
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft
File: -7pKlgm0F05stHuVg04qnD2WhmM.mft (raw, json)
Hash identifier: wvRCHdHyLuccJ6XFNO3G9AjVltjaRb4jMZoVDhT0noM=
Subject key identifier: 5A:68:24:E8:1D:2A:61:C9:E8:70:39:BE:DC:E5:BA:15:5C:DE:51:25
Authority key identifier: FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63
Certificate issuer: /CN=A912F1D5/serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663
Certificate serial: 0CAD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft
Manifest number: 0C87
Signing time: Tue 04 Nov 2025 18:40:04 +0000
Manifest this update: Tue 04 Nov 2025 18:40:04 +0000
Manifest next update: Tue 11 Nov 2025 18:40:04 +0000
Files and hashes: 1: -7pKlgm0F05stHuVg04qnD2WhmM.crl (hash: WQxon8R30Tvte2QenkF7aN/AA32CUVCgiC7pnXd+v3g=)
2: 392036B4808B11EFAB024F45C4F9AE02.roa (hash: jLmFIeuFfW/kA9gB2qa9B520Ov6OJzEYyswQvxuxZy4=)
3: 92F7BE58815511EF94F0101AC4F9AE02.roa (hash: Jod4UyMRx/RISNG7y9zB/lgaFI3cJMU1Lc5wZ68aw+0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl
rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 18:40:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3245 (0xcad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F1D5, serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663
Validity
Not Before: Nov 4 18:40:04 2025 GMT
Not After : Nov 11 18:40:04 2025 GMT
Subject: CN=690a4884-546c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1e:7b:30:28:88:51:98:5f:83:65:a8:18:d8:
56:2b:19:38:76:d7:8b:5e:27:56:3d:0f:cf:9d:53:
0c:b7:f1:56:8f:7c:d2:23:50:5c:4f:71:eb:bd:8c:
c8:33:d8:4c:99:3c:a0:f5:00:79:ab:7b:d5:4b:18:
a9:37:b4:a9:d6:9e:45:b9:8b:dd:77:44:d0:c8:a7:
2a:df:24:22:52:50:61:ac:26:fe:3f:b2:5e:7d:1a:
0d:e0:ce:6e:1e:8f:ae:01:98:04:62:46:11:bc:9b:
2c:4d:0b:3b:33:34:b2:4b:eb:7d:2f:c1:52:ac:3e:
89:33:c8:af:bd:01:42:37:e0:57:73:f4:62:59:72:
26:fb:85:b9:29:40:63:f8:ac:76:15:45:1c:ab:85:
18:32:dd:e2:fb:ed:f7:0b:d3:80:4a:9e:14:78:12:
d8:85:5e:1e:b4:df:69:51:5a:73:ba:b9:63:40:7d:
6a:67:50:69:30:83:47:d0:24:53:24:5c:86:3d:6f:
13:ad:0a:58:54:70:45:c7:ec:a1:f7:ff:8f:a4:ab:
5a:6e:2d:67:10:1f:27:da:57:ff:15:95:a7:52:78:
ca:f9:d3:4e:99:7e:ea:3b:eb:b0:46:8a:9c:14:48:
ac:dd:05:a7:d6:c5:99:e0:1a:d3:0c:68:0f:ce:c9:
a5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:68:24:E8:1D:2A:61:C9:E8:70:39:BE:DC:E5:BA:15:5C:DE:51:25
X509v3 Authority Key Identifier:
keyid:FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:8a:d4:37:ae:ca:a1:48:b1:af:c6:7b:d8:42:38:17:7d:6f:
bd:38:a7:8b:1c:f3:03:d9:6c:3e:05:6b:d0:6f:74:11:56:76:
63:ab:f0:bf:ca:44:9f:a5:e9:e5:46:56:2e:38:37:27:40:95:
f6:65:88:90:c1:c5:37:95:71:fd:8e:f8:75:7a:ac:72:7b:de:
b7:14:17:21:9e:74:21:10:e5:b8:5a:db:42:22:6b:3f:1e:60:
d6:d3:69:89:1c:fc:18:98:34:c0:af:66:40:6a:65:d3:bf:2d:
cc:c8:45:93:44:c5:ff:07:6e:7d:eb:bf:1c:ca:0f:a2:18:bd:
73:95:aa:6b:d5:cc:48:69:e9:2c:22:96:2e:d3:c1:f2:f1:e2:
98:a9:e3:43:05:5a:31:ea:14:4c:78:fb:b0:9c:52:58:3f:6f:
fb:7b:52:e7:c0:f5:89:ea:70:11:be:f7:6f:7c:38:2a:32:19:
82:44:85:5c:f5:31:1f:5e:89:9d:18:f0:22:e8:59:f8:7e:25:
3c:6c:96:df:da:c8:1f:0e:ad:cc:c3:a4:13:8d:87:75:b5:6a:
f0:e3:08:15:52:a3:26:80:65:fc:ba:52:90:19:50:17:f6:d3:
e3:f3:a7:21:56:53:91:ef:bd:1a:a7:7a:a1:83:1e:4b:98:93:
af:57:14:d1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkYxRDUxMTAvBgNVBAUTKEZCQkE0QTk2MDlCNDE3NEU2Q0I0N0I5NTgzNEUyQTlD
M0Q5Njg2NjMwHhcNMjUxMTA0MTg0MDA0WhcNMjUxMTExMTg0MDA0WjAYMRYwFAYD
VQQDEw02OTBhNDg4NC01NDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwB57MCiIUZhfg2WoGNhWKxk4dteLXidWPQ/PnVMMt/FWj3zSI1BcT3HrvYzI
M9hMmTyg9QB5q3vVSxipN7Sp1p5FuYvdd0TQyKcq3yQiUlBhrCb+P7JefRoN4M5u
Ho+uAZgEYkYRvJssTQs7MzSyS+t9L8FSrD6JM8ivvQFCN+BXc/RiWXIm+4W5KUBj
+Kx2FUUcq4UYMt3i++33C9OASp4UeBLYhV4etN9pUVpzurljQH1qZ1BpMINH0CRT
JFyGPW8TrQpYVHBFx+yh9/+PpKtabi1nEB8n2lf/FZWnUnjK+dNOmX7qO+uwRoqc
FEis3QWn1sWZ4BrTDGgPzsml1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpoJOgd
KmHJ6HA5vtzluhVc3lElMB8GA1UdIwQYMBaAFPu6SpYJtBdObLR7lYNOKpw9loZj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjFENS9FRTAxODA3ODBG
NjIxMUVBQTcwNkFGM0RDNEY5QUUwMi8tN3BLbGdtMEYwNXN0SHVWZzA0cW5EMldo
bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy03cEtsZ20wRjA1c3RIdVZnMDRxbkQyV2htTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RjFENS9FRTAxODA3ODBGNjIxMUVBQTcwNkFGM0RDNEY5QUUwMi8tN3BLbGdtMEYw
NXN0SHVWZzA0cW5EMldobU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAJitQ3rsqhSLGvxnvYQjgXfW+9OKeLHPMD2Ww+BWvQb3QRVnZjq/C/
ykSfpenlRlYuODcnQJX2ZYiQwcU3lXH9jvh1eqxye963FBchnnQhEOW4WttCIms/
HmDW02mJHPwYmDTAr2ZAamXTvy3MyEWTRMX/B259678cyg+iGL1zlapr1cxIaeks
IpYu08Hy8eKYqeNDBVox6hRMePuwnFJYP2/7e1LnwPWJ6nARvvdvfDgqMhmCRIVc
9TEfXomdGPAi6Fn4fiU8bJbf2sgfDq3Mw6QTjYd1tWrw4wgVUqMmgGX8ulKQGVAX
9tPj86chVlOR770ap3qhgx5LmJOvVxTR
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:25:10 2025 by rpki-client