
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
File: xNT7D_AneW6dqhe3VVH9C3fxmC8.mft (raw, json)
Hash identifier: U5XhaWbe0g3PQQmoMJCx/r1FN5iPHZViRFdU9hW1feo=
Subject key identifier: 9D:31:2D:50:A4:C0:AC:15:B1:A5:8A:15:AE:F5:CC:35:F8:99:63:07
Authority key identifier: C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F
Certificate issuer: /CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F
Certificate serial: 0465
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
Manifest number: 0441
Signing time: Wed 29 Oct 2025 00:06:31 +0000
Manifest this update: Wed 29 Oct 2025 00:06:30 +0000
Manifest next update: Wed 05 Nov 2025 00:06:30 +0000
Files and hashes: 1: xNT7D_AneW6dqhe3VVH9C3fxmC8.crl (hash: 1mqgLELkXUtxSGz4fxqunrR6WUDY6JsVCrBOjPoMx3U=)
2: 51FE6D48D27011ECB30F1F0DC4F9AE02.roa (hash: wY9VV9yadFzt92HS27VdAQZvTr0RsiWh8bLwWXevekM=)
3: 66EDABB6815411EF98D05E1EC4F9AE02.roa (hash: SS7LsXp/x71VoteuW8pTuBwbWh8OyBISF5BhDwIPz/Q=)
4: D694BD82DBBA11EEB4125A3EC4F9AE02.roa (hash: +SD5oyeqwCVbJIR3Rca7WRwH9ic0DsTEAz6kXO4nmEw=)
5: 38D5F796961B11EC9851F811C4F9AE02.roa (hash: PcnJ0SQLHGsAHxXxj0qo8jDhyNqxoXVPvv8v+GYk0TQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl
rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 00:06:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1125 (0x465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EB94, serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F
Validity
Not Before: Oct 29 00:06:30 2025 GMT
Not After : Nov 5 00:06:30 2025 GMT
Subject: CN=69015a86-c435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1e:64:bb:d6:0a:82:27:67:10:b8:4d:e0:8a:
68:f4:b3:a8:32:8a:87:57:51:1e:c7:aa:f0:a2:2b:
47:af:1b:2f:cd:ec:2f:1c:11:3f:03:9d:54:df:dd:
80:88:16:d2:9d:0c:12:c8:fe:e1:17:78:0a:b1:e6:
b1:5f:1e:15:5a:ac:f6:b5:9a:7b:90:9a:d6:8d:af:
8f:96:b9:d4:cd:11:de:33:46:29:ed:1b:f4:20:d3:
45:a6:6c:93:94:00:46:88:7c:cd:33:11:57:ae:d0:
d5:6d:c0:a9:24:18:ee:c7:02:40:66:27:da:5d:8f:
0e:c7:fe:5e:ce:6f:fc:29:ac:e4:e4:93:1c:1f:0d:
bd:8c:54:c6:1a:3a:b2:d9:5c:3c:66:21:bd:e1:cf:
99:6c:12:51:a8:ba:23:d4:27:e7:67:ce:d7:ca:c8:
b9:c2:5e:3e:b4:fb:1b:f0:89:72:50:2f:2a:c0:d8:
e0:5e:d0:c6:6a:75:e7:cc:bf:79:39:09:31:85:34:
38:01:2d:ce:07:2b:7d:47:41:01:2b:fc:e0:32:1c:
81:f3:42:4c:c7:54:ee:b7:2d:24:64:35:f6:f4:e1:
d7:10:1c:30:55:75:a8:6d:e9:f4:c8:b3:6e:ec:ac:
65:06:aa:66:b8:80:7e:29:b7:25:75:fb:8b:92:54:
d0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:31:2D:50:A4:C0:AC:15:B1:A5:8A:15:AE:F5:CC:35:F8:99:63:07
X509v3 Authority Key Identifier:
keyid:C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7a:1f:63:2e:8b:90:7c:e0:bc:b3:18:a0:f3:c3:73:4a:97:
73:db:0e:0b:1a:fa:0d:22:7a:cb:ef:30:ca:42:e2:e9:59:4b:
b3:11:08:ad:d5:69:1a:a4:1e:77:f8:3c:cd:bd:82:49:14:1e:
3c:e1:47:47:9f:94:cf:f8:53:d0:01:8e:d9:58:b6:ef:ac:0b:
70:7c:e3:9a:6c:cb:07:bb:6c:f8:8b:41:00:ac:b9:64:a2:c2:
26:42:9c:09:50:3f:f8:ca:67:83:43:7c:ea:46:cb:03:22:c0:
dd:8b:44:21:6f:ca:0e:56:c8:fc:e3:e6:70:27:ec:6d:5b:35:
4c:b1:0b:92:f3:43:87:61:d6:8c:84:ef:35:4b:50:d1:9d:9f:
09:49:c3:13:eb:0e:8a:15:9d:7f:74:a4:56:f3:f9:d2:80:23:
33:ee:4b:73:c7:40:18:15:2a:da:65:55:e4:2a:ba:df:fd:31:
14:79:3a:f9:93:45:1f:7d:84:50:27:29:27:4b:43:d8:1d:8c:
ca:33:8d:48:63:5c:bd:b3:ad:0a:f1:c5:a4:e0:01:9a:3b:8d:
04:d6:99:2c:c6:ef:58:47:fc:52:f6:d1:ac:2b:17:8c:b1:a7:
c4:96:46:7c:4f:e6:20:3e:19:ac:58:10:9f:8c:29:59:bb:89:
c6:7e:46:bf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkVCOTQxMTAvBgNVBAUTKEM0RDRGQjBGRjAyNzc5NkU5REFBMTdCNzU1NTFGRDBC
NzdGMTk4MkYwHhcNMjUxMDI5MDAwNjMwWhcNMjUxMTA1MDAwNjMwWjAYMRYwFAYD
VQQDEw02OTAxNWE4Ni1jNDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzx5ku9YKgidnELhN4Ipo9LOoMoqHV1Eex6rwoitHrxsvzewvHBE/A51U392A
iBbSnQwSyP7hF3gKseaxXx4VWqz2tZp7kJrWja+PlrnUzRHeM0Yp7Rv0INNFpmyT
lABGiHzNMxFXrtDVbcCpJBjuxwJAZifaXY8Ox/5ezm/8Kazk5JMcHw29jFTGGjqy
2Vw8ZiG94c+ZbBJRqLoj1CfnZ87Xysi5wl4+tPsb8IlyUC8qwNjgXtDGanXnzL95
OQkxhTQ4AS3OByt9R0EBK/zgMhyB80JMx1Tuty0kZDX29OHXEBwwVXWoben0yLNu
7KxlBqpmuIB+KbcldfuLklTQkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0xLVCk
wKwVsaWKFa71zDX4mWMHMB8GA1UdIwQYMBaAFMTU+w/wJ3lunaoXt1VR/Qt38Zgv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUI5NC9FM0NDMjVEODgx
MUUxMUVDOTIwMjU1NTFDNEY5QUUwMi94TlQ3RF9BbmVXNmRxaGUzVlZIOUMzZnht
QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hOVDdEX0FuZVc2ZHFoZTNWVkg5QzNmeG1DOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RUI5NC9FM0NDMjVEODgxMUUxMUVDOTIwMjU1NTFDNEY5QUUwMi94TlQ3RF9BbmVX
NmRxaGUzVlZIOUMzZnhtQzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCOeh9jLouQfOC8sxig88NzSpdz2w4LGvoNInrL7zDKQuLpWUuzEQit
1WkapB53+DzNvYJJFB484UdHn5TP+FPQAY7ZWLbvrAtwfOOabMsHu2z4i0EArLlk
osImQpwJUD/4ymeDQ3zqRssDIsDdi0Qhb8oOVsj84+ZwJ+xtWzVMsQuS80OHYdaM
hO81S1DRnZ8JScMT6w6KFZ1/dKRW8/nSgCMz7ktzx0AYFSraZVXkKrrf/TEUeTr5
k0UffYRQJyknS0PYHYzKM41IY1y9s60K8cWk4AGaO40E1pksxu9YR/xS9tGsKxeM
safElkZ8T+YgPhmsWBCfjClZu4nGfka/
-----END CERTIFICATE-----
Generated at Wed Oct 29 15:33:59 2025 by rpki-client