
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
File: ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft (raw, json)
Hash identifier: XJvachkzc9+x/IzJzNIn5TB5lh9FnAHdjfZkypc9Ls8=
Subject key identifier: 46:1D:82:BF:02:39:86:98:53:0E:B6:FD:5F:51:78:34:11:5C:BA:BD
Authority key identifier: 7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D
Certificate issuer: /CN=A91E782F/serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D
Certificate serial: F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
Manifest number: F6
Signing time: Wed 05 Nov 2025 05:22:32 +0000
Manifest this update: Wed 05 Nov 2025 05:22:31 +0000
Manifest next update: Wed 12 Nov 2025 05:22:31 +0000
Files and hashes: 1: ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl (hash: iRuxI6gtyBO14UOwcYyUpl6hR2M/3sh3t3MrXkiqpTM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl
rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:22:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E782F, serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D
Validity
Not Before: Nov 5 05:22:31 2025 GMT
Not After : Nov 12 05:22:31 2025 GMT
Subject: CN=690adf18-5154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:1d:c3:34:2a:99:e4:53:3b:03:3f:ca:00:69:
a7:2b:13:bf:e2:0a:60:9b:88:8f:86:eb:33:99:25:
cc:d5:a5:0c:f5:ff:07:57:44:52:cb:6f:88:38:f0:
bf:49:32:f8:52:13:df:d0:47:50:3e:8d:02:f9:59:
75:4f:e2:c4:11:9b:7a:5a:ab:4e:4a:c6:6e:ec:a8:
58:28:50:09:c4:1e:69:93:61:aa:26:09:d5:79:61:
bc:96:d7:0e:de:9f:4a:8e:8b:56:71:8b:41:09:e1:
02:96:56:b2:e0:e5:e5:70:6d:b1:60:43:d4:ef:3d:
dc:1b:6c:69:ac:eb:04:a7:0d:b4:4a:fb:fb:75:93:
44:ae:b5:46:59:c7:25:6f:d3:c8:d6:8b:0a:3a:58:
ff:af:57:a3:1b:a3:17:34:e7:22:81:57:45:92:08:
8b:7b:30:58:f1:db:99:a0:89:b6:8c:a3:aa:13:4b:
68:c3:a6:12:c2:90:4e:4b:ee:70:ea:fc:a5:91:62:
53:18:63:e3:57:a0:b2:f2:39:76:e4:9d:53:46:e7:
04:52:81:c8:99:99:bd:8a:62:58:23:16:05:ee:4f:
0d:cd:aa:6b:db:77:ad:19:16:c8:b7:b5:5c:0e:9e:
ad:dd:e9:55:03:be:27:cb:46:63:b8:2f:a7:47:29:
c5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1D:82:BF:02:39:86:98:53:0E:B6:FD:5F:51:78:34:11:5C:BA:BD
X509v3 Authority Key Identifier:
keyid:7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:91:b5:a9:0a:95:ad:28:92:35:89:1e:d7:6d:9d:64:22:40:
78:e1:01:a4:6b:2c:db:3a:d0:d2:ad:03:0c:8f:23:f4:cf:e6:
3d:ab:26:28:e0:db:31:67:1d:77:16:f5:4d:e3:d8:d3:8c:8e:
c9:86:ec:a4:c5:db:bd:b0:cb:77:81:bc:98:c7:66:3f:ae:60:
db:21:e0:dc:89:33:da:6d:cd:b5:6c:3c:65:39:f9:62:f9:75:
7d:f4:b3:79:04:1b:84:65:f6:5f:1b:cf:22:d8:67:95:a6:08:
96:ca:0f:42:a5:43:14:af:56:1b:4b:af:97:17:23:3f:20:6c:
4d:1d:15:0a:85:b0:3a:60:46:ae:25:27:57:36:cf:a9:54:cf:
b8:e0:3b:7e:58:73:65:ca:0f:d2:2d:ee:b9:7a:8c:29:cd:56:
c1:28:1a:d1:bb:3b:41:84:c3:50:5e:35:de:f4:b9:03:41:d8:
83:cd:11:05:3e:c6:e5:3b:31:3d:9c:5b:53:7a:c7:b4:e9:ad:
71:12:31:ad:75:d9:48:b0:8e:5d:ef:f3:05:8c:76:24:2d:10:
fa:a4:70:46:42:bc:1e:73:ee:3c:cb:e8:90:7e:03:18:b7:67:
9d:f4:a9:cb:9e:91:ae:ba:83:b2:7c:e9:ef:7a:a6:85:50:7a:
cb:a9:dc:1e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTc4MkYxMTAvBgNVBAUTKDdBOUZGODY0QzUwMzE4MDY3MTMwNTg4RTZEQkE5MjhC
QTFDMDNBNUQwHhcNMjUxMTA1MDUyMjMxWhcNMjUxMTEyMDUyMjMxWjAYMRYwFAYD
VQQDEw02OTBhZGYxOC01MTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA/h3DNCqZ5FM7Az/KAGmnKxO/4gpgm4iPhuszmSXM1aUM9f8HV0RSy2+IOPC/
STL4UhPf0EdQPo0C+Vl1T+LEEZt6WqtOSsZu7KhYKFAJxB5pk2GqJgnVeWG8ltcO
3p9KjotWcYtBCeECllay4OXlcG2xYEPU7z3cG2xprOsEpw20Svv7dZNErrVGWccl
b9PI1osKOlj/r1ejG6MXNOcigVdFkgiLezBY8duZoIm2jKOqE0tow6YSwpBOS+5w
6vylkWJTGGPjV6Cy8jl25J1TRucEUoHImZm9imJYIxYF7k8Nzapr23etGRbIt7Vc
Dp6t3elVA74ny0ZjuC+nRynFNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYdgr8C
OYaYUw62/V9ReDQRXLq9MB8GA1UdIwQYMBaAFHqf+GTFAxgGcTBYjm26kouhwDpd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzgyRi83NjRDQTJEMDQw
NzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi9lcF80Wk1VREdBWnhNRmlPYmJxU2k2SEFP
bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VwXzRaTVVER0FaeE1GaU9iYnFTaTZIQU9sMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzgyRi83NjRDQTJEMDQwNzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi9lcF80Wk1VREdB
WnhNRmlPYmJxU2k2SEFPbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCfkbWpCpWtKJI1iR7XbZ1kIkB44QGkayzbOtDSrQMMjyP0z+Y9qyYo
4NsxZx13FvVN49jTjI7Jhuykxdu9sMt3gbyYx2Y/rmDbIeDciTPabc21bDxlOfli
+XV99LN5BBuEZfZfG88i2GeVpgiWyg9CpUMUr1YbS6+XFyM/IGxNHRUKhbA6YEau
JSdXNs+pVM+44Dt+WHNlyg/SLe65eowpzVbBKBrRuztBhMNQXjXe9LkDQdiDzREF
PsblOzE9nFtTese06a1xEjGtddlIsI5d7/MFjHYkLRD6pHBGQrwec+48y+iQfgMY
t2ed9KnLnpGuuoOyfOnveqaFUHrLqdwe
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:45:03 2025 by rpki-client