
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft
File: epirabcrqsZmDlTdHG2KBi4s0v4.mft (raw, json)
Hash identifier: OYQj3oNxwsuqNYEq3ZGsYUhkDdRLbpm62ulcVtilBHo=
Subject key identifier: 29:11:8C:F4:62:54:F7:B9:4A:A5:24:7C:6E:73:01:37:0F:4F:86:58
Authority key identifier: 7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE
Certificate issuer: /CN=A91E6038/serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE
Certificate serial: 03C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft
Manifest number: 03BB
Signing time: Mon 03 Nov 2025 00:38:28 +0000
Manifest this update: Mon 03 Nov 2025 00:38:27 +0000
Manifest next update: Mon 10 Nov 2025 00:38:27 +0000
Files and hashes: 1: epirabcrqsZmDlTdHG2KBi4s0v4.crl (hash: FEaQpfyivslT43lrOHPoh5YdyKypjd6V+Mk6u6T1L+k=)
2: BA6115F6B19D11F08DA2A57EC4F9AE02.roa (hash: yhzK504aM0ZwukBm9Hp58v17YprcHumNvrbx2tCi/3c=)
3: C7C714A2B19D11F0AB4AC87EC4F9AE02.roa (hash: xVfI/UuhEZlLBdOOX14MKLf7WRwvv4GN5zS12Efh5N8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl
rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 00:38:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 963 (0x3c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6038, serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE
Validity
Not Before: Nov 3 00:38:27 2025 GMT
Not After : Nov 10 00:38:27 2025 GMT
Subject: CN=6907f983-ef4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2d:f6:9f:a8:bb:c6:e4:9d:a9:7a:65:95:8e:
b8:c3:1f:5d:00:7f:5b:e0:d8:ee:78:96:25:b5:f0:
22:2b:b7:93:43:1f:28:b8:4e:73:f5:52:f5:6c:e3:
1d:96:3c:e1:a1:c9:b0:85:16:e5:fa:d7:3f:6d:2c:
80:ce:93:14:d4:cb:91:5e:fd:1b:ca:d7:27:43:12:
1b:4c:64:24:a1:a0:9f:84:eb:bf:3e:43:e2:e2:33:
88:ed:9d:75:3f:b7:6a:e7:47:8c:c2:bb:71:b1:98:
e7:e7:0b:b7:66:d3:09:cd:7d:39:99:4d:3d:f9:7b:
9c:d1:39:e2:b8:55:2b:25:f8:95:78:19:68:fc:7c:
c1:9b:9e:68:80:e9:31:cc:e8:02:6a:64:29:65:eb:
52:d7:9a:d9:09:28:39:6b:da:d5:66:af:0e:89:e4:
e7:68:d5:a0:7c:0c:4f:73:c0:7d:7d:ed:c8:c8:43:
dd:3a:6c:04:57:26:2f:bb:ca:11:84:60:51:5f:db:
0d:73:b5:1e:28:6e:2e:f1:98:86:1a:fd:37:df:09:
35:a1:ef:fc:85:d0:00:bd:d7:71:c7:56:80:8e:71:
ac:01:23:ab:44:21:72:08:fb:4e:9b:5d:4b:4b:b3:
0d:3b:cc:b2:9f:43:64:f5:8a:ac:f6:0d:db:36:57:
32:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:11:8C:F4:62:54:F7:B9:4A:A5:24:7C:6E:73:01:37:0F:4F:86:58
X509v3 Authority Key Identifier:
keyid:7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:16:7b:e3:74:4a:c2:bc:42:ba:a4:f5:87:c0:c3:2c:2a:1f:
d1:86:31:6e:30:5f:2e:2c:57:f2:dd:22:46:90:10:2b:ef:d4:
c7:62:7d:29:d3:f1:ae:a7:16:a0:55:86:8e:88:a0:4d:41:95:
24:22:29:bf:46:e5:ae:3d:8f:45:55:30:de:28:d6:42:03:b1:
3a:8e:7d:5b:38:17:83:a9:42:67:f1:d7:77:83:04:da:83:4a:
2e:c2:b6:5c:16:cf:58:93:df:5c:e8:31:3a:cb:f8:60:6d:28:
c7:89:1f:ef:4b:a6:96:e8:62:c0:d6:8f:3e:94:54:25:73:b9:
c8:86:ee:89:5e:65:11:c3:aa:f9:0d:79:2e:c6:6c:8f:27:c0:
00:af:0d:e3:ae:9a:f7:b3:ff:81:89:2a:55:3a:de:a0:da:d0:
1f:35:85:20:e0:78:2e:32:71:5b:93:2a:ae:9d:5d:85:ed:a5:
ed:95:3e:bc:03:38:7d:d9:46:3d:e3:a3:be:95:39:15:1a:dd:
28:81:92:2b:d2:e6:d0:d3:b6:e5:26:36:a7:0e:f3:61:7c:eb:
70:74:b3:ed:8a:9f:a4:b0:53:78:be:ce:77:a4:fb:cb:7b:b6:
ec:fe:a1:1f:93:88:3a:a1:f6:47:31:28:6a:95:9c:c2:96:1f:
96:c2:2e:f8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYwMzgxMTAvBgNVBAUTKDdBOThBQjY5QjcyQkFBQzY2NjBFNTRERDFDNkQ4QTA2
MkUyQ0QyRkUwHhcNMjUxMTAzMDAzODI3WhcNMjUxMTEwMDAzODI3WjAYMRYwFAYD
VQQDEw02OTA3Zjk4My1lZjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuy32n6i7xuSdqXpllY64wx9dAH9b4NjueJYltfAiK7eTQx8ouE5z9VL1bOMd
ljzhocmwhRbl+tc/bSyAzpMU1MuRXv0bytcnQxIbTGQkoaCfhOu/PkPi4jOI7Z11
P7dq50eMwrtxsZjn5wu3ZtMJzX05mU09+Xuc0TniuFUrJfiVeBlo/HzBm55ogOkx
zOgCamQpZetS15rZCSg5a9rVZq8OieTnaNWgfAxPc8B9fe3IyEPdOmwEVyYvu8oR
hGBRX9sNc7UeKG4u8ZiGGv033wk1oe/8hdAAvddxx1aAjnGsASOrRCFyCPtOm11L
S7MNO8yyn0Nk9Yqs9g3bNlcyEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkRjPRi
VPe5SqUkfG5zATcPT4ZYMB8GA1UdIwQYMBaAFHqYq2m3K6rGZg5U3RxtigYuLNL+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjAzOC85MUUwQzg1MkFG
RkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFzWm1EbFRkSEcyS0JpNHMw
djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VwaXJhYmNycXNabURsVGRIRzJLQmk0czB2NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NjAzOC85MUUwQzg1MkFGRkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFz
Wm1EbFRkSEcyS0JpNHMwdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB3FnvjdErCvEK6pPWHwMMsKh/RhjFuMF8uLFfy3SJGkBAr79THYn0p
0/GupxagVYaOiKBNQZUkIim/RuWuPY9FVTDeKNZCA7E6jn1bOBeDqUJn8dd3gwTa
g0ouwrZcFs9Yk99c6DE6y/hgbSjHiR/vS6aW6GLA1o8+lFQlc7nIhu6JXmURw6r5
DXkuxmyPJ8AArw3jrpr3s/+BiSpVOt6g2tAfNYUg4HguMnFbkyqunV2F7aXtlT68
Azh92UY946O+lTkVGt0ogZIr0ubQ07blJjanDvNhfOtwdLPtip+ksFN4vs53pPvL
e7bs/qEfk4g6ofZHMShqlZzClh+Wwi74
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:05:39 2025 by rpki-client