
$ rpki-client -vvf rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft
File: arqG0wSq9k60oJeym6VXeGDMhW8.mft (raw, json)
Hash identifier: P1kmT4W/EAg0ftJzE6WoO+leCP6kzXMfA4IvlE6OCsw=
Subject key identifier: 27:DB:B1:F7:21:17:95:FE:64:FB:8B:82:94:82:B6:39:F1:D0:2A:55
Authority key identifier: 6A:BA:86:D3:04:AA:F6:4E:B4:A0:97:B2:9B:A5:57:78:60:CC:85:6F
Certificate issuer: /CN=A915290D/serialNumber=6ABA86D304AAF64EB4A097B29BA5577860CC856F
Certificate serial: 014B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft
Manifest number: 0146
Signing time: Mon 03 Nov 2025 04:24:59 +0000
Manifest this update: Mon 03 Nov 2025 04:24:58 +0000
Manifest next update: Mon 10 Nov 2025 04:24:58 +0000
Files and hashes: 1: arqG0wSq9k60oJeym6VXeGDMhW8.crl (hash: fmnwe4new0iYpm0vKpc6vhFA+D71KHJfOGLhrRtNM8k=)
2: FFB6E08AF6A111EEBC0EF62FC4F9AE02.roa (hash: 0FUmFGEae/WI4oEvQ4bozFrCGWW/xCiGwTH0VQcaeIw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.crl
rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 04:24:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915290D, serialNumber=6ABA86D304AAF64EB4A097B29BA5577860CC856F
Validity
Not Before: Nov 3 04:24:58 2025 GMT
Not After : Nov 10 04:24:58 2025 GMT
Subject: CN=69082e9b-9030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a0:1c:2d:f5:6a:83:fd:ba:46:c7:30:fa:85:
33:56:40:11:e4:a0:d5:95:6a:19:ce:bb:82:ba:39:
f3:b4:5c:37:6a:04:4d:3e:10:65:0a:d2:8f:d0:c4:
75:5b:eb:0d:29:1f:72:83:78:72:81:a4:5f:54:02:
49:0d:36:a5:8e:f5:d0:b2:70:dd:ed:e2:60:48:d6:
b5:bc:08:ee:0a:42:c9:1e:ad:fd:6f:65:07:fe:40:
e4:56:a4:f5:3f:fd:4f:89:42:ed:59:af:41:1b:01:
01:42:70:5b:fd:5b:59:a6:8a:92:a6:45:e7:56:25:
51:6a:a0:40:f6:3d:06:8a:a3:e3:b1:a5:3a:b4:06:
12:57:56:f0:04:7b:74:09:68:7e:af:31:08:5f:54:
10:d2:21:20:f3:83:40:6f:1e:8c:48:a1:5e:be:46:
6d:0f:11:6d:7b:a2:54:0e:25:cd:2e:4a:9f:10:ac:
fc:5d:7f:4a:b0:ff:9a:44:7e:42:a5:24:5d:2f:c7:
45:ea:34:28:c5:81:54:30:bb:bb:81:45:13:4f:8c:
35:f7:08:67:9d:57:25:c3:3d:db:17:4d:8a:0d:b7:
38:68:36:37:e3:79:c8:85:06:91:28:8e:59:d4:df:
e9:f6:1b:3a:bb:1c:89:8c:e5:ee:2c:a1:ac:1f:2e:
c7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DB:B1:F7:21:17:95:FE:64:FB:8B:82:94:82:B6:39:F1:D0:2A:55
X509v3 Authority Key Identifier:
keyid:6A:BA:86:D3:04:AA:F6:4E:B4:A0:97:B2:9B:A5:57:78:60:CC:85:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:81:52:f6:bc:4b:6e:dd:da:39:71:54:72:7d:99:e2:69:b6:
ad:9b:e0:0f:10:4f:50:29:13:1f:dd:a9:c8:cf:a2:96:b0:df:
a8:79:27:af:f2:1f:4b:af:af:7d:fa:b6:de:82:76:d4:32:ce:
1d:58:42:7b:23:02:db:b0:ca:ff:4f:8a:a1:2a:2e:95:e1:6f:
bf:7d:84:e1:9f:1e:5a:f1:3a:21:69:e7:79:76:f8:4d:df:b4:
6d:21:17:c1:03:19:42:44:ac:38:f1:ba:f9:2d:5e:3b:7d:96:
eb:76:df:7f:e7:ff:d6:2b:76:c9:ef:55:56:0c:0c:ec:f6:55:
6c:de:42:e5:ae:f3:06:da:76:4f:d3:b5:ca:eb:28:a7:f1:54:
0e:97:19:44:d7:9a:7c:32:2e:a3:8b:a7:88:68:59:8b:50:f0:
79:68:7b:b6:88:92:7f:6b:4b:94:cb:99:b4:60:66:9d:be:c6:
16:89:71:7f:ab:49:3a:c6:52:5a:5b:16:11:5d:2e:c1:54:af:
4d:c0:61:4f:a1:59:60:c7:4e:d6:db:8d:69:2d:99:e0:ac:6b:
b3:16:d0:5d:09:07:06:83:97:af:a7:53:bb:8f:16:ee:6d:22:
4d:ee:2c:e2:ab:f4:5c:f4:47:2f:f3:99:5a:16:93:12:78:75:
6c:3c:c7:fe
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTI5MEQxMTAvBgNVBAUTKDZBQkE4NkQzMDRBQUY2NEVCNEEwOTdCMjlCQTU1Nzc4
NjBDQzg1NkYwHhcNMjUxMTAzMDQyNDU4WhcNMjUxMTEwMDQyNDU4WjAYMRYwFAYD
VQQDEw02OTA4MmU5Yi05MDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4aAcLfVqg/26Rscw+oUzVkAR5KDVlWoZzruCujnztFw3agRNPhBlCtKP0MR1
W+sNKR9yg3hygaRfVAJJDTaljvXQsnDd7eJgSNa1vAjuCkLJHq39b2UH/kDkVqT1
P/1PiULtWa9BGwEBQnBb/VtZpoqSpkXnViVRaqBA9j0GiqPjsaU6tAYSV1bwBHt0
CWh+rzEIX1QQ0iEg84NAbx6MSKFevkZtDxFte6JUDiXNLkqfEKz8XX9KsP+aRH5C
pSRdL8dF6jQoxYFUMLu7gUUTT4w19whnnVclwz3bF02KDbc4aDY343nIhQaRKI5Z
1N/p9hs6uxyJjOXuLKGsHy7HyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfbsfch
F5X+ZPuLgpSCtjnx0CpVMB8GA1UdIwQYMBaAFGq6htMEqvZOtKCXspulV3hgzIVv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjkwRC9BNjg0OUFDOEQw
MjkxMUVFOUU2Q0JBNDBDNEY5QUUwMi9hcnFHMHdTcTlrNjBvSmV5bTZWWGVHRE1o
VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FycUcwd1NxOWs2MG9KZXltNlZYZUdETWhXOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MjkwRC9BNjg0OUFDOEQwMjkxMUVFOUU2Q0JBNDBDNEY5QUUwMi9hcnFHMHdTcTlr
NjBvSmV5bTZWWGVHRE1oVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC3gVL2vEtu3do5cVRyfZniabatm+APEE9QKRMf3anIz6KWsN+oeSev
8h9Lr699+rbegnbUMs4dWEJ7IwLbsMr/T4qhKi6V4W+/fYThnx5a8Tohaed5dvhN
37RtIRfBAxlCRKw48br5LV47fZbrdt9/5//WK3bJ71VWDAzs9lVs3kLlrvMG2nZP
07XK6yin8VQOlxlE15p8Mi6ji6eIaFmLUPB5aHu2iJJ/a0uUy5m0YGadvsYWiXF/
q0k6xlJaWxYRXS7BVK9NwGFPoVlgx07W241pLZngrGuzFtBdCQcGg5evp1O7jxbu
bSJN7iziq/Rc9Ecv85laFpMSeHVsPMf+
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:25:31 2025 by rpki-client