
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
File: voUqizt-pcWsWlKqy4UqAaTN0II.mft (raw, json)
Hash identifier: LA09vmNeLafzis79Xxc39lFZS4AmDfLmMi/kjpmTh0o=
Subject key identifier: 3C:10:C6:1D:A7:29:05:4A:5E:5D:5B:FA:42:66:00:F0:48:C4:B2:B8
Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
Certificate issuer: /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Certificate serial: 04AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
Manifest number: 0499
Signing time: Mon 03 Nov 2025 00:02:46 +0000
Manifest this update: Mon 03 Nov 2025 00:02:46 +0000
Manifest next update: Mon 10 Nov 2025 00:02:46 +0000
Files and hashes: 1: voUqizt-pcWsWlKqy4UqAaTN0II.crl (hash: tKfp2P/Xb9+tvTLFFEBA7hXZeQQZDMG0N3U/seJnvBA=)
2: D717B9F0B7E511EFB5F63E6DC4F9AE02.roa (hash: R/nnjeAR+tZePhFeIgEDIZOhg5pi4qQT+4iwQfx8ekU=)
3: D254B444679111EF8A2C9062C4F9AE02.roa (hash: KIM/sEwaQaYFPC8qF/5+qRUkUFtySui4RoXzgpLXzmc=)
4: 14F55DEAB7E611EF9B9D9F6DC4F9AE02.roa (hash: BIPMm9ibDgvfx7NU935+UV2sEA5f17RgI+qcbtg58kw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 00:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1199 (0x4af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF428, serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Validity
Not Before: Nov 3 00:02:46 2025 GMT
Not After : Nov 10 00:02:46 2025 GMT
Subject: CN=6907f126-9f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:57:3e:f6:1e:61:bf:45:47:59:33:e0:65:ee:
bd:0e:9d:eb:48:43:ac:9d:6a:22:8d:4e:5b:1f:20:
ee:5a:e2:de:55:9f:4e:25:4d:58:7c:70:12:7a:ce:
9c:ed:a3:39:4d:41:f6:87:4d:06:0e:00:a6:a9:60:
51:79:ad:13:54:39:d4:12:38:d6:bb:26:84:06:f4:
52:80:a5:7c:69:04:6f:c9:2b:ba:b8:f2:ac:87:a7:
37:b2:15:02:81:b9:23:ae:74:c8:18:38:27:c5:74:
f3:44:be:3a:8f:c1:06:4d:08:68:a3:ea:f0:0a:86:
14:2b:81:28:29:7d:aa:aa:2f:d5:27:0a:68:b7:c3:
5e:43:2b:eb:a2:cf:ed:2f:8c:6c:cc:30:bb:f5:5f:
86:eb:c1:81:6b:ee:88:ae:f6:f8:f0:db:3a:2b:89:
03:ee:14:3e:e2:57:a4:46:1c:ed:b3:8f:e6:9a:1c:
20:f1:6c:c8:bc:c3:49:e2:b8:b5:0b:8c:40:c0:6b:
b7:1c:e8:55:3d:1b:9f:97:d1:01:5a:5e:9e:24:8f:
54:ed:d1:9f:13:70:56:08:b3:7e:1a:ba:5c:3e:41:
46:cc:4c:d5:2c:4c:22:54:b0:c2:ca:a3:27:9c:20:
88:59:13:67:cb:ff:63:72:4f:89:d2:58:dd:c2:78:
f4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:10:C6:1D:A7:29:05:4A:5E:5D:5B:FA:42:66:00:F0:48:C4:B2:B8
X509v3 Authority Key Identifier:
keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:85:48:ba:46:e6:bc:d2:27:5e:dc:23:7e:e0:b6:d2:6a:27:
5e:3b:dd:b2:ef:d6:d5:0b:fe:28:a6:0e:98:d5:63:5a:de:a5:
03:ea:6b:13:90:4c:64:ce:e1:40:47:07:c9:b6:49:f8:43:f0:
da:c3:e9:5c:3d:06:cb:5e:17:1b:40:d9:4a:f9:09:28:3c:60:
b9:ba:bf:1c:6c:4c:dd:0c:c2:c5:54:50:34:a9:07:ac:8b:66:
ff:59:7d:dc:fe:ac:5f:26:c0:55:9a:a9:fc:30:0c:77:52:50:
22:32:97:cb:8c:ac:0b:82:2a:e9:83:18:27:8a:ca:32:e4:cb:
f5:20:23:e6:be:3a:7a:48:2d:93:45:f9:d3:ac:02:e5:4f:c5:
42:d2:2d:47:7d:15:65:ee:3e:8b:58:02:40:0f:3c:71:7c:24:
72:43:40:32:eb:df:bf:f5:c4:09:6f:5b:1c:c9:8f:4c:ef:ff:
c6:b0:33:4a:e8:aa:bf:99:ff:60:77:0c:e3:76:c7:16:f7:e8:
8e:a0:ff:1b:9e:2f:f0:b1:cd:f2:fe:21:b4:bb:46:08:25:3b:
a3:f0:dd:ec:9b:04:04:5e:8b:82:37:69:28:4d:01:14:0e:46:
4f:eb:50:19:60:35:43:83:9e:4c:3b:46:e7:2a:63:c1:0a:0f:
aa:24:9b:f2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkY0MjgxMTAvBgNVBAUTKEJFODUyQThCM0I3RUE1QzVBQzVBNTJBQUNCODUyQTAx
QTRDREQwODIwHhcNMjUxMTAzMDAwMjQ2WhcNMjUxMTEwMDAwMjQ2WjAYMRYwFAYD
VQQDEw02OTA3ZjEyNi05ZjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Vc+9h5hv0VHWTPgZe69Dp3rSEOsnWoijU5bHyDuWuLeVZ9OJU1YfHASes6c
7aM5TUH2h00GDgCmqWBRea0TVDnUEjjWuyaEBvRSgKV8aQRvySu6uPKsh6c3shUC
gbkjrnTIGDgnxXTzRL46j8EGTQhoo+rwCoYUK4EoKX2qqi/VJwpot8NeQyvros/t
L4xszDC79V+G68GBa+6Irvb48Ns6K4kD7hQ+4lekRhzts4/mmhwg8WzIvMNJ4ri1
C4xAwGu3HOhVPRufl9EBWl6eJI9U7dGfE3BWCLN+GrpcPkFGzEzVLEwiVLDCyqMn
nCCIWRNny/9jck+J0ljdwnj0cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwQxh2n
KQVKXl1b+kJmAPBIxLK4MB8GA1UdIwQYMBaAFL6FKos7fqXFrFpSqsuFKgGkzdCC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjQyOC8zNUVCMTM0ODVE
RDgxMUVDQjlCNEQ2MzBDNEY5QUUwMi92b1VxaXp0LXBjV3NXbEtxeTRVcUFhVE4w
SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZvVXFpenQtcGNXc1dsS3F5NFVxQWFUTjBJSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RjQyOC8zNUVCMTM0ODVERDgxMUVDQjlCNEQ2MzBDNEY5QUUwMi92b1VxaXp0LXBj
V3NXbEtxeTRVcUFhVE4wSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDJhUi6Rua80ide3CN+4LbSaideO92y79bVC/4opg6Y1WNa3qUD6msT
kExkzuFARwfJtkn4Q/Daw+lcPQbLXhcbQNlK+QkoPGC5ur8cbEzdDMLFVFA0qQes
i2b/WX3c/qxfJsBVmqn8MAx3UlAiMpfLjKwLgirpgxgnisoy5Mv1ICPmvjp6SC2T
RfnTrALlT8VC0i1HfRVl7j6LWAJADzxxfCRyQ0Ay69+/9cQJb1scyY9M7//GsDNK
6Kq/mf9gdwzjdscW9+iOoP8bni/wsc3y/iG0u0YIJTuj8N3smwQEXouCN2koTQEU
DkZP61AZYDVDg55MO0bnKmPBCg+qJJvy
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:36:03 2025 by rpki-client