
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft
File: ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft (raw, json)
Hash identifier: ZH5Dpmh39BNNChf+r39OcgDqGPYWCFfqP7aMs57n1dw=
Subject key identifier: 82:39:78:9A:79:EB:C7:B0:19:13:25:77:0A:56:2D:7F:13:EE:4E:A9
Authority key identifier: 7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74
Certificate issuer: /CN=A91803B8/serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74
Certificate serial: 0B15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft
Manifest number: 0B07
Signing time: Sun 26 Oct 2025 19:52:28 +0000
Manifest this update: Sun 26 Oct 2025 19:52:28 +0000
Manifest next update: Sun 02 Nov 2025 19:52:28 +0000
Files and hashes: 1: ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl (hash: xtI23riMrmJ9HaEPY2sx/aNHmx2ta21jQQTvmygq098=)
2: 378397D8539A11EAAA519470C4F9AE02.roa (hash: h5uNrPFBAo9PVtuy9fkhCKzQMKirI5eC6bYq1yraKFU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl
rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Nov 2025 19:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2837 (0xb15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803B8, serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74
Validity
Not Before: Oct 26 19:52:28 2025 GMT
Not After : Nov 2 19:52:28 2025 GMT
Subject: CN=68fe7bfc-86b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:42:c7:a9:ee:c5:60:50:c1:83:77:0c:32:c8:
82:b1:99:59:70:b2:cc:90:d5:ac:bd:60:04:b2:03:
ef:07:b0:4f:3c:01:90:7f:0d:43:c9:12:dc:30:84:
a2:f6:ad:db:86:41:82:d6:1b:c8:b9:6e:2d:9e:91:
99:74:12:06:89:5c:af:a7:4f:b0:a1:98:1e:09:4c:
aa:2b:20:e2:15:24:1d:16:55:af:4a:a8:0d:3d:57:
bb:f1:74:48:88:60:ea:24:4a:09:b8:95:55:8c:b3:
ee:da:05:57:7f:cf:62:9c:5e:4b:de:ac:7b:bd:60:
28:70:84:4c:ee:7c:ba:75:05:4b:d1:b4:54:4c:88:
cf:e4:57:88:86:ba:62:7e:4a:20:1a:8e:17:63:13:
e6:c2:b5:f8:1c:0e:af:99:b0:64:c7:28:e0:67:33:
97:e6:23:63:b0:f9:39:f4:d3:df:40:4e:41:c5:7a:
38:d1:09:fd:4a:af:9d:94:5e:6f:3f:a4:3a:4c:f2:
b9:47:9d:e1:9e:08:15:5e:61:50:df:e2:bc:88:ad:
9a:9c:da:d9:ef:4a:16:54:68:86:3a:5b:76:65:0f:
7f:8e:64:2a:99:39:45:02:33:20:3b:ea:ef:89:eb:
56:4c:23:c8:d5:a9:c0:c4:59:85:c7:53:4a:53:5b:
2c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:39:78:9A:79:EB:C7:B0:19:13:25:77:0A:56:2D:7F:13:EE:4E:A9
X509v3 Authority Key Identifier:
keyid:7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:7d:e6:2c:80:7a:6b:08:51:27:89:74:f9:e3:80:1f:83:c0:
d5:a9:2e:c6:4b:30:42:5a:2d:ec:d1:cc:63:de:39:55:7c:de:
4e:ae:0f:a5:59:fe:a4:32:16:45:97:b9:5c:e5:ef:69:06:e4:
3b:82:6b:cf:dd:76:6c:5c:6e:6e:2b:aa:de:9b:c2:fb:7b:c8:
90:ef:f9:ed:71:c8:b2:ee:56:51:1d:cb:af:0c:1b:03:4f:83:
72:74:cc:0a:35:57:df:4f:ff:2b:70:c9:ac:72:9f:c0:ee:2a:
41:f6:f9:8b:c9:6f:8a:83:5e:f0:bf:13:eb:9a:06:78:d3:01:
55:9b:f2:34:fa:28:9b:18:c6:b3:78:f2:ff:0d:04:cb:ed:71:
f2:58:59:11:81:b4:36:ac:2e:03:ba:3a:b6:4d:8e:f9:ab:97:
2f:80:99:27:32:92:1e:95:e0:18:ff:36:5d:66:c2:2d:31:00:
2e:3a:2e:d1:9e:b9:b5:84:e6:0d:67:0b:a5:3e:f8:9c:34:f1:
fc:59:64:88:c1:62:62:89:e1:b8:f8:e9:7a:af:5a:af:d4:a5:
dc:f0:c6:ee:9a:5a:2f:fc:b7:a7:cc:1e:af:4d:01:38:d1:ef:
a9:1a:c0:5b:e5:d9:e8:94:42:9f:03:f8:08:a7:89:e4:b0:25:
69:28:12:91
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAzQjgxMTAvBgNVBAUTKDdFREUyNzY1MzY1NDE0RUE1QzFEOUU0OUYxNzg4RDA5
NEVBQkZCNzQwHhcNMjUxMDI2MTk1MjI4WhcNMjUxMTAyMTk1MjI4WjAYMRYwFAYD
VQQDEw02OGZlN2JmYy04NmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1kLHqe7FYFDBg3cMMsiCsZlZcLLMkNWsvWAEsgPvB7BPPAGQfw1DyRLcMISi
9q3bhkGC1hvIuW4tnpGZdBIGiVyvp0+woZgeCUyqKyDiFSQdFlWvSqgNPVe78XRI
iGDqJEoJuJVVjLPu2gVXf89inF5L3qx7vWAocIRM7ny6dQVL0bRUTIjP5FeIhrpi
fkogGo4XYxPmwrX4HA6vmbBkxyjgZzOX5iNjsPk59NPfQE5BxXo40Qn9Sq+dlF5v
P6Q6TPK5R53hnggVXmFQ3+K8iK2anNrZ70oWVGiGOlt2ZQ9/jmQqmTlFAjMgO+rv
ietWTCPI1anAxFmFx1NKU1ss0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFII5eJp5
68ewGRMldwpWLX8T7k6pMB8GA1UdIwQYMBaAFH7eJ2U2VBTqXB2eSfF4jQlOq/t0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNCOC8zRDZCNTkzNDUz
OTkxMUVBOUVBRDRCNkZDNEY5QUUwMi9mdDRuWlRaVUZPcGNIWjVKOFhpTkNVNnIt
M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z0NG5aVFpVRk9wY0haNUo4WGlOQ1U2ci0zUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDNCOC8zRDZCNTkzNDUzOTkxMUVBOUVBRDRCNkZDNEY5QUUwMi9mdDRuWlRaVUZP
cGNIWjVKOFhpTkNVNnItM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC1feYsgHprCFEniXT544Afg8DVqS7GSzBCWi3s0cxj3jlVfN5Org+l
Wf6kMhZFl7lc5e9pBuQ7gmvP3XZsXG5uK6rem8L7e8iQ7/ntcciy7lZRHcuvDBsD
T4NydMwKNVffT/8rcMmscp/A7ipB9vmLyW+Kg17wvxPrmgZ40wFVm/I0+iibGMaz
ePL/DQTL7XHyWFkRgbQ2rC4Dujq2TY75q5cvgJknMpIeleAY/zZdZsItMQAuOi7R
nrm1hOYNZwulPvicNPH8WWSIwWJiieG4+Ol6r1qv1KXc8Mbumlov/LenzB6vTQE4
0e+pGsBb5dnolEKfA/gIp4nksCVpKBKR
-----END CERTIFICATE-----
Generated at Tue Oct 28 05:21:20 2025 by rpki-client