9e:
ae:ad:c0:50:8e:41:eb:d8:7f:93:f2:bd:6a:0f:b0:
fd:3a:a1:a9:41:a8:78:ab:8e:ad:9a:bd:d8:20:02:
12:27:0a:c9:6b:06:d4:66:0f:d6:fb:57:59:32:18:
c3:40:1c:12:f4:63:f0:b0:10:6c:37:a1:a1:87:db:
a7:40:77:b6:56:06:a0:97:17:7d:7d:21:14:fd:4c:
e3:6d:49:16:ff:ac:1f:b3:fc:de:f4:da:74:36:4b:
27:4d:61:4b:3e:10:90:80:40:65:6f:6a:5f:e6:9f:
93:3e:19:f0:fd:85:40:f4:4b:66:1b:09:2f:2a:08:
91:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4E:B5:A8:76:07:B4:B3:28:17:BC:BE:C4:94:8F:0D:94:D5:74:59
X509v3 Authority Key Identifier:
keyid:A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:2e:87:35:c3:ab:e2:34:84:42:d0:b2:21:1f:21:84:1e:e4:
1c:5c:03:c0:63:30:4d:d3:99:2a:93:41:3e:15:8d:f1:d2:8c:
2b:b4:9d:c3:36:c3:06:82:b3:0a:92:91:92:c4:cc:d6:85:20:
23:4b:a1:00:17:11:aa:15:36:ed:12:e9:dc:94:b2:52:9c:17:
40:46:0c:ce:03:7c:7e:c4:4d:8e:66:32:c2:b7:56:c5:b2:3e:
f3:d2:24:de:ab:6f:13:56:c1:35:63:f4:c4:e3:e4:72:e0:d7:
f3:80:61:14:ef:7f:ad:f9:59:19:02:4a:d0:88:7d:b7:96:80:
9d:49:12:6d:b2:51:f0:62:96:c6:55:33:f1:9f:f3:24:90:6a:
41:d1:b7:11:73:9d:cb:6c:62:5c:3f:0d:96:e0:e4:0e:6b:04:
61:9a:47:29:08:05:ff:8a:06:b1:8f:9e:4b:82:7f:7a:fc:61:
89:63:64:9f:0a:9a:e1:ed:95:96:09:a2:c4:5c:b3:7a:be:4e:
5d:4e:0e:a7:90:41:a2:59:c7:34:30:b9:b4:e3:3e:9a:f3:10:
be:91:9e:f3:2a:a0:69:8a:8b:dc:2b:20:55:a1:d5:90:9d:7f:
40:8e:04:16:94:f9:ab:ac:1f:79:41:71:c4:64:71:99:ee:1f:
11:fd:4b:3f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzkxM0UxMTAvBgNVBAUTKEEzNDcxQzMxNTMzQjg4RDFCRjhBNDBBMzJBN0RERTNC
QTBCQjFDQkYwHhcNMjUxMTA1MDA1NjIwWhcNMjUxMTEyMDA1NjIwWjAYMRYwFAYD
VQQDEw02OTBhYTBiNC05NzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA52fwN9iHksOSfp95yZJOhD1pqO/boQlPnWSlJV56kXyhYf6E+XbjzMggcgp3
Noa26Wf+Ziji1ZxyLxesrVGKO+IN9cld5sbL8v7R/204DEya0SiKlnSx4GrgxYAW
iEfDbYJvDqb5Yct2xC2SpG0/n3qrtBrZwIkkqYxSgcCpLVfgL7z3rJ6urcBQjkHr
2H+T8r1qD7D9OqGpQah4q46tmr3YIAISJwrJawbUZg/W+1dZMhjDQBwS9GPwsBBs
N6Ghh9unQHe2Vgaglxd9fSEU/UzjbUkW/6wfs/ze9Np0NksnTWFLPhCQgEBlb2pf
5p+TPhnw/YVA9EtmGwkvKgiR1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHVOtah2
B7SzKBe8vsSUjw2U1XRZMB8GA1UdIwQYMBaAFKNHHDFTO4jRv4pAoyp93juguxy/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTEzRS9ERDA4OThGMEM2
QkQxMUVDODk2Mzc0MURDNEY5QUUwMi9vMGNjTVZNN2lOR19pa0NqS24zZU82QzdI
TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL28wY2NNVk03aU5HX2lrQ2pLbjNlTzZDN0hMOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTEzRS9ERDA4OThGMEM2QkQxMUVDODk2Mzc0MURDNEY5QUUwMi9vMGNjTVZNN2lO
R19pa0NqS24zZU82QzdITDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQABLoc1w6viNIRC0LIhHyGEHuQcXAPAYzBN05kqk0E+FY3x0owrtJ3D
NsMGgrMKkpGSxMzWhSAjS6EAFxGqFTbtEunclLJSnBdARgzOA3x+xE2OZjLCt1bF
sj7z0iTeq28TVsE1Y/TE4+Ry4NfzgGEU73+t+VkZAkrQiH23loCdSRJtslHwYpbG
VTPxn/MkkGpB0bcRc53LbGJcPw2W4OQOawRhmkcpCAX/igaxj55Lgn96/GGJY2Sf
Cprh7ZWWCaLEXLN6vk5dTg6nkEGiWcc0MLm04z6a8xC+kZ7zKqBpiovcKyBVodWQ
nX9AjgQWlPmrrB95QXHEZHGZ7h8R/Us/
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:02:38 2025 by rpki-client