
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft
File: ntVkKdGun2AE-2-2eI6T-vYiV1k.mft (raw, json)
Hash identifier: RJA//XxsFP+jmgt7KQc5xJtImMMh7EKlvjA/uwrRAAo=
Subject key identifier: 7F:EC:C1:F5:07:63:B2:93:E7:43:DD:78:96:AF:AF:70:9B:87:95:64
Authority key identifier: 9E:D5:64:29:D1:AE:9F:60:04:FB:6F:B6:78:8E:93:FA:F6:22:57:59
Certificate issuer: /CN=A9142769/serialNumber=9ED56429D1AE9F6004FB6FB6788E93FAF6225759
Certificate serial: 4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft
Manifest number: 49
Signing time: Wed 05 Nov 2025 07:32:51 +0000
Manifest this update: Wed 05 Nov 2025 07:32:51 +0000
Manifest next update: Wed 12 Nov 2025 07:32:51 +0000
Files and hashes: 1: ntVkKdGun2AE-2-2eI6T-vYiV1k.crl (hash: QsqytC1iiCX35osj1ujZHjFDHksYay5kziuIshr8FMA=)
2: C8B7607C4B8D11F0B198C040C4F9AE02.roa (hash: i2BhMqJuRPJPw6EpQmAJmu0/MkHReXEBSLa+rZeCZ6I=)
3: C96601404B8D11F0B198C040C4F9AE02.roa (hash: T0dKTs8EMdDl2Inh3fwBdZE3Wa4Vfq9Mg4rvNVagedw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.crl
rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 07:32:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142769, serialNumber=9ED56429D1AE9F6004FB6FB6788E93FAF6225759
Validity
Not Before: Nov 5 07:32:51 2025 GMT
Not After : Nov 12 07:32:51 2025 GMT
Subject: CN=690afda3-0a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9a:94:41:0b:a4:b8:fc:6c:bc:e0:bb:d3:e2:
34:d8:76:d4:e4:c9:f1:f9:d8:13:ce:6b:72:ed:11:
be:0b:5d:6e:4f:dd:2f:58:69:9b:bf:d2:da:ca:f5:
b3:57:31:ed:a5:ce:61:41:a9:a8:8e:ae:3d:9c:83:
88:72:5d:6e:07:23:8a:cb:da:65:d9:28:e9:3e:5e:
b0:69:8a:6d:c6:6b:c9:a9:f8:1e:65:f7:8a:fb:57:
81:db:63:ab:d1:a8:ab:47:d2:c1:2f:8a:b1:94:a0:
5e:17:aa:24:28:74:64:e9:04:49:24:23:f8:8e:ee:
4f:eb:77:2d:47:6b:63:3a:7f:28:00:9f:d5:95:c4:
25:48:ce:a7:b1:33:78:22:75:82:32:62:1b:b0:69:
b9:37:39:0c:35:37:d2:fb:fb:35:e7:00:d0:ee:08:
df:b6:c3:59:fe:81:02:75:ef:7e:bf:e1:b7:d8:2d:
22:8f:24:99:06:85:b6:b9:c5:7c:1e:48:dd:99:d4:
8b:c6:ca:74:87:0f:b0:44:be:c3:74:b4:70:1f:6e:
65:14:23:a0:9e:f7:7c:a8:97:be:ca:ba:28:dd:b9:
4d:81:03:4b:a0:28:ba:29:bd:8e:bc:5c:75:0f:f6:
74:ed:d9:be:16:c2:55:95:d4:a8:d7:7e:bc:2b:57:
f5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EC:C1:F5:07:63:B2:93:E7:43:DD:78:96:AF:AF:70:9B:87:95:64
X509v3 Authority Key Identifier:
keyid:9E:D5:64:29:D1:AE:9F:60:04:FB:6F:B6:78:8E:93:FA:F6:22:57:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:99:3f:6c:99:53:9f:96:eb:30:4f:10:25:6b:32:7a:3f:7f:
c1:aa:fa:e7:12:1d:b1:1c:e1:64:e6:f5:cf:ff:8b:9b:a6:2f:
39:9d:68:ec:77:81:b9:84:07:90:89:9b:b4:d9:1e:a6:45:78:
d6:d1:27:3c:01:4a:94:46:83:46:16:d3:7c:d9:9e:65:4d:2b:
c3:e2:de:fb:59:0c:39:28:0f:0b:29:38:76:b9:c4:e2:cb:f0:
23:ad:01:39:58:a4:af:be:8a:01:70:6c:a9:8b:43:40:87:53:
ac:bf:27:35:97:75:3b:db:3b:53:ee:ec:fd:de:92:09:cd:09:
b9:98:75:0f:48:38:42:c0:f6:d3:ad:a7:28:d3:09:cf:06:38:
4d:42:f9:63:94:fa:e0:dc:83:73:5b:5b:b9:a3:7f:b6:ef:e9:
63:28:63:0b:b4:72:ee:c9:5c:c0:c7:ba:f7:16:32:92:14:f2:
b0:e1:08:ad:1e:86:74:6c:25:24:7b:48:40:26:b4:cc:e7:6a:
50:e1:40:e7:f4:0e:c8:80:91:47:33:7e:41:97:27:cf:7e:2c:
23:a5:dd:28:77:fb:35:ed:7f:a3:c1:22:de:d4:ea:12:89:23:
c2:1a:ee:ea:7d:3a:10:68:be:95:36:cc:6c:5d:49:56:16:1b:
8f:a5:e9:49
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
Mjc2OTExMC8GA1UEBRMoOUVENTY0MjlEMUFFOUY2MDA0RkI2RkI2Nzg4RTkzRkFG
NjIyNTc1OTAeFw0yNTExMDUwNzMyNTFaFw0yNTExMTIwNzMyNTFaMBgxFjAUBgNV
BAMTDTY5MGFmZGEzLTBhODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDImpRBC6S4/Gy84LvT4jTYdtTkyfH52BPOa3LtEb4LXW5P3S9YaZu/0trK9bNX
Me2lzmFBqaiOrj2cg4hyXW4HI4rL2mXZKOk+XrBpim3Ga8mp+B5l94r7V4HbY6vR
qKtH0sEvirGUoF4XqiQodGTpBEkkI/iO7k/rdy1Ha2M6fygAn9WVxCVIzqexM3gi
dYIyYhuwabk3OQw1N9L7+zXnANDuCN+2w1n+gQJ1736/4bfYLSKPJJkGhba5xXwe
SN2Z1IvGynSHD7BEvsN0tHAfbmUUI6Ce93yol77KuijduU2BA0ugKLopvY68XHUP
9nTt2b4WwlWV1KjXfrwrV/UxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUf+zB9Qdj
spPnQ914lq+vcJuHlWQwHwYDVR0jBBgwFoAUntVkKdGun2AE+2+2eI6T+vYiV1kw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNzY5LzQ2QkQ1NUMyNEI4
RDExRjBBM0Y0RkYzRkM0RjlBRTAyL250VmtLZEd1bjJBRS0yLTJlSTZULXZZaVYx
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbnRWa0tkR3VuMkFFLTItMmVJNlQtdllpVjFrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy
NzY5LzQ2QkQ1NUMyNEI4RDExRjBBM0Y0RkYzRkM0RjlBRTAyL250VmtLZEd1bjJB
RS0yLTJlSTZULXZZaVYxay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAEyZP2yZU5+W6zBPECVrMno/f8Gq+ucSHbEc4WTm9c//i5umLzmdaOx3
gbmEB5CJm7TZHqZFeNbRJzwBSpRGg0YW03zZnmVNK8Pi3vtZDDkoDwspOHa5xOLL
8COtATlYpK++igFwbKmLQ0CHU6y/JzWXdTvbO1Pu7P3ekgnNCbmYdQ9IOELA9tOt
pyjTCc8GOE1C+WOU+uDcg3NbW7mjf7bv6WMoYwu0cu7JXMDHuvcWMpIU8rDhCK0e
hnRsJSR7SEAmtMznalDhQOf0DsiAkUczfkGXJ89+LCOl3Sh3+zXtf6PBIt7U6hKJ
I8Ia7up9OhBovpU2zGxdSVYWG4+l6Uk=
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:39:29 2025 by rpki-client