
$ rpki-client -vvf rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
File: zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft (raw, json)
Hash identifier: q6js2DszlQ9y27ZAqy6hxIIVNoU/ELhcRA3yJFefpbw=
Subject key identifier: 09:90:D6:C9:16:2A:53:1F:FC:9B:5F:39:55:69:69:61:35:D7:A9:1D
Authority key identifier: CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48
Certificate issuer: /CN=A91565C6/serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848
Certificate serial: 83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
Manifest number: 81
Signing time: Mon 03 Nov 2025 06:41:09 +0000
Manifest this update: Mon 03 Nov 2025 06:41:08 +0000
Manifest next update: Mon 10 Nov 2025 06:41:08 +0000
Files and hashes: 1: zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl (hash: kGUP6BgWqsg434/1raBt/rc7COMca4GZTcxYOBQ3JB0=)
2: 296C92D0F5B611EFB7E6426EC4F9AE02.roa (hash: DAG2avo3wM4Iv7tiFSCw0I7iwE7NYk5jbcu93twLDNo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl
rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:41:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91565C6, serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848
Validity
Not Before: Nov 3 06:41:08 2025 GMT
Not After : Nov 10 06:41:08 2025 GMT
Subject: CN=69084e84-4a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:15:8f:f9:1d:a2:64:6f:de:58:96:77:70:0d:
69:f4:8e:f3:f5:fe:d1:13:bc:77:c4:13:b1:01:42:
f5:ac:2f:b4:9f:b9:b7:f9:b1:57:f4:a8:72:96:05:
54:04:bf:c0:d5:b6:14:5e:f9:8d:25:03:60:82:de:
ba:c1:fe:f2:17:71:55:94:7b:18:bc:3f:34:22:c6:
59:0a:eb:40:c4:ba:e0:ca:f3:46:1b:c5:82:4b:f2:
20:ec:1b:42:0b:eb:fe:a5:25:b4:74:e4:9a:1b:29:
39:f3:3e:be:00:8a:0b:46:8e:13:8f:ab:ea:e4:f5:
d4:c2:0b:59:b2:6b:94:cf:19:ec:af:df:a1:14:f3:
80:ff:08:85:f7:51:75:2b:80:b2:58:5e:35:1a:7f:
ff:36:96:23:3e:ce:af:19:5f:a9:e2:7d:22:4c:75:
d0:b0:c2:86:01:6d:52:25:ac:60:95:ae:b4:95:3b:
0a:05:71:d0:46:09:9b:0b:57:75:e4:08:30:8a:69:
03:4e:a7:64:6a:c3:62:15:d4:84:44:7f:16:a3:19:
86:ed:bc:15:f3:e4:2b:7d:a4:43:43:a1:71:5f:a6:
d1:bb:00:88:1b:3e:15:7f:1e:36:b3:05:64:60:a5:
37:70:7c:fc:11:b0:89:e6:66:7a:3a:f7:d5:6d:f8:
c1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:90:D6:C9:16:2A:53:1F:FC:9B:5F:39:55:69:69:61:35:D7:A9:1D
X509v3 Authority Key Identifier:
keyid:CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:77:69:3d:ed:61:52:e8:ef:86:82:20:84:2e:42:55:fe:da:
58:6f:3e:a4:bd:f0:d5:5f:93:27:74:33:2c:0c:dd:69:1b:c0:
30:2d:94:6e:74:ca:66:30:e0:46:59:71:5d:cb:ce:d4:3f:5d:
0b:cd:c2:4d:35:48:e3:a5:db:cd:0d:d0:41:64:5f:dd:1f:f0:
10:de:05:e5:1c:e4:39:7b:9f:cb:a1:ad:6a:7c:dc:f0:79:17:
d3:32:2a:96:9f:b7:33:13:53:f8:ea:dd:bd:b4:f1:5f:b7:6c:
a6:97:68:da:05:0a:17:68:17:41:a9:cf:dd:76:d8:e3:c7:86:
c9:43:55:51:88:28:8d:6b:4f:ae:62:83:16:07:f5:1e:59:1f:
0b:58:f5:0b:2a:fe:99:a6:19:cd:b6:46:90:23:60:57:44:1b:
5e:d9:80:7c:1e:b4:5b:89:18:b0:b2:0c:d9:2d:3d:b6:08:10:
f0:67:00:23:e5:d0:99:26:64:04:f3:89:e6:b1:bf:7e:c9:05:
a4:a0:cf:a7:99:5a:72:04:94:e3:b5:54:c2:f2:7e:c5:48:1f:
7c:34:7f:d0:1e:8d:0b:ed:0a:7f:1e:07:a2:d3:1c:00:f8:7a:
1a:66:c5:ab:d4:fb:4d:44:a2:1e:32:40:cd:f9:38:00:77:c6:
5c:a2:bc:cd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY1QzYxMTAvBgNVBAUTKENENTM1QzdFQjMxQTQwQTNGREI4QUM0RDVENTc3QUY5
RDZDNTg4NDgwHhcNMjUxMTAzMDY0MTA4WhcNMjUxMTEwMDY0MTA4WjAYMRYwFAYD
VQQDEw02OTA4NGU4NC00YTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0xWP+R2iZG/eWJZ3cA1p9I7z9f7RE7x3xBOxAUL1rC+0n7m3+bFX9KhylgVU
BL/A1bYUXvmNJQNggt66wf7yF3FVlHsYvD80IsZZCutAxLrgyvNGG8WCS/Ig7BtC
C+v+pSW0dOSaGyk58z6+AIoLRo4Tj6vq5PXUwgtZsmuUzxnsr9+hFPOA/wiF91F1
K4CyWF41Gn//NpYjPs6vGV+p4n0iTHXQsMKGAW1SJaxgla60lTsKBXHQRgmbC1d1
5AgwimkDTqdkasNiFdSERH8WoxmG7bwV8+QrfaRDQ6FxX6bRuwCIGz4Vfx42swVk
YKU3cHz8EbCJ5mZ6OvfVbfjBNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmQ1skW
KlMf/JtfOVVpaWE116kdMB8GA1UdIwQYMBaAFM1TXH6zGkCj/bisTV1XevnWxYhI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjVDNi9EMjY1QjBDNkY0
MUYxMUVGODE3MDg4NjhDNEY5QUUwMi96Vk5jZnJNYVFLUDl1S3hOWFZkNi1kYkZp
RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pWTmNmck1hUUtQOXVLeE5YVmQ2LWRiRmlFZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NjVDNi9EMjY1QjBDNkY0MUYxMUVGODE3MDg4NjhDNEY5QUUwMi96Vk5jZnJNYVFL
UDl1S3hOWFZkNi1kYkZpRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDRd2k97WFS6O+GgiCELkJV/tpYbz6kvfDVX5MndDMsDN1pG8AwLZRu
dMpmMOBGWXFdy87UP10LzcJNNUjjpdvNDdBBZF/dH/AQ3gXlHOQ5e5/Loa1qfNzw
eRfTMiqWn7czE1P46t29tPFft2yml2jaBQoXaBdBqc/ddtjjx4bJQ1VRiCiNa0+u
YoMWB/UeWR8LWPULKv6ZphnNtkaQI2BXRBte2YB8HrRbiRiwsgzZLT22CBDwZwAj
5dCZJmQE84nmsb9+yQWkoM+nmVpyBJTjtVTC8n7FSB98NH/QHo0L7Qp/Hgei0xwA
+HoaZsWr1PtNRKIeMkDN+TgAd8ZcorzN
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:30:04 2025 by rpki-client