
$ rpki-client -vvf rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
File: 0efCSnRBTL3c_NiORsXVzTs-rtc.mft (raw, json)
Hash identifier: 1O21fuGVdyXUvab3nHpuocLhigaQFZYosgNKiLxb7no=
Subject key identifier: 97:CC:A2:9B:C6:10:A7:2B:C4:D6:02:57:B7:E2:C0:47:3A:99:85:9D
Authority key identifier: D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7
Certificate issuer: /CN=A91606AF/serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7
Certificate serial: 073F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
Manifest number: 0726
Signing time: Fri 24 Oct 2025 22:53:49 +0000
Manifest this update: Fri 24 Oct 2025 22:53:48 +0000
Manifest next update: Fri 31 Oct 2025 22:53:48 +0000
Files and hashes: 1: 0efCSnRBTL3c_NiORsXVzTs-rtc.crl (hash: UrQg62KkSslOvCBu2o3hTUYaQsbAffoDxQFUvE38nhI=)
2: 8C2D64121CB011EDA4740D7EC4F9AE02.roa (hash: +fRxqOXyB3e8V6DJsPZloFZurNNVr8ZfU/q63aOPSF0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl
rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 22:53:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1855 (0x73f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91606AF, serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7
Validity
Not Before: Oct 24 22:53:48 2025 GMT
Not After : Oct 31 22:53:48 2025 GMT
Subject: CN=68fc037c-44f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:44:51:97:a3:b0:37:9a:50:5e:4d:8a:1d:3e:
b8:01:2a:95:b8:e2:53:d4:dd:6c:60:8a:61:1d:2e:
89:61:e7:6d:5b:b2:6c:a7:35:e9:5d:05:03:46:8b:
55:61:e1:ab:4f:87:96:25:c3:f1:42:c8:97:5a:be:
75:25:04:67:1d:6c:30:b1:a5:9a:c4:21:5c:cf:19:
95:09:00:1c:07:0d:1e:8a:93:2e:95:ed:7b:aa:bd:
c0:73:d0:4d:11:e2:99:85:ad:91:1f:b0:8f:e0:af:
f9:e9:24:7e:a7:d3:fa:d2:4a:61:29:4e:b1:0c:9a:
e3:ae:10:06:fd:dc:e8:66:d5:d3:cb:ed:01:ba:34:
00:19:27:ce:3d:6d:90:82:41:ec:d8:6a:58:03:bd:
55:68:fb:ab:80:9b:39:db:7a:7e:87:47:99:b3:ad:
02:8b:21:b0:09:2a:93:6e:30:65:b8:12:31:cf:4c:
21:5a:3b:2e:e3:21:e2:6d:f0:d1:e0:fb:72:64:b6:
92:d0:c9:dd:f6:eb:f1:cc:84:49:c9:a8:58:db:8d:
2e:e1:92:44:f5:30:f2:a0:99:98:a2:91:7c:5c:cf:
56:a6:43:75:6a:a0:9a:11:2b:a6:72:3f:1d:34:ce:
a5:b1:e8:91:da:45:c6:24:b9:9d:77:03:ca:71:e7:
7a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CC:A2:9B:C6:10:A7:2B:C4:D6:02:57:B7:E2:C0:47:3A:99:85:9D
X509v3 Authority Key Identifier:
keyid:D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:5c:f7:4d:4c:ed:49:83:7b:97:22:8c:da:b0:75:f3:00:a3:
38:b5:27:02:df:6a:32:6f:4e:fd:3e:25:54:ac:b9:28:c6:2a:
43:d7:63:9e:cc:d0:b5:0a:cc:ca:02:9e:3d:20:5a:65:ff:de:
67:f2:80:48:3c:2e:53:18:e3:98:59:7c:35:2d:ad:37:89:b1:
11:f8:05:ac:92:bf:20:6f:96:61:16:83:1c:51:79:58:fd:29:
a2:fc:3c:a2:91:9c:dc:3b:99:0b:34:a7:99:1b:c1:eb:8c:ba:
48:3a:19:0b:b3:2e:21:d6:30:1a:1f:52:19:dd:6d:a2:cb:61:
5e:7f:a9:64:ce:4b:72:80:50:99:0c:b7:1e:69:0e:23:fe:87:
4c:9a:57:38:c6:ee:15:02:18:61:50:b6:ac:3c:cf:a3:3d:ec:
9e:0f:35:e4:5c:38:ce:0b:34:55:2d:6b:a0:f4:a6:01:b0:68:
01:5e:65:28:6d:7b:e1:c2:f0:69:89:13:b1:a6:68:be:a5:11:
db:63:57:0f:c9:bc:65:e1:a9:0e:95:91:26:b0:f2:c6:73:2e:
19:56:f1:20:ae:af:9e:a3:ec:3c:3e:e8:b0:c9:50:3f:3a:8b:
b3:d2:38:1b:74:b0:70:3a:0b:3f:08:ff:3b:57:5e:a7:27:f3:
43:da:ee:e6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA2QUYxMTAvBgNVBAUTKEQxRTdDMjRBNzQ0MTRDQkREQ0ZDRDg4RTQ2QzVENUNE
M0IzRUFFRDcwHhcNMjUxMDI0MjI1MzQ4WhcNMjUxMDMxMjI1MzQ4WjAYMRYwFAYD
VQQDEw02OGZjMDM3Yy00NGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyERRl6OwN5pQXk2KHT64ASqVuOJT1N1sYIphHS6JYedtW7JspzXpXQUDRotV
YeGrT4eWJcPxQsiXWr51JQRnHWwwsaWaxCFczxmVCQAcBw0eipMule17qr3Ac9BN
EeKZha2RH7CP4K/56SR+p9P60kphKU6xDJrjrhAG/dzoZtXTy+0BujQAGSfOPW2Q
gkHs2GpYA71VaPurgJs523p+h0eZs60CiyGwCSqTbjBluBIxz0whWjsu4yHibfDR
4PtyZLaS0Mnd9uvxzIRJyahY240u4ZJE9TDyoJmYopF8XM9WpkN1aqCaESumcj8d
NM6lseiR2kXGJLmddwPKced6/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfMopvG
EKcrxNYCV7fiwEc6mYWdMB8GA1UdIwQYMBaAFNHnwkp0QUy93PzYjkbF1c07Pq7X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDZBRi9BMDk1OEYzMDVF
Q0QxMUVCOTA4NzYzNzJDNEY5QUUwMi8wZWZDU25SQlRMM2NfTmlPUnNYVnpUcy1y
dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBlZkNTblJCVEwzY19OaU9Sc1hWelRzLXJ0Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDZBRi9BMDk1OEYzMDVFQ0QxMUVCOTA4NzYzNzJDNEY5QUUwMi8wZWZDU25SQlRM
M2NfTmlPUnNYVnpUcy1ydGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBWXPdNTO1Jg3uXIozasHXzAKM4tScC32oyb079PiVUrLkoxipD12Oe
zNC1CszKAp49IFpl/95n8oBIPC5TGOOYWXw1La03ibER+AWskr8gb5ZhFoMcUXlY
/Smi/DyikZzcO5kLNKeZG8HrjLpIOhkLsy4h1jAaH1IZ3W2iy2Fef6lkzktygFCZ
DLceaQ4j/odMmlc4xu4VAhhhULasPM+jPeyeDzXkXDjOCzRVLWug9KYBsGgBXmUo
bXvhwvBpiROxpmi+pRHbY1cPybxl4akOlZEmsPLGcy4ZVvEgrq+eo+w8PuiwyVA/
Oouz0jgbdLBwOgs/CP87V16nJ/ND2u7m
-----END CERTIFICATE-----
Generated at Sun Oct 26 16:12:21 2025 by rpki-client