
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft
File: bWlDJ6eLD158LQx0Y3dIHe3doAI.mft (raw, json)
Hash identifier: OTUBUM3zQPam8+G7A1XmaE4guuGFqwlFs7wVWa/RCHo=
Subject key identifier: 23:25:61:1E:9E:8D:77:1D:C3:59:B3:31:8F:54:2B:C9:D6:E5:A0:F4
Authority key identifier: 6D:69:43:27:A7:8B:0F:5E:7C:2D:0C:74:63:77:48:1D:ED:DD:A0:02
Certificate issuer: /CN=A9186392/serialNumber=6D694327A78B0F5E7C2D0C746377481DEDDDA002
Certificate serial: 01EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft
Manifest number: 01E5
Signing time: Mon 03 Nov 2025 02:40:37 +0000
Manifest this update: Mon 03 Nov 2025 02:40:37 +0000
Manifest next update: Mon 10 Nov 2025 02:40:37 +0000
Files and hashes: 1: bWlDJ6eLD158LQx0Y3dIHe3doAI.crl (hash: 4/qGuduLAhvSS8xqwG2PHX2HuEY1WRAJOBu5TP/QF7k=)
2: 3CF4087AD90611ED890F5D5FC4F9AE02.roa (hash: c52+qULtQI4nUSwyiYqI9B7pVL/XEZ9W/nL53Dz6dtI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.crl
rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 02:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 491 (0x1eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186392, serialNumber=6D694327A78B0F5E7C2D0C746377481DEDDDA002
Validity
Not Before: Nov 3 02:40:37 2025 GMT
Not After : Nov 10 02:40:37 2025 GMT
Subject: CN=69081625-61f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:71:df:59:dd:e5:66:b2:69:0f:b1:31:ab:3a:
c7:4c:dc:6d:c5:a5:90:4a:d8:46:81:e1:96:6f:bb:
df:ab:92:72:e3:13:5a:2c:3d:2e:fb:9d:d9:6a:72:
10:9b:c5:cc:11:f1:ad:98:85:cf:92:99:4b:0c:4c:
97:3e:92:81:a5:82:3c:12:2b:af:e0:cb:52:3b:14:
93:12:46:60:a7:d1:4f:88:b0:b4:3d:48:0a:ed:53:
66:96:c4:27:9a:63:0a:dc:0d:be:9b:d9:98:3d:ca:
00:2a:10:a5:74:fb:40:de:d5:d5:ad:e0:f4:52:73:
52:c0:d8:6b:78:c6:20:a2:9b:6f:34:ae:6c:d2:78:
63:4d:2d:83:76:48:fd:e8:de:d3:f0:73:42:7b:6c:
ad:29:35:6b:9d:34:6b:1c:ea:83:b8:bc:f1:ba:55:
44:96:83:5a:38:e8:78:56:48:83:e2:56:fa:f4:58:
22:57:a4:c1:6d:01:34:8e:03:93:29:92:dc:d0:27:
d2:f2:7a:55:e8:84:cc:6f:96:8c:c8:6a:49:fc:54:
fc:0e:ee:55:ce:a6:51:66:1e:6b:e8:05:6d:a6:55:
7e:d3:5c:36:18:98:b3:74:99:ad:6a:d8:92:3d:6d:
9d:9a:d4:a0:63:d2:6b:8d:28:81:00:df:14:0d:26:
16:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:25:61:1E:9E:8D:77:1D:C3:59:B3:31:8F:54:2B:C9:D6:E5:A0:F4
X509v3 Authority Key Identifier:
keyid:6D:69:43:27:A7:8B:0F:5E:7C:2D:0C:74:63:77:48:1D:ED:DD:A0:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:53:cf:d9:f0:d0:5e:7b:09:5e:da:37:1a:e7:b2:f8:a0:b5:
e4:e9:07:cd:8c:eb:3a:fd:6a:1f:1a:71:1b:a9:f2:01:71:ca:
31:91:e7:78:46:70:5f:9f:96:13:08:c8:81:ce:7d:a2:00:e3:
f3:5f:15:82:b0:7b:5d:9a:e5:8d:f9:e8:3c:7b:77:25:1c:2b:
d9:22:64:a4:4d:72:e6:12:8b:c8:48:4c:f1:3d:76:89:24:88:
1e:50:21:72:0d:14:e8:b9:5f:64:0c:6e:9c:1e:09:a6:29:9c:
9f:49:d2:d5:b8:f3:9a:05:b7:48:c0:04:f0:0f:9f:02:be:09:
07:19:89:ac:5d:03:74:97:cd:e5:ef:18:2f:da:92:08:73:99:
9b:f7:91:05:4e:89:16:a4:cd:73:79:6a:25:27:61:e4:99:76:
81:2d:a6:77:b1:37:fe:88:27:11:c4:b9:ed:66:d2:70:24:82:
25:56:21:da:3d:7d:8d:8f:83:8c:c3:0e:92:48:ef:5d:ee:80:
89:b7:ad:aa:02:ad:d7:88:01:8c:a3:26:45:98:cc:c1:ad:52:
24:eb:d3:1f:19:a8:f7:b2:d5:24:f8:fb:c0:ef:b5:1d:e7:67:
c4:7e:6c:e5:4d:05:2b:f5:8d:81:c5:41:39:fc:11:3d:da:b3:
87:09:dc:ad
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYzOTIxMTAvBgNVBAUTKDZENjk0MzI3QTc4QjBGNUU3QzJEMEM3NDYzNzc0ODFE
RUREREEwMDIwHhcNMjUxMTAzMDI0MDM3WhcNMjUxMTEwMDI0MDM3WjAYMRYwFAYD
VQQDEw02OTA4MTYyNS02MWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7nHfWd3lZrJpD7ExqzrHTNxtxaWQSthGgeGWb7vfq5Jy4xNaLD0u+53ZanIQ
m8XMEfGtmIXPkplLDEyXPpKBpYI8Eiuv4MtSOxSTEkZgp9FPiLC0PUgK7VNmlsQn
mmMK3A2+m9mYPcoAKhCldPtA3tXVreD0UnNSwNhreMYgoptvNK5s0nhjTS2Ddkj9
6N7T8HNCe2ytKTVrnTRrHOqDuLzxulVEloNaOOh4VkiD4lb69FgiV6TBbQE0jgOT
KZLc0CfS8npV6ITMb5aMyGpJ/FT8Du5VzqZRZh5r6AVtplV+01w2GJizdJmtatiS
PW2dmtSgY9JrjSiBAN8UDSYWVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMlYR6e
jXcdw1mzMY9UK8nW5aD0MB8GA1UdIwQYMBaAFG1pQyeniw9efC0MdGN3SB3t3aAC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjM5Mi8xOUZENENDMkQ5
MDIxMUVEODc4NDQ5NTlDNEY5QUUwMi9iV2xESjZlTEQxNThMUXgwWTNkSUhlM2Rv
QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JXbERKNmVMRDE1OExReDBZM2RJSGUzZG9BSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjM5Mi8xOUZENENDMkQ5MDIxMUVEODc4NDQ5NTlDNEY5QUUwMi9iV2xESjZlTEQx
NThMUXgwWTNkSUhlM2RvQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC0U8/Z8NBeewle2jca57L4oLXk6QfNjOs6/WofGnEbqfIBccoxked4
RnBfn5YTCMiBzn2iAOPzXxWCsHtdmuWN+eg8e3clHCvZImSkTXLmEovISEzxPXaJ
JIgeUCFyDRTouV9kDG6cHgmmKZyfSdLVuPOaBbdIwATwD58CvgkHGYmsXQN0l83l
7xgv2pIIc5mb95EFTokWpM1zeWolJ2HkmXaBLaZ3sTf+iCcRxLntZtJwJIIlViHa
PX2Nj4OMww6SSO9d7oCJt62qAq3XiAGMoyZFmMzBrVIk69MfGaj3stUk+PvA77Ud
52fEfmzlTQUr9Y2BxUE5/BE92rOHCdyt
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:10:15 2025 by rpki-client