
$ rpki-client -vvf rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft
File: PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft (raw, json)
Hash identifier: DpJYoxROWwVSTd7DM0F5iPEeZHi8VwO+iIta3iyXqcM=
Subject key identifier: F9:62:09:30:BA:AF:4A:51:72:17:0A:A0:7B:E7:BE:24:10:F6:9D:5F
Authority key identifier: 3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98
Certificate issuer: /CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198
Certificate serial: 0874
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft
Manifest number: 0827
Signing time: Tue 04 Nov 2025 21:13:57 +0000
Manifest this update: Tue 04 Nov 2025 21:13:57 +0000
Manifest next update: Tue 11 Nov 2025 21:13:57 +0000
Files and hashes: 1: PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl (hash: 0AwgeYLy5D+3BOQ/l1XeLvBvXe93X0yCZXGshy/Xl4o=)
2: CD1E94321A7D11F09A63C576C4F9AE02.roa (hash: vVJ4ZPcH3lbEogl2hIa71k4678GTw2JTT698EnTX0sk=)
3: DD8B40E41A7E11F098A37378C4F9AE02.roa (hash: L6v9N1lps3HT+4hWevJV8kUzpnpP386yo30tBD8aoeQ=)
4: 50379A94992611EC94DB646EC4F9AE02.roa (hash: UQSilDbz/hE2pQQ6qsVZpBDsORWehlq7xmMJwgsCEF0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl
rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:13:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2164 (0x874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91450A4, serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198
Validity
Not Before: Nov 4 21:13:57 2025 GMT
Not After : Nov 11 21:13:57 2025 GMT
Subject: CN=690a6c95-900d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:84:98:93:64:92:69:db:42:5f:ae:10:72:20:
30:e1:04:e7:32:3e:ab:f3:38:eb:25:07:5c:7a:58:
6b:c9:9f:df:9c:94:2e:98:9b:a3:77:ae:74:31:de:
36:a4:c3:cd:26:0e:a5:81:41:f7:52:7e:a2:6d:d3:
2a:34:a0:d9:fa:85:69:ab:9a:f4:ec:76:12:52:56:
29:94:0b:b2:e5:77:d6:49:39:88:2d:14:7c:e3:d8:
7f:a5:50:91:36:8b:6c:93:9f:67:48:04:e5:6b:cb:
61:4e:62:13:81:ea:6c:1d:70:33:88:80:04:ae:d9:
05:23:84:6d:a2:f3:ab:4f:b6:b6:73:9c:09:46:57:
98:a9:fb:fa:75:64:21:84:c0:96:dc:de:03:11:6d:
cd:bb:1e:78:46:95:6f:bb:17:d8:55:8a:3a:9c:a2:
e6:c6:3b:e8:25:cf:13:83:c1:f2:31:73:70:62:55:
ee:2b:e4:1d:57:65:39:49:f1:7a:42:2a:bf:fa:c9:
45:60:af:21:b8:e3:b0:1a:a3:9e:d4:2e:59:7e:69:
62:2f:33:0f:23:80:5d:33:a3:fe:c4:92:7b:40:5d:
80:89:65:3b:a5:84:9c:20:f7:19:49:0d:e5:8b:c8:
a3:ea:04:b8:6f:a5:27:3c:8d:d6:23:a3:72:55:6e:
7d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:62:09:30:BA:AF:4A:51:72:17:0A:A0:7B:E7:BE:24:10:F6:9D:5F
X509v3 Authority Key Identifier:
keyid:3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:94:da:af:bc:3d:1d:8b:50:f6:99:00:f0:e5:8f:16:c7:ac:
6c:10:b4:92:40:fd:85:6e:fc:84:2e:6c:98:da:e9:f1:73:46:
fd:f4:4a:78:87:83:e9:84:41:a0:5e:d7:1d:29:6e:68:59:41:
fd:15:89:f3:4c:2c:c4:41:75:71:80:0e:e5:f3:13:4d:ae:e9:
1c:75:0a:25:ad:13:56:2a:68:54:75:14:70:e5:83:43:9d:25:
ad:16:71:63:bf:75:c6:7d:bf:1e:47:6c:21:f2:2c:4e:4a:0a:
9e:72:e8:b2:4c:6f:53:33:fd:f0:f9:71:ec:0b:20:2a:90:ac:
22:3f:c3:73:43:6d:48:c5:43:4c:0b:3e:d9:5e:08:f6:70:8a:
d9:c5:5e:f2:8f:99:e6:d1:d6:3d:68:5e:b1:75:9d:de:33:c3:
8f:2b:43:c7:4b:72:fd:3e:0e:06:fd:b1:76:0d:a3:e2:6d:35:
0b:ef:43:cc:63:2f:c7:78:8a:b4:7f:00:3a:03:c0:c7:c2:b3:
5b:cd:1b:1a:bd:e0:a0:a6:c6:e9:e2:9c:87:ed:03:1f:c2:97:
c7:f9:8a:c4:79:c5:7d:23:8f:83:e5:66:f2:9e:22:f0:80:c3:
4b:55:86:2c:48:3e:2e:68:ac:21:4b:00:27:ad:e4:05:11:6c:
4c:1f:5f:88
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDUwQTQxMTAvBgNVBAUTKDNEMUQ2QTMzMkFFQTRFQzUwMjAzN0EwOTA5RjRDQzE5
RDQyREIxOTgwHhcNMjUxMTA0MjExMzU3WhcNMjUxMTExMjExMzU3WjAYMRYwFAYD
VQQDEw02OTBhNmM5NS05MDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzISYk2SSadtCX64QciAw4QTnMj6r8zjrJQdcelhryZ/fnJQumJujd650Md42
pMPNJg6lgUH3Un6ibdMqNKDZ+oVpq5r07HYSUlYplAuy5XfWSTmILRR849h/pVCR
Notsk59nSATla8thTmITgepsHXAziIAErtkFI4RtovOrT7a2c5wJRleYqfv6dWQh
hMCW3N4DEW3Nux54RpVvuxfYVYo6nKLmxjvoJc8Tg8HyMXNwYlXuK+QdV2U5SfF6
Qiq/+slFYK8huOOwGqOe1C5ZfmliLzMPI4BdM6P+xJJ7QF2AiWU7pYScIPcZSQ3l
i8ij6gS4b6UnPI3WI6NyVW59vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPliCTC6
r0pRchcKoHvnviQQ9p1fMB8GA1UdIwQYMBaAFD0dajMq6k7FAgN6CQn0zBnULbGY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTBBNC9ERDQ3MzY5ODBD
MzYxMUVCQTRFNDlFMjFDNEY5QUUwMi9QUjFxTXlycVRzVUNBM29KQ2ZUTUdkUXRz
WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BSMXFNeXJxVHNVQ0Ezb0pDZlRNR2RRdHNaZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTBBNC9ERDQ3MzY5ODBDMzYxMUVCQTRFNDlFMjFDNEY5QUUwMi9QUjFxTXlycVRz
VUNBM29KQ2ZUTUdkUXRzWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBLlNqvvD0di1D2mQDw5Y8Wx6xsELSSQP2FbvyELmyY2unxc0b99Ep4
h4PphEGgXtcdKW5oWUH9FYnzTCzEQXVxgA7l8xNNrukcdQolrRNWKmhUdRRw5YND
nSWtFnFjv3XGfb8eR2wh8ixOSgqecuiyTG9TM/3w+XHsCyAqkKwiP8NzQ21IxUNM
Cz7ZXgj2cIrZxV7yj5nm0dY9aF6xdZ3eM8OPK0PHS3L9Pg4G/bF2DaPibTUL70PM
Yy/HeIq0fwA6A8DHwrNbzRsaveCgpsbp4pyH7QMfwpfH+YrEecV9I4+D5WbyniLw
gMNLVYYsSD4uaKwhSwAnreQFEWxMH1+I
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:40:52 2025 by rpki-client