
$ rpki-client -vvf rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
File: u7bmAQQ3QyUFSIC308E15vx8yrE.mft (raw, json)
Hash identifier: FWrQQYlV8upuFU7opyUx3hI0kL5fKNPAJ64JATIb1zQ=
Subject key identifier: 0B:3A:2A:D7:EE:2A:ED:44:DE:DB:B9:69:E5:71:CA:71:3D:D7:C6:72
Authority key identifier: BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1
Certificate issuer: /CN=A912804A/serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
Certificate serial: 0240
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
Manifest number: 023B
Signing time: Wed 05 Nov 2025 01:57:56 +0000
Manifest this update: Wed 05 Nov 2025 01:57:55 +0000
Manifest next update: Wed 12 Nov 2025 01:57:55 +0000
Files and hashes: 1: u7bmAQQ3QyUFSIC308E15vx8yrE.crl (hash: YK6T25vCYWHfPOISLyMV2rJSfKPOHLojOIoz32xKqPM=)
2: CCB0DBA8CB2911EE9CE70483C4F9AE02.roa (hash: +L4H64N18c7HC9b7a2kMN0oPwzUDs4ByILHmodSVj7c=)
3: 003D7FEE15E811F0841B1A7DC4F9AE02.roa (hash: NzfvN2nV9saQebWeBwyNL6bb8Qj6DnzhJ2bxOu8Ukwk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl
rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:57:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 576 (0x240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912804A, serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
Validity
Not Before: Nov 5 01:57:55 2025 GMT
Not After : Nov 12 01:57:55 2025 GMT
Subject: CN=690aaf23-6e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cd:8d:2a:26:b1:cc:36:45:7a:6a:9e:26:57:
fe:dc:ae:2e:41:ed:51:bb:14:78:a8:8d:17:d0:53:
a5:de:d1:fd:07:56:00:58:12:01:4d:6e:1b:c3:c1:
76:9e:db:57:9c:b2:11:64:1c:e0:80:27:96:28:0c:
81:74:1a:be:75:b6:c4:ba:e8:f3:5e:68:af:c6:90:
40:a8:2c:2e:ce:31:f8:a7:e7:06:be:f0:a7:94:3c:
a1:1f:43:fb:17:6f:d3:6a:89:d5:8d:65:12:e3:aa:
92:61:3e:ec:88:bd:ff:b6:45:1d:35:7e:f6:0b:45:
15:c1:05:09:7a:ea:33:33:08:4e:69:24:0f:2b:4f:
03:53:87:ca:dd:45:c1:90:27:27:18:b9:9e:15:6b:
bb:57:f7:29:54:3f:dc:e8:23:8c:ea:24:88:5c:fd:
f1:0d:37:0e:bc:7e:d9:ca:74:3d:dc:07:b6:8b:70:
69:0e:a5:03:47:13:b5:d8:61:1a:88:cd:35:7f:64:
0e:5b:f2:bf:59:de:6d:08:06:9d:bd:21:6c:67:8a:
ec:3f:df:cb:3d:0e:3c:33:e6:5b:27:39:de:44:ef:
4d:83:6b:11:43:09:0d:66:07:6f:c6:f5:ba:e2:b0:
48:ed:6c:49:09:6a:ed:63:87:89:fa:47:c8:b8:c0:
cf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3A:2A:D7:EE:2A:ED:44:DE:DB:B9:69:E5:71:CA:71:3D:D7:C6:72
X509v3 Authority Key Identifier:
keyid:BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:2d:f3:8e:fe:2c:82:36:87:c0:8c:b7:2e:91:f2:01:46:6d:
40:13:8d:ae:bb:0d:f7:04:b1:e4:e8:5a:f4:30:2c:f4:f2:a5:
d2:33:7a:35:76:cf:17:b4:33:62:ff:b8:8d:6c:d3:13:86:47:
b6:38:a0:d5:7a:aa:2d:08:0b:fb:b7:b5:f5:c8:02:05:9e:c9:
e2:df:28:8d:8f:f5:6c:92:c9:80:4b:d7:51:50:71:9f:32:e4:
ea:f1:7a:ea:ac:15:f4:00:aa:cb:88:51:52:eb:9d:70:14:52:
80:95:ac:b0:0b:90:0a:47:e3:c8:58:04:a8:c2:be:64:59:20:
b4:9c:db:b1:01:2d:fe:85:ce:df:3d:c8:fc:dc:e1:8f:9d:f5:
cf:81:dc:3a:50:92:db:99:42:cc:eb:a5:9b:81:f0:09:fe:c4:
90:fc:25:11:2f:3b:13:28:99:9f:b8:32:1e:ad:57:07:88:cd:
59:15:4b:38:8a:34:ba:1f:5b:86:08:7b:5e:4b:0f:7b:61:a8:
3f:17:52:33:cb:77:8e:f9:78:14:e9:ac:2f:23:43:89:aa:98:
4a:5a:0c:88:e7:de:9e:00:b6:0f:38:94:e0:01:f2:bc:d2:66:
1f:fd:98:23:10:c6:08:c4:a2:fd:1f:ab:cb:e8:7b:f9:5e:12:
5d:c6:7b:87
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjgwNEExMTAvBgNVBAUTKEJCQjZFNjAxMDQzNzQzMjUwNTQ4ODBCN0QzQzEzNUU2
RkM3Q0NBQjEwHhcNMjUxMTA1MDE1NzU1WhcNMjUxMTEyMDE1NzU1WjAYMRYwFAYD
VQQDEw02OTBhYWYyMy02ZTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzc2NKiaxzDZFemqeJlf+3K4uQe1RuxR4qI0X0FOl3tH9B1YAWBIBTW4bw8F2
nttXnLIRZBzggCeWKAyBdBq+dbbEuujzXmivxpBAqCwuzjH4p+cGvvCnlDyhH0P7
F2/TaonVjWUS46qSYT7siL3/tkUdNX72C0UVwQUJeuozMwhOaSQPK08DU4fK3UXB
kCcnGLmeFWu7V/cpVD/c6COM6iSIXP3xDTcOvH7ZynQ93Ae2i3BpDqUDRxO12GEa
iM01f2QOW/K/Wd5tCAadvSFsZ4rsP9/LPQ48M+ZbJzneRO9Ng2sRQwkNZgdvxvW6
4rBI7WxJCWrtY4eJ+kfIuMDPFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAs6Ktfu
Ku1E3tu5aeVxynE918ZyMB8GA1UdIwQYMBaAFLu25gEEN0MlBUiAt9PBNeb8fMqx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODA0QS85NUE4MTAxNDUw
NzcxMUVEOUY3MjU5MjhDNEY5QUUwMi91N2JtQVFRM1F5VUZTSUMzMDhFMTV2eDh5
ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3U3Ym1BUVEzUXlVRlNJQzMwOEUxNXZ4OHlyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
ODA0QS85NUE4MTAxNDUwNzcxMUVEOUY3MjU5MjhDNEY5QUUwMi91N2JtQVFRM1F5
VUZTSUMzMDhFMTV2eDh5ckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCuLfOO/iyCNofAjLcukfIBRm1AE42uuw33BLHk6Fr0MCz08qXSM3o1
ds8XtDNi/7iNbNMThke2OKDVeqotCAv7t7X1yAIFnsni3yiNj/VsksmAS9dRUHGf
MuTq8XrqrBX0AKrLiFFS651wFFKAlaywC5AKR+PIWASowr5kWSC0nNuxAS3+hc7f
Pcj83OGPnfXPgdw6UJLbmULM66WbgfAJ/sSQ/CURLzsTKJmfuDIerVcHiM1ZFUs4
ijS6H1uGCHteSw97Yag/F1Izy3eO+XgU6awvI0OJqphKWgyI596eALYPOJTgAfK8
0mYf/ZgjEMYIxKL9H6vL6Hv5XhJdxnuH
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:25:55 2025 by rpki-client