
$ rpki-client -vvf rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft
File: 83VHbzI13D1SUXHivpIRY45JCEc.mft (raw, json)
Hash identifier: d4WHIVQrbbo8ylGe76Ki7yD7h7WL/MaqtYcpZuVQQu4=
Subject key identifier: 5F:02:DF:40:0F:9D:2B:6E:E8:F3:27:4B:5B:FF:B1:B1:A8:0C:87:3E
Authority key identifier: F3:75:47:6F:32:35:DC:3D:52:51:71:E2:BE:92:11:63:8E:49:08:47
Certificate issuer: /CN=A91627F9/serialNumber=F375476F3235DC3D525171E2BE9211638E490847
Certificate serial: 8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft
Manifest number: 89
Signing time: Thu 23 Oct 2025 08:46:43 +0000
Manifest this update: Thu 23 Oct 2025 08:46:42 +0000
Manifest next update: Thu 30 Oct 2025 08:46:42 +0000
Files and hashes: 1: 83VHbzI13D1SUXHivpIRY45JCEc.crl (hash: 6CR/mYE2b8zXKCw7GFlhNpF+6NSExxaKsXtNbumCRLk=)
2: BA8DB662085911F082EDFD31C4F9AE02.roa (hash: +kDevtWz9Zb8E9hUtq+Uoh1dNdwrgx3ww0ByNbhsSc4=)
3: 99E2D388E9C411EFAFABDD0BC4F9AE02.roa (hash: HyBY5t49VXGObL7xNBvYsj3P5DUndJz8OLCiO0M3LtI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.crl
rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Oct 2025 08:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91627F9, serialNumber=F375476F3235DC3D525171E2BE9211638E490847
Validity
Not Before: Oct 23 08:46:42 2025 GMT
Not After : Oct 30 08:46:42 2025 GMT
Subject: CN=68f9eb72-9d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bb:0a:b3:a5:60:ab:92:61:af:24:e8:1d:41:
4f:bb:11:c4:27:90:5b:43:42:bf:b8:5b:ee:86:7d:
4f:85:55:61:33:96:5f:0c:5b:8d:35:b4:a7:19:f9:
57:ac:b0:0e:ce:50:4e:d7:94:05:13:e7:e7:b1:1d:
a6:8a:0c:8e:b6:e4:7d:16:27:ce:dd:6d:12:46:dd:
09:7f:1f:40:4c:b4:54:24:80:82:ce:60:11:16:78:
d9:94:b7:d7:d8:0d:e2:24:0a:d8:b6:47:ae:a0:78:
e2:68:f0:e2:0f:6f:ae:79:ff:c7:38:90:cd:7a:f4:
f5:15:27:00:7a:f9:b1:05:2d:1e:c9:bd:35:f6:b0:
7d:dc:12:a2:7b:b0:bf:f3:88:f2:f2:fb:d6:e0:ef:
13:8f:25:f8:6a:c7:6d:2d:cc:24:c8:b5:79:dc:31:
26:11:ff:0a:dd:5f:1b:88:e7:0f:87:4a:c8:18:7d:
62:25:99:5c:af:d4:77:bb:c5:63:bc:57:c2:30:25:
eb:6b:ab:eb:ea:22:7f:ab:38:77:04:27:8d:ea:d6:
c3:28:13:0d:c9:fc:7b:57:2f:a0:b2:6c:45:d7:13:
07:70:09:70:b5:fb:19:12:9d:fb:44:d5:60:0c:6f:
dc:76:4a:39:e9:a9:f5:02:dd:48:ea:c7:3a:b0:81:
ca:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:02:DF:40:0F:9D:2B:6E:E8:F3:27:4B:5B:FF:B1:B1:A8:0C:87:3E
X509v3 Authority Key Identifier:
keyid:F3:75:47:6F:32:35:DC:3D:52:51:71:E2:BE:92:11:63:8E:49:08:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:47:39:9d:ac:04:dd:4a:ab:06:c4:8e:c0:f1:89:b8:21:59:
34:ae:e1:a9:81:3f:06:9a:ee:21:e3:a1:35:b7:11:66:0e:12:
3a:41:c0:8b:4c:0e:1b:39:2e:81:4b:df:7d:b3:cb:3e:19:dc:
56:de:32:d3:9e:0c:16:62:ae:48:08:56:d2:fa:c3:c3:6f:49:
01:f9:43:fa:67:3d:fc:fa:13:7e:8b:3d:2d:fb:f0:9d:83:03:
3d:fb:e6:56:1d:94:fc:cf:da:5f:ba:be:83:dd:1a:a9:18:2d:
8d:97:00:27:24:cc:7b:63:8f:81:62:32:11:29:86:d2:b5:36:
2a:c7:35:1d:e0:0b:c2:97:dd:27:ec:0d:31:6c:85:0c:a8:00:
34:b3:64:06:27:4f:f8:54:74:17:99:7f:9e:c0:7e:9e:16:a4:
d9:89:27:80:79:27:15:c2:81:a9:30:22:36:5e:47:12:c4:33:
3f:65:a4:8c:c0:63:a0:ac:ed:90:10:2c:a4:04:41:d1:69:e5:
65:28:c9:b2:76:71:4f:09:6a:9e:e9:3d:2e:4f:51:05:3f:a9:
72:06:c5:cc:1b:8f:87:5c:29:a6:f5:1d:61:c1:a4:d1:a2:f2:
fd:c0:3b:b0:5b:15:51:ae:cd:9e:8f:b2:c8:8f:be:2c:f9:f9:
2d:41:19:9b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjI3RjkxMTAvBgNVBAUTKEYzNzU0NzZGMzIzNURDM0Q1MjUxNzFFMkJFOTIxMTYz
OEU0OTA4NDcwHhcNMjUxMDIzMDg0NjQyWhcNMjUxMDMwMDg0NjQyWjAYMRYwFAYD
VQQDEw02OGY5ZWI3Mi05ZDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3rsKs6Vgq5JhryToHUFPuxHEJ5BbQ0K/uFvuhn1PhVVhM5ZfDFuNNbSnGflX
rLAOzlBO15QFE+fnsR2migyOtuR9FifO3W0SRt0Jfx9ATLRUJICCzmARFnjZlLfX
2A3iJArYtkeuoHjiaPDiD2+uef/HOJDNevT1FScAevmxBS0eyb019rB93BKie7C/
84jy8vvW4O8TjyX4asdtLcwkyLV53DEmEf8K3V8biOcPh0rIGH1iJZlcr9R3u8Vj
vFfCMCXra6vr6iJ/qzh3BCeN6tbDKBMNyfx7Vy+gsmxF1xMHcAlwtfsZEp37RNVg
DG/cdko56an1At1I6sc6sIHKLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8C30AP
nStu6PMnS1v/sbGoDIc+MB8GA1UdIwQYMBaAFPN1R28yNdw9UlFx4r6SEWOOSQhH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjdGOS8yODhERjE0QUU5
QzQxMUVGOTkyMDkzMEFDNEY5QUUwMi84M1ZIYnpJMTNEMVNVWEhpdnBJUlk0NUpD
RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzgzVkhiekkxM0QxU1VYSGl2cElSWTQ1SkNFYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MjdGOS8yODhERjE0QUU5QzQxMUVGOTkyMDkzMEFDNEY5QUUwMi84M1ZIYnpJMTNE
MVNVWEhpdnBJUlk0NUpDRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB4RzmdrATdSqsGxI7A8Ym4IVk0ruGpgT8Gmu4h46E1txFmDhI6QcCL
TA4bOS6BS999s8s+GdxW3jLTngwWYq5ICFbS+sPDb0kB+UP6Zz38+hN+iz0t+/Cd
gwM9++ZWHZT8z9pfur6D3RqpGC2NlwAnJMx7Y4+BYjIRKYbStTYqxzUd4AvCl90n
7A0xbIUMqAA0s2QGJ0/4VHQXmX+ewH6eFqTZiSeAeScVwoGpMCI2XkcSxDM/ZaSM
wGOgrO2QECykBEHRaeVlKMmydnFPCWqe6T0uT1EFP6lyBsXMG4+HXCmm9R1hwaTR
ovL9wDuwWxVRrs2ej7LIj74s+fktQRmb
-----END CERTIFICATE-----
Generated at Fri Oct 24 06:15:06 2025 by rpki-client