
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft
File: evqYcujQ_5IpleWJO1nDIUdnsfw.mft (raw, json)
Hash identifier: 5lCm8lMA0fCurH+tntbbsNJIilrIuJXcP4IS11dAL9g=
Subject key identifier: 90:C2:1D:A1:6D:C1:57:49:24:DE:51:9C:E5:59:FF:7F:F9:04:46:38
Authority key identifier: 7A:FA:98:72:E8:D0:FF:92:29:95:E5:89:3B:59:C3:21:47:67:B1:FC
Certificate issuer: /CN=A9154AA5/serialNumber=7AFA9872E8D0FF922995E5893B59C3214767B1FC
Certificate serial: 0980
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft
Manifest number: 0978
Signing time: Sun 02 Nov 2025 20:03:30 +0000
Manifest this update: Sun 02 Nov 2025 20:03:29 +0000
Manifest next update: Sun 09 Nov 2025 20:03:29 +0000
Files and hashes: 1: evqYcujQ_5IpleWJO1nDIUdnsfw.crl (hash: 208VT7MsTYAkGil3xFDCLOJnCtstDjA8ui7OFDvXfW8=)
2: 8F1FBA54B0AA11EA9603E729C4F9AE02.roa (hash: +iwTzs5m/T4DUW8LNJ7XuCxYejcTHo86TwNrQogD1C4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.crl
rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 20:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2432 (0x980)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154AA5, serialNumber=7AFA9872E8D0FF922995E5893B59C3214767B1FC
Validity
Not Before: Nov 2 20:03:29 2025 GMT
Not After : Nov 9 20:03:29 2025 GMT
Subject: CN=6907b911-ec96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:59:62:f3:47:24:29:f4:05:77:8f:f7:72:
a3:79:08:8c:36:77:7c:61:32:e0:d6:eb:dc:62:e0:
14:74:d3:97:ef:f8:29:f8:34:d6:dc:ec:97:cc:81:
f1:a0:0d:82:fa:1c:f6:e1:20:5f:ad:ff:47:3c:a5:
4d:52:59:5b:16:89:d9:14:44:65:6d:7f:2c:aa:cd:
a6:b5:23:4f:ef:ac:0b:fc:19:9c:3c:9d:0b:9e:a9:
bf:1d:a2:c7:61:15:13:ed:7e:af:5c:81:a1:91:bf:
3d:db:62:fd:db:c1:2f:88:8c:63:af:ff:ee:2d:10:
9c:d0:cc:2e:a6:ea:ae:ed:86:70:71:2a:ff:04:04:
9b:9e:1c:38:39:70:40:aa:b8:66:9f:b9:03:8c:1a:
0e:a0:5c:b0:a5:15:e9:8b:7b:29:ee:5b:0b:03:76:
97:b7:d4:87:97:3f:7d:01:06:2d:bc:55:8d:b0:4f:
4a:90:66:e7:f4:c8:02:15:31:fa:d6:d3:a1:c0:83:
05:8d:6e:33:16:25:ed:d6:f3:c1:b9:a2:0c:97:ef:
af:25:7c:ab:ae:e0:ea:02:9e:ef:8e:7e:0d:07:90:
8d:6a:53:13:1d:ea:e9:2d:62:87:88:4a:b2:15:23:
01:04:fa:14:d6:a7:14:35:66:5a:c8:b1:83:bc:16:
1c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C2:1D:A1:6D:C1:57:49:24:DE:51:9C:E5:59:FF:7F:F9:04:46:38
X509v3 Authority Key Identifier:
keyid:7A:FA:98:72:E8:D0:FF:92:29:95:E5:89:3B:59:C3:21:47:67:B1:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:05:17:1a:11:c1:f5:c5:69:e6:eb:0c:94:72:c2:9d:e8:b1:
7a:a2:7c:b8:8e:a7:c2:2e:8a:d5:05:9f:d5:bc:e4:37:2c:f2:
57:2a:ba:fa:27:54:c1:23:03:ab:23:9c:34:39:a7:19:bc:5d:
7d:24:42:f8:c3:d2:df:c4:0d:94:db:e6:c3:92:f7:3e:40:6f:
6a:20:0f:23:70:2f:ba:3e:1d:b6:ac:8a:df:4e:d4:a1:2e:e1:
30:bf:c0:5b:0a:98:61:ef:af:e1:b9:3f:6e:12:28:ba:ab:22:
8d:16:29:af:73:27:47:ca:34:e6:59:d5:ee:c9:25:29:5a:11:
ff:d8:de:b1:15:c0:7e:58:1a:aa:e6:55:a6:7e:18:fe:08:4a:
e6:ea:ab:f7:05:ad:3a:03:2e:25:66:31:9f:52:70:7a:45:e9:
4e:07:c9:96:37:38:e7:f9:f9:d3:29:60:85:da:61:96:f3:4a:
99:4c:f3:15:22:28:a7:ad:ae:6f:9d:fd:54:ed:d8:d4:18:37:
82:9a:6a:9d:50:3c:3b:62:cf:c3:de:49:aa:b6:a7:b1:b9:22:
67:27:8d:dc:b1:69:b0:d4:9c:92:6f:2e:3d:a2:d9:07:c7:3f:
27:56:c5:d3:be:e8:6a:cf:60:25:48:a8:7e:9b:e4:42:62:98:
dc:96:25:b5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTRBQTUxMTAvBgNVBAUTKDdBRkE5ODcyRThEMEZGOTIyOTk1RTU4OTNCNTlDMzIx
NDc2N0IxRkMwHhcNMjUxMTAyMjAwMzI5WhcNMjUxMTA5MjAwMzI5WjAYMRYwFAYD
VQQDEw02OTA3YjkxMS1lYzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAugZZYvNHJCn0BXeP93KjeQiMNnd8YTLg1uvcYuAUdNOX7/gp+DTW3OyXzIHx
oA2C+hz24SBfrf9HPKVNUllbFonZFERlbX8sqs2mtSNP76wL/BmcPJ0Lnqm/HaLH
YRUT7X6vXIGhkb8922L928EviIxjr//uLRCc0Mwupuqu7YZwcSr/BASbnhw4OXBA
qrhmn7kDjBoOoFywpRXpi3sp7lsLA3aXt9SHlz99AQYtvFWNsE9KkGbn9MgCFTH6
1tOhwIMFjW4zFiXt1vPBuaIMl++vJXyrruDqAp7vjn4NB5CNalMTHerpLWKHiEqy
FSMBBPoU1qcUNWZayLGDvBYc+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDCHaFt
wVdJJN5RnOVZ/3/5BEY4MB8GA1UdIwQYMBaAFHr6mHLo0P+SKZXliTtZwyFHZ7H8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEFBNS84MzBFMjY5NEEw
QTkxMUVBQUYyRUYyMTFDNEY5QUUwMi9ldnFZY3VqUV81SXBsZVdKTzFuRElVZG5z
ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V2cVljdWpRXzVJcGxlV0pPMW5ESVVkbnNmdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NEFBNS84MzBFMjY5NEEwQTkxMUVBQUYyRUYyMTFDNEY5QUUwMi9ldnFZY3VqUV81
SXBsZVdKTzFuRElVZG5zZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQBRcaEcH1xWnm6wyUcsKd6LF6ony4jqfCLorVBZ/VvOQ3LPJXKrr6
J1TBIwOrI5w0OacZvF19JEL4w9LfxA2U2+bDkvc+QG9qIA8jcC+6Ph22rIrfTtSh
LuEwv8BbCphh76/huT9uEii6qyKNFimvcydHyjTmWdXuySUpWhH/2N6xFcB+WBqq
5lWmfhj+CErm6qv3Ba06Ay4lZjGfUnB6RelOB8mWNzjn+fnTKWCF2mGW80qZTPMV
Iiinra5vnf1U7djUGDeCmmqdUDw7Ys/D3kmqtqexuSJnJ43csWmw1JySby49otkH
xz8nVsXTvuhqz2AlSKh+m+RCYpjcliW1
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:14:32 2025 by rpki-client