
$ rpki-client -vvf rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft
File: EdV6dX7VZXXQSeQpyOxzelYFC3k.mft (raw, json)
Hash identifier: LCrr7Qwk9u2tb2KyimR2gPcdzJIKCa7Uzt4PHD49OWo=
Subject key identifier: 2C:02:AB:0C:EB:9E:1A:F4:C0:42:1E:64:DF:0F:34:3F:14:32:29:18
Authority key identifier: 11:D5:7A:75:7E:D5:65:75:D0:49:E4:29:C8:EC:73:7A:56:05:0B:79
Certificate issuer: /CN=A91672F2/serialNumber=11D57A757ED56575D049E429C8EC737A56050B79
Certificate serial: 0F38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft
Manifest number: 0F31
Signing time: Tue 04 Nov 2025 17:41:12 +0000
Manifest this update: Tue 04 Nov 2025 17:41:11 +0000
Manifest next update: Tue 11 Nov 2025 17:41:11 +0000
Files and hashes: 1: EdV6dX7VZXXQSeQpyOxzelYFC3k.crl (hash: UJ4sBb7NglZekEFu6Q/N0iL4U0mUPjTolnWCVz4A0N8=)
2: 6F89ECBE80D611E99C76DF63C4F9AE02.roa (hash: aXwfGlxqPqu7b393NAPdLMtIQdRhwXxgAFjX3VEBtag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.crl
rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 17:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3896 (0xf38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91672F2, serialNumber=11D57A757ED56575D049E429C8EC737A56050B79
Validity
Not Before: Nov 4 17:41:11 2025 GMT
Not After : Nov 11 17:41:11 2025 GMT
Subject: CN=690a3ab7-92ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:f1:25:7a:aa:56:85:19:ea:52:a9:a1:a2:
23:1d:79:87:97:2e:23:fe:e0:b0:f7:f6:40:78:19:
09:89:85:64:75:10:1f:c1:54:94:59:08:0d:6a:4d:
fc:71:79:c5:2a:62:3c:ed:2d:8b:d8:fb:40:f5:e3:
92:31:82:74:04:c9:d2:34:d5:d1:48:8e:2c:ec:c0:
15:da:6b:87:15:a3:91:f4:c6:0a:e4:ce:45:84:da:
f0:d9:41:ef:4c:03:72:dc:b7:72:8a:4c:64:fd:9c:
4f:c6:04:92:44:e6:d4:9e:91:95:a0:da:3d:3f:d0:
f9:40:46:a8:5f:9b:dd:77:27:0d:52:7a:c3:08:45:
fc:41:44:05:1d:7a:00:d8:6d:0f:6e:e1:49:12:bb:
3d:38:47:06:21:9a:ea:2e:2e:cf:42:bb:76:a5:14:
52:3b:b8:4c:61:bc:c1:7f:b3:0d:13:f1:53:9a:d2:
f8:dd:d8:26:b6:e1:ff:95:6e:78:84:cd:04:53:c0:
bb:36:33:0d:6e:7a:a2:6d:6b:e9:e7:87:18:a6:6b:
a5:ee:2b:de:d4:9b:34:92:ee:68:67:46:7b:fd:f8:
cf:3d:33:1d:5a:84:a1:26:24:20:fb:45:e1:1f:d6:
8e:ed:14:af:0b:09:70:49:97:7b:b3:11:1b:cc:6a:
49:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:02:AB:0C:EB:9E:1A:F4:C0:42:1E:64:DF:0F:34:3F:14:32:29:18
X509v3 Authority Key Identifier:
keyid:11:D5:7A:75:7E:D5:65:75:D0:49:E4:29:C8:EC:73:7A:56:05:0B:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:99:3a:cb:51:78:52:70:be:fc:b3:2f:df:06:17:32:84:81:
cf:76:fb:2e:75:92:a9:7e:46:f7:6a:d8:2b:97:a2:c5:57:6f:
30:b9:7c:c4:22:60:6c:25:c8:8d:84:db:e2:95:fa:6f:73:e0:
c3:8f:3c:04:f6:49:34:26:e7:46:61:53:e7:e0:e1:4d:ec:11:
db:f2:ec:88:cb:cf:94:b3:a2:01:cc:89:fe:3a:25:da:13:69:
52:18:a3:b1:24:25:7f:33:5e:22:22:f6:83:13:3d:a1:1c:06:
f8:ba:32:ad:20:32:a1:1f:51:4c:4c:cf:9c:d0:b9:27:da:cb:
c5:48:b5:6a:7e:17:cd:ae:f5:41:d0:e8:d2:79:1a:dc:a3:55:
41:5f:c1:b2:b7:a2:01:c7:49:12:44:f9:3c:16:58:4a:1c:3b:
10:19:f9:92:99:e9:64:72:a0:d6:e0:2e:a2:d4:db:c1:c1:ea:
ec:a0:e2:fb:28:d0:99:15:4e:16:ab:7e:af:bc:b3:71:47:d4:
e5:71:c9:62:92:5d:19:6e:c6:f7:1f:79:e0:02:a6:86:35:31:
94:dd:b0:c6:93:cd:a7:db:88:0b:80:da:af:aa:7c:53:2d:ab:
05:be:c0:c6:84:33:43:74:7d:3d:e7:9c:4e:18:e7:73:3e:f2:
f5:fa:aa:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjcyRjIxMTAvBgNVBAUTKDExRDU3QTc1N0VENTY1NzVEMDQ5RTQyOUM4RUM3MzdB
NTYwNTBCNzkwHhcNMjUxMTA0MTc0MTExWhcNMjUxMTExMTc0MTExWjAYMRYwFAYD
VQQDEw02OTBhM2FiNy05MmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvwrxJXqqVoUZ6lKpoaIjHXmHly4j/uCw9/ZAeBkJiYVkdRAfwVSUWQgNak38
cXnFKmI87S2L2PtA9eOSMYJ0BMnSNNXRSI4s7MAV2muHFaOR9MYK5M5FhNrw2UHv
TANy3Ldyikxk/ZxPxgSSRObUnpGVoNo9P9D5QEaoX5vddycNUnrDCEX8QUQFHXoA
2G0PbuFJErs9OEcGIZrqLi7PQrt2pRRSO7hMYbzBf7MNE/FTmtL43dgmtuH/lW54
hM0EU8C7NjMNbnqibWvp54cYpmul7ive1Js0ku5oZ0Z7/fjPPTMdWoShJiQg+0Xh
H9aO7RSvCwlwSZd7sxEbzGpJmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwCqwzr
nhr0wEIeZN8PND8UMikYMB8GA1UdIwQYMBaAFBHVenV+1WV10EnkKcjsc3pWBQt5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzJGMi9ERDhFQzFDODgw
RDQxMUU5QTlDOUM3NUVDNEY5QUUwMi9FZFY2ZFg3VlpYWFFTZVFweU94emVsWUZD
M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VkVjZkWDdWWlhYUVNlUXB5T3h6ZWxZRkMzay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzJGMi9ERDhFQzFDODgwRDQxMUU5QTlDOUM3NUVDNEY5QUUwMi9FZFY2ZFg3VlpY
WFFTZVFweU94emVsWUZDM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCemTrLUXhScL78sy/fBhcyhIHPdvsudZKpfkb3atgrl6LFV28wuXzE
ImBsJciNhNvilfpvc+DDjzwE9kk0JudGYVPn4OFN7BHb8uyIy8+Us6IBzIn+OiXa
E2lSGKOxJCV/M14iIvaDEz2hHAb4ujKtIDKhH1FMTM+c0Lkn2svFSLVqfhfNrvVB
0OjSeRrco1VBX8Gyt6IBx0kSRPk8FlhKHDsQGfmSmelkcqDW4C6i1NvBwersoOL7
KNCZFU4Wq36vvLNxR9Tlcclikl0Zbsb3H3ngAqaGNTGU3bDGk82n24gLgNqvqnxT
LasFvsDGhDNDdH0955xOGOdzPvL1+qqL
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:28:42 2025 by rpki-client