
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
File: pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft (raw, json)
Hash identifier: XXZXR0a0N8Mf90AqbKz5r/sZupCmTRCXOgLBGIkVKKc=
Subject key identifier: 22:3E:27:16:AE:B7:A9:F8:37:E0:29:2D:6A:4F:2F:C7:7E:19:58:85
Authority key identifier: A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC
Certificate issuer: /CN=A91F81AD/serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC
Certificate serial: 0281
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
Manifest number: 0279
Signing time: Wed 05 Nov 2025 01:44:19 +0000
Manifest this update: Wed 05 Nov 2025 01:44:19 +0000
Manifest next update: Wed 12 Nov 2025 01:44:19 +0000
Files and hashes: 1: pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl (hash: cFvYsAbrc0WgRYK6nEGmVD5tDdYeD70TtYCAdN4Z4v8=)
2: FA957D0A80FA11ED9B35954DC4F9AE02.roa (hash: L4odGfnpE1M8mP9qfK5ZT0cdoELj5+fPbxZ/a/GNs1U=)
3: F9F81E3480FA11ED9B35954DC4F9AE02.roa (hash: ZALG6qqy4VUNzS8JmJufwht3vQHiEFKz2LACrRimhuM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl
rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:44:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 641 (0x281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F81AD, serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC
Validity
Not Before: Nov 5 01:44:19 2025 GMT
Not After : Nov 12 01:44:19 2025 GMT
Subject: CN=690aabf3-28ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a7:a9:54:29:6d:36:91:c8:b6:8b:3c:19:27:
fc:58:8f:04:12:61:80:6c:42:92:8c:10:bd:9a:db:
41:a4:6b:51:f6:5d:8f:01:23:c9:41:62:0c:c4:46:
4f:86:16:70:25:2d:b6:4f:b5:64:3e:3e:f7:43:a6:
84:4d:ce:97:3a:ee:7d:0e:00:94:75:7e:9f:c7:13:
f9:f0:19:2e:af:f3:a5:1a:51:b1:52:b7:ec:64:ef:
70:a0:3a:69:d0:a5:d2:36:40:03:6c:1d:93:d1:87:
9c:ae:d3:8f:ad:5b:b4:ec:a3:24:3f:4a:b1:b8:16:
57:91:e7:52:03:bb:81:7a:4f:16:bf:0e:a8:1d:b9:
fe:19:f2:ad:7c:5e:0e:72:b2:1e:a7:a3:34:0a:b1:
a9:69:f6:f4:91:04:7f:06:3a:60:a6:93:e9:06:7a:
ef:68:a0:1a:e2:30:ef:86:98:bb:47:dc:ad:88:0b:
a0:99:a2:e6:a3:c5:33:1e:32:b6:5b:f4:6c:0a:6f:
46:73:5d:28:79:67:2f:80:52:e6:dc:04:7b:fd:82:
34:ba:34:db:83:c7:3b:51:37:01:83:6d:57:56:41:
fe:57:6c:76:be:3f:40:ca:53:ff:5d:49:76:a6:7e:
ee:91:1b:8a:3e:1c:8b:2d:b4:b7:9b:cd:0a:4e:9b:
a8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3E:27:16:AE:B7:A9:F8:37:E0:29:2D:6A:4F:2F:C7:7E:19:58:85
X509v3 Authority Key Identifier:
keyid:A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:71:89:61:40:31:37:c4:2a:85:0c:c5:3a:7e:dd:03:b5:cd:
f6:d0:c0:8d:ab:f6:f8:87:2c:78:8b:04:d8:6b:97:30:65:7f:
4e:fa:91:fc:cb:bb:29:18:55:ce:e3:b4:ab:f4:f3:6e:d1:7d:
0c:8e:8c:e2:2f:93:03:75:2f:5e:0c:2d:ed:29:48:28:b7:90:
7b:d3:99:12:3e:8b:41:c2:47:81:86:91:1e:93:e6:53:e8:59:
99:de:51:fe:4f:26:fd:e5:ce:d4:22:c0:6b:4b:3c:93:2c:4f:
3a:d8:7d:9e:ee:45:6f:15:17:1e:f4:be:85:60:e8:26:4d:84:
1a:32:24:63:f9:61:41:35:82:28:4b:82:e1:d8:f1:4d:f8:b5:
11:8a:53:9b:40:4b:c7:db:be:be:a7:8b:01:12:80:4e:3d:e2:
46:3e:92:a4:7e:03:62:3c:8c:e2:e7:a8:d7:55:50:55:c7:1f:
9c:c9:4b:ad:d0:b1:98:78:a0:52:38:7d:64:ab:c0:6b:bd:5c:
a8:e9:da:a1:9c:0f:0f:55:21:65:c5:8a:25:fa:52:22:72:09:
3e:03:14:8b:0f:4f:6e:8e:b5:f4:b7:11:40:27:19:65:7b:ce:
c2:d1:75:a3:ec:c7:da:f8:fc:7c:0e:68:b9:87:73:aa:57:9e:
e1:70:0a:38
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjgxQUQxMTAvBgNVBAUTKEE0Q0QzRTY3RDFCMjI0RjMyNTA0N0U5RjVFNDg0QUNE
QzRGNjYzRUMwHhcNMjUxMTA1MDE0NDE5WhcNMjUxMTEyMDE0NDE5WjAYMRYwFAYD
VQQDEw02OTBhYWJmMy0yOGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwaepVCltNpHItos8GSf8WI8EEmGAbEKSjBC9mttBpGtR9l2PASPJQWIMxEZP
hhZwJS22T7VkPj73Q6aETc6XOu59DgCUdX6fxxP58Bkur/OlGlGxUrfsZO9woDpp
0KXSNkADbB2T0YecrtOPrVu07KMkP0qxuBZXkedSA7uBek8Wvw6oHbn+GfKtfF4O
crIep6M0CrGpafb0kQR/BjpgppPpBnrvaKAa4jDvhpi7R9ytiAugmaLmo8UzHjK2
W/RsCm9Gc10oeWcvgFLm3AR7/YI0ujTbg8c7UTcBg21XVkH+V2x2vj9AylP/XUl2
pn7ukRuKPhyLLbS3m80KTpuoNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCI+Jxau
t6n4N+ApLWpPL8d+GViFMB8GA1UdIwQYMBaAFKTNPmfRsiTzJQR+n15ISs3E9mPs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODFBRC80Q0NCMDA5MDJD
QkUxMUVEOTk4MjRCNENDNEY5QUUwMi9wTTAtWjlHeUpQTWxCSDZmWGtoS3pjVDJZ
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BNMC1aOUd5SlBNbEJINmZYa2hLemNUMlktdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODFBRC80Q0NCMDA5MDJDQkUxMUVEOTk4MjRCNENDNEY5QUUwMi9wTTAtWjlHeUpQ
TWxCSDZmWGtoS3pjVDJZLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA5cYlhQDE3xCqFDMU6ft0Dtc320MCNq/b4hyx4iwTYa5cwZX9O+pH8
y7spGFXO47Sr9PNu0X0MjoziL5MDdS9eDC3tKUgot5B705kSPotBwkeBhpEek+ZT
6FmZ3lH+Tyb95c7UIsBrSzyTLE862H2e7kVvFRce9L6FYOgmTYQaMiRj+WFBNYIo
S4Lh2PFN+LURilObQEvH276+p4sBEoBOPeJGPpKkfgNiPIzi56jXVVBVxx+cyUut
0LGYeKBSOH1kq8BrvVyo6dqhnA8PVSFlxYol+lIicgk+AxSLD09ujrX0txFAJxll
e87C0XWj7Mfa+Px8Dmi5h3OqV57hcAo4
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:25:39 2025 by rpki-client