
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
File: tv1vS0-3wyR8WZKZsui6-1qLunI.mft (raw, json)
Hash identifier: /tWFf5KOrXzMREQGNlr9uZyqfRFL+SLCk/O6uLxZYPA=
Subject key identifier: 7C:26:98:6F:EF:27:2E:E1:76:A4:7B:77:60:E0:BA:64:09:42:0F:76
Authority key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
Certificate issuer: /CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Certificate serial: 06D1
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
Manifest number: 06BF
Signing time: Tue 04 Nov 2025 22:14:06 +0000
Manifest this update: Tue 04 Nov 2025 22:14:05 +0000
Manifest next update: Tue 11 Nov 2025 22:14:05 +0000
Files and hashes: 1: tv1vS0-3wyR8WZKZsui6-1qLunI.crl (hash: 5Afw1RMeglSBLlbnOrJWr9Hg0ehnnU9lrPpAUWU8tME=)
2: EC427D64B16311ECA18ED12FC4F9AE02.roa (hash: Ga4Z3DpE9aUbX7W5p2tUSOPgf7WkxMTRgFBKaq09Cxs=)
3: 35341F3E4EAE11EF811DC17BC4F9AE02.roa (hash: 1g7V3yJi0/XsTFsCpcEg/UcPiKQqpqW1UWTVYTWMIZE=)
4: A40873CE7FB811EB82018D29C4F9AE02.roa (hash: x1uMmRK43yay8ZPmLxVu8RIg3TAXDE9HwOF5tkl8BVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:14:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1745 (0x6d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE3C4, serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Validity
Not Before: Nov 4 22:14:05 2025 GMT
Not After : Nov 11 22:14:05 2025 GMT
Subject: CN=690a7aad-4c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:df:48:1c:be:4c:59:6f:36:f8:0b:cc:05:00:
20:25:58:ac:08:e6:c3:90:c3:d2:c9:a1:6b:3c:cd:
f1:6e:88:ff:77:b6:97:24:62:d7:23:e8:54:25:ef:
e3:fc:5f:78:66:b3:e0:52:b7:e8:46:71:ba:23:49:
1c:9c:e2:45:58:dc:9f:cc:de:5a:da:74:71:36:27:
09:89:92:01:45:68:9f:f2:7b:2e:50:c3:bf:11:54:
70:64:a8:11:12:cb:d6:29:00:24:59:67:15:2e:be:
e3:dc:6b:0a:ea:b9:a5:36:c9:ff:59:e3:31:a4:51:
69:19:e9:93:88:6a:96:38:0d:5c:b3:e2:9c:a3:db:
28:ee:2a:9c:56:2b:e2:08:d3:23:85:27:dc:fa:6a:
70:3e:91:ae:9f:4c:d3:78:1f:fd:7c:b3:68:28:f9:
2c:5b:80:aa:da:2f:57:29:1b:5e:0e:99:f6:5b:6d:
20:3e:19:00:f8:64:17:35:29:a2:54:56:4d:99:0e:
42:82:d0:80:3a:bd:eb:3d:ff:45:98:3d:51:78:f4:
2d:40:08:5a:d1:1f:60:4d:a2:56:c5:5c:c8:13:4b:
dc:80:6a:93:be:50:6a:64:c0:9f:06:64:88:e6:1d:
eb:eb:bc:78:29:4d:d9:38:4d:42:4e:16:8d:7a:9a:
f0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:26:98:6F:EF:27:2E:E1:76:A4:7B:77:60:E0:BA:64:09:42:0F:76
X509v3 Authority Key Identifier:
keyid:B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:fc:98:c7:c4:30:05:a0:77:5d:58:f4:e9:8d:76:9b:ba:b8:
3f:0a:4a:38:e3:9a:c6:00:6d:7b:49:6c:68:5e:88:cf:4f:5f:
6d:0e:99:e2:23:5a:e5:41:48:b4:84:eb:6e:d8:cb:7d:97:f5:
31:34:a0:92:39:10:2f:3d:67:df:f7:9c:2f:cd:25:f9:b4:a8:
fb:bd:97:0c:08:6b:c2:d2:cd:88:d4:18:9b:8e:17:30:a5:c9:
15:8b:aa:8d:3f:36:36:ae:55:90:49:6c:fa:08:53:03:89:fe:
b3:4c:f2:83:df:5a:92:76:88:72:c1:3a:68:30:94:7c:7a:ba:
7a:41:85:a6:e2:fc:cd:30:7b:e7:ad:bc:db:08:db:be:e4:e9:
58:98:db:86:fb:af:f0:05:f4:20:f7:f0:27:dd:dc:f9:27:d0:
fc:df:72:04:72:64:79:53:43:93:fe:54:82:9b:71:bd:4f:56:
3a:e9:19:e3:89:8c:21:7b:44:cf:70:5f:e8:6e:55:2f:6e:09:
1f:7d:11:da:7e:9d:d4:5e:e9:ca:55:47:43:d5:f7:87:c4:19:
47:15:c3:72:20:f1:6e:5a:e3:e8:91:a0:06:f8:9c:d7:9b:23:
e2:46:0d:d1:60:75:7a:b0:3b:c4:7f:39:73:91:c6:e4:64:3d:
7a:ee:fc:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0UzQzQxMTAvBgNVBAUTKEI2RkQ2RjRCNEZCN0MzMjQ3QzU5OTI5OUIyRThCQUZC
NUE4QkJBNzIwHhcNMjUxMTA0MjIxNDA1WhcNMjUxMTExMjIxNDA1WjAYMRYwFAYD
VQQDEw02OTBhN2FhZC00YzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0t9IHL5MWW82+AvMBQAgJVisCObDkMPSyaFrPM3xboj/d7aXJGLXI+hUJe/j
/F94ZrPgUrfoRnG6I0kcnOJFWNyfzN5a2nRxNicJiZIBRWif8nsuUMO/EVRwZKgR
EsvWKQAkWWcVLr7j3GsK6rmlNsn/WeMxpFFpGemTiGqWOA1cs+Kco9so7iqcVivi
CNMjhSfc+mpwPpGun0zTeB/9fLNoKPksW4Cq2i9XKRteDpn2W20gPhkA+GQXNSmi
VFZNmQ5CgtCAOr3rPf9FmD1RePQtQAha0R9gTaJWxVzIE0vcgGqTvlBqZMCfBmSI
5h3r67x4KU3ZOE1CThaNeprwEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwmmG/v
Jy7hdqR7d2DgumQJQg92MB8GA1UdIwQYMBaAFLb9b0tPt8MkfFmSmbLouvtai7py
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNDNC82REQ5RjMzNDdG
OTcxMUVCQUREQzVGMTVDNEY5QUUwMi90djF2UzAtM3d5UjhXWktac3VpNi0xcUx1
bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3R2MXZTMC0zd3lSOFdaS1pzdWk2LTFxTHVuSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTNDNC82REQ5RjMzNDdGOTcxMUVCQUREQzVGMTVDNEY5QUUwMi90djF2UzAtM3d5
UjhXWktac3VpNi0xcUx1bkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCZ/JjHxDAFoHddWPTpjXaburg/Cko445rGAG17SWxoXojPT19tDpni
I1rlQUi0hOtu2Mt9l/UxNKCSORAvPWff95wvzSX5tKj7vZcMCGvC0s2I1Bibjhcw
pckVi6qNPzY2rlWQSWz6CFMDif6zTPKD31qSdohywTpoMJR8erp6QYWm4vzNMHvn
rbzbCNu+5OlYmNuG+6/wBfQg9/An3dz5J9D833IEcmR5U0OT/lSCm3G9T1Y66Rnj
iYwhe0TPcF/oblUvbgkffRHafp3UXunKVUdD1feHxBlHFcNyIPFuWuPokaAG+JzX
myPiRg3RYHV6sDvEfzlzkcbkZD167vyw
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:43:15 2025 by rpki-client