
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
File: RYSuojlMRtaTTmPtaIfUcm_fehM.mft (raw, json)
Hash identifier: pi4WSj+IAXNaFnoSSJVHsji8bbA8iZsyQRss9oyx8uc=
Subject key identifier: 03:2E:C1:BD:D8:C8:D5:C8:8D:1E:88:73:7A:74:E7:2C:20:E5:40:BA
Authority key identifier: 45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
Certificate issuer: /CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
Certificate serial: 0496
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
Manifest number: 0477
Signing time: Wed 05 Nov 2025 00:16:15 +0000
Manifest this update: Wed 05 Nov 2025 00:16:14 +0000
Manifest next update: Wed 12 Nov 2025 00:16:14 +0000
Files and hashes: 1: RYSuojlMRtaTTmPtaIfUcm_fehM.crl (hash: PM37Z2wdKMmBFHUUJoGesZ6xd5frNdUliuCfOaifXCw=)
2: BCD8D1DCD22B11EE9443A443C4F9AE02.roa (hash: c6vlUnQWxWwAT8iWt17JqzfF6ipPIApaxLVylf4FJGg=)
3: BC148566D22B11EE9443A443C4F9AE02.roa (hash: +f0SgnVqjTGf0Ix6OCOZmxBPZxff4HtF7xpjcxcn/GE=)
4: 783C88A285FF11EEAFD34A2CC4F9AE02.roa (hash: kTJ8czPgPRYvRUYRTSuFaRzwT5mPZmvDIQm8YSYeRGQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl
rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:16:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1174 (0x496)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAAF5, serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
Validity
Not Before: Nov 5 00:16:14 2025 GMT
Not After : Nov 12 00:16:14 2025 GMT
Subject: CN=690a974e-9c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:71:ad:96:b7:8c:8b:f0:91:3b:28:bc:02:f4:
d5:a3:02:05:70:f3:bd:44:56:a3:44:87:e7:b2:35:
2e:62:c5:8a:3f:12:5a:08:3d:4c:50:c0:45:ad:d4:
e3:99:85:b1:2c:ad:fb:be:33:64:a6:f7:58:b5:37:
3e:34:f1:40:ea:29:86:f7:49:cb:d4:84:1e:8a:fd:
e8:b8:25:60:58:d4:23:3b:e4:1e:15:d8:84:2c:65:
09:e3:50:58:09:a8:46:58:9c:5b:98:26:86:a1:82:
ad:ad:a4:55:22:3b:1f:74:86:55:ca:f5:aa:16:ca:
b2:b9:6e:05:db:99:d9:c0:c2:a2:9c:d2:c5:27:70:
68:15:2e:f2:74:a7:a0:d0:74:71:c5:ce:d4:7b:66:
47:53:20:f2:b5:b0:80:34:e4:8d:05:be:47:69:ea:
24:5e:cd:24:ef:1e:7d:d7:7c:63:41:2e:ec:7a:ef:
0b:2e:4d:9e:5c:38:8f:6b:b8:65:40:08:19:07:d9:
5a:55:8c:7b:95:5c:10:67:61:a5:09:5d:fe:6a:e9:
48:91:fd:b8:7f:06:20:ce:ff:72:5c:a4:02:75:21:
72:09:7f:69:98:49:df:5e:2f:22:44:c2:96:d1:ee:
d6:58:fd:ec:41:ed:ae:55:de:2e:ac:7c:60:54:13:
05:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2E:C1:BD:D8:C8:D5:C8:8D:1E:88:73:7A:74:E7:2C:20:E5:40:BA
X509v3 Authority Key Identifier:
keyid:45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:01:e5:04:c9:35:9a:9c:4f:dc:98:1a:6a:06:b8:d8:15:a9:
13:f5:9b:4d:0c:7c:aa:e0:ba:79:f7:a7:f6:7c:67:a5:66:46:
5c:24:28:d4:2f:89:52:1a:3a:f1:af:f3:76:4a:fe:cd:f6:f2:
a6:21:b4:75:37:4a:79:4d:b2:76:1a:8e:15:59:fb:0f:ef:8f:
a9:ea:3f:5a:15:9b:8d:15:80:cc:f9:4f:57:37:ed:cc:7e:cd:
00:57:e4:3b:5b:8e:d1:54:00:bb:66:44:10:40:8f:7e:d1:f2:
ea:db:5e:50:88:14:31:85:cb:72:ca:18:6f:9c:11:0f:cb:78:
47:e0:4b:14:7f:27:63:c2:53:67:0a:30:25:33:9a:c9:a4:ca:
16:8c:68:8f:82:91:fa:77:3e:61:b4:7b:ec:95:37:a1:9a:33:
34:cd:d8:43:8e:43:c8:af:8c:0e:d1:80:0d:f8:af:9c:ff:75:
95:57:86:2c:3b:c9:e6:04:68:fa:00:49:4a:e7:f2:db:3f:95:
9d:14:03:53:7b:33:f2:92:55:8b:ca:b7:49:25:54:63:a4:d4:
69:82:02:b6:26:b0:ce:5c:2d:88:a0:9f:92:d1:b6:40:e4:19:
7c:37:64:d1:e4:65:bb:52:39:1f:f9:28:d0:30:6b:a5:fc:be:
43:79:4a:83
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFBRjUxMTAvBgNVBAUTKDQ1ODRBRUEyMzk0QzQ2RDY5MzRFNjNFRDY4ODdENDcy
NkZERjdBMTMwHhcNMjUxMTA1MDAxNjE0WhcNMjUxMTEyMDAxNjE0WjAYMRYwFAYD
VQQDEw02OTBhOTc0ZS05YzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtXGtlreMi/CROyi8AvTVowIFcPO9RFajRIfnsjUuYsWKPxJaCD1MUMBFrdTj
mYWxLK37vjNkpvdYtTc+NPFA6imG90nL1IQeiv3ouCVgWNQjO+QeFdiELGUJ41BY
CahGWJxbmCaGoYKtraRVIjsfdIZVyvWqFsqyuW4F25nZwMKinNLFJ3BoFS7ydKeg
0HRxxc7Ue2ZHUyDytbCANOSNBb5HaeokXs0k7x5913xjQS7seu8LLk2eXDiPa7hl
QAgZB9laVYx7lVwQZ2GlCV3+aulIkf24fwYgzv9yXKQCdSFyCX9pmEnfXi8iRMKW
0e7WWP3sQe2uVd4urHxgVBMFtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMuwb3Y
yNXIjR6Ic3p05ywg5UC6MB8GA1UdIwQYMBaAFEWErqI5TEbWk05j7WiH1HJv33oT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUFGNS9FOTlGNTIzQTZF
QzQxMUVDQUZEMjczMzFDNEY5QUUwMi9SWVN1b2psTVJ0YVRUbVB0YUlmVWNtX2Zl
aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JZU3VvamxNUnRhVFRtUHRhSWZVY21fZmVoTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QUFGNS9FOTlGNTIzQTZFQzQxMUVDQUZEMjczMzFDNEY5QUUwMi9SWVN1b2psTVJ0
YVRUbVB0YUlmVWNtX2ZlaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA5AeUEyTWanE/cmBpqBrjYFakT9ZtNDHyq4Lp596f2fGelZkZcJCjU
L4lSGjrxr/N2Sv7N9vKmIbR1N0p5TbJ2Go4VWfsP74+p6j9aFZuNFYDM+U9XN+3M
fs0AV+Q7W47RVAC7ZkQQQI9+0fLq215QiBQxhctyyhhvnBEPy3hH4EsUfydjwlNn
CjAlM5rJpMoWjGiPgpH6dz5htHvslTehmjM0zdhDjkPIr4wO0YAN+K+c/3WVV4Ys
O8nmBGj6AElK5/LbP5WdFANTezPyklWLyrdJJVRjpNRpggK2JrDOXC2IoJ+S0bZA
5Bl8N2TR5GW7Ujkf+SjQMGul/L5DeUqD
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:22:37 2025 by rpki-client