
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
File: 7enmnD0KkdKXM8a3AvPMSL7dzuk.mft (raw, json)
Hash identifier: 2DcDIJcguNBT8D1+OohqQUFggVqfe4MNWm3DSf1ZOa8=
Subject key identifier: 6F:12:97:9C:8E:73:58:25:42:3E:6B:C1:13:CF:E2:07:03:74:0F:AE
Authority key identifier: ED:E9:E6:9C:3D:0A:91:D2:97:33:C6:B7:02:F3:CC:48:BE:DD:CE:E9
Certificate issuer: /CN=A9193869/serialNumber=EDE9E69C3D0A91D29733C6B702F3CC48BEDDCEE9
Certificate serial: 05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7enmnD0KkdKXM8a3AvPMSL7dzuk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
Manifest number: 04
Signing time: Mon 03 Nov 2025 08:05:38 +0000
Manifest this update: Mon 03 Nov 2025 08:05:38 +0000
Manifest next update: Mon 10 Nov 2025 08:05:38 +0000
Files and hashes: 1: 7enmnD0KkdKXM8a3AvPMSL7dzuk.crl (hash: e4Dov/MrM3LZa0j9NHPeahE4/KRh7LbsB9somPdvcHI=)
2: 00C05CEAB7D511F0AE891D43C4F9AE02.roa (hash: b+1hqemSQst2M7DCyOrAvb7h4SpsImJMoRs35hPQsyc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.crl
rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7enmnD0KkdKXM8a3AvPMSL7dzuk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 08:05:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193869, serialNumber=EDE9E69C3D0A91D29733C6B702F3CC48BEDDCEE9
Validity
Not Before: Nov 3 08:05:38 2025 GMT
Not After : Nov 10 08:05:38 2025 GMT
Subject: CN=69086252-dbfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:68:4e:c7:e6:c3:31:e3:f8:25:ab:c7:ed:a3:
e7:38:4b:17:bd:df:f4:b9:e8:ca:ff:d8:9f:87:c9:
81:94:cb:ca:f1:11:6f:bf:82:9e:2d:e5:0a:89:0f:
4f:7b:40:9c:36:d9:f8:5f:61:02:3a:40:d4:9b:fa:
4f:95:5d:11:a0:d0:67:2b:80:43:d8:c2:97:f5:80:
f9:bd:57:ae:85:75:26:28:8e:32:f4:b1:59:cf:97:
df:3a:66:80:6b:e9:d4:9b:05:bd:f2:81:2d:19:44:
da:2b:d1:73:a7:be:1d:07:e5:b6:8a:fc:57:cf:52:
d8:7e:6a:94:f2:57:23:fd:03:2a:02:76:da:2c:0e:
a0:d5:d0:8d:9b:eb:18:87:fa:b8:23:01:99:29:fc:
c1:36:06:01:da:dd:8e:16:a4:49:7c:6f:7e:15:18:
d9:2e:5e:f6:fc:75:f1:5a:30:56:cd:02:4e:e3:1f:
49:3a:2b:26:77:67:6a:11:cb:c1:a8:b8:86:2f:7b:
05:82:95:1f:a0:a7:9e:da:06:d7:99:64:28:57:9c:
b1:81:1e:36:a0:43:00:3b:33:b3:a7:60:5e:24:3d:
24:f3:df:7a:0a:56:77:a5:24:a7:e4:2d:23:3a:6b:
02:8a:e3:6e:60:63:76:59:b8:7c:e4:87:bb:fe:41:
5b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:12:97:9C:8E:73:58:25:42:3E:6B:C1:13:CF:E2:07:03:74:0F:AE
X509v3 Authority Key Identifier:
keyid:ED:E9:E6:9C:3D:0A:91:D2:97:33:C6:B7:02:F3:CC:48:BE:DD:CE:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7enmnD0KkdKXM8a3AvPMSL7dzuk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:be:5e:c5:e6:84:e0:99:7c:1c:eb:10:c3:93:fb:e9:37:5b:
d9:f9:8e:9a:d8:29:40:80:71:83:b7:f8:46:d3:1d:87:30:d2:
eb:61:de:11:d0:0f:45:1e:5c:ff:b2:a9:de:fb:88:28:61:60:
21:cc:e5:b6:8a:80:fd:0b:ef:e6:45:98:a0:44:1d:56:3b:71:
d3:dc:18:d0:6a:ca:51:a1:7f:ec:d8:95:b1:4d:7b:11:aa:41:
fe:db:59:17:f6:58:be:36:e6:69:b6:94:31:ac:f4:2d:1e:8e:
c6:d0:f5:24:32:43:a5:66:43:76:c3:31:99:0f:a8:95:20:b7:
54:6c:40:52:9a:43:13:ab:16:f6:67:60:97:40:d0:fe:b9:9e:
cb:da:50:f4:f6:1d:59:1c:35:f0:d4:aa:eb:f9:29:52:a3:ba:
e3:fe:1d:b8:e0:27:95:b2:c0:32:1d:c3:5e:84:ff:64:2a:d7:
7d:9b:a7:5e:a1:42:87:55:11:7e:1a:d1:49:21:16:01:7f:8c:
ad:6c:f2:38:d5:d5:d7:84:21:da:65:79:81:e4:8c:c1:44:fd:
23:d1:73:3a:16:53:59:25:6d:1b:52:55:e8:1d:d5:a5:87:fa:
10:21:08:ef:62:45:97:fa:a6:f5:26:c7:eb:64:0f:b4:89:cb:
22:38:d3:6b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
Mzg2OTExMC8GA1UEBRMoRURFOUU2OUMzRDBBOTFEMjk3MzNDNkI3MDJGM0NDNDhC
RUREQ0VFOTAeFw0yNTExMDMwODA1MzhaFw0yNTExMTAwODA1MzhaMBgxFjAUBgNV
BAMTDTY5MDg2MjUyLWRiZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDlaE7H5sMx4/glq8fto+c4Sxe93/S56Mr/2J+HyYGUy8rxEW+/gp4t5QqJD097
QJw22fhfYQI6QNSb+k+VXRGg0GcrgEPYwpf1gPm9V66FdSYojjL0sVnPl986ZoBr
6dSbBb3ygS0ZRNor0XOnvh0H5baK/FfPUth+apTyVyP9AyoCdtosDqDV0I2b6xiH
+rgjAZkp/ME2BgHa3Y4WpEl8b34VGNkuXvb8dfFaMFbNAk7jH0k6KyZ3Z2oRy8Go
uIYvewWClR+gp57aBteZZChXnLGBHjagQwA7M7OnYF4kPSTz33oKVnelJKfkLSM6
awKK425gY3ZZuHzkh7v+QVu1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbxKXnI5z
WCVCPmvBE8/iBwN0D64wHwYDVR0jBBgwFoAU7enmnD0KkdKXM8a3AvPMSL7dzukw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzODY5LzM2RjFBNDMyQjdE
NDExRjA4RTFEMDMyMEM0RjlBRTAyLzdlbm1uRDBLa2RLWE04YTNBdlBNU0w3ZHp1
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvN2VubW5EMEtrZEtYTThhM0F2UE1TTDdkenVrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz
ODY5LzM2RjFBNDMyQjdENDExRjA4RTFEMDMyMEM0RjlBRTAyLzdlbm1uRDBLa2RL
WE04YTNBdlBNU0w3ZHp1ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACi+XsXmhOCZfBzrEMOT++k3W9n5jprYKUCAcYO3+EbTHYcw0uth3hHQ
D0UeXP+yqd77iChhYCHM5baKgP0L7+ZFmKBEHVY7cdPcGNBqylGhf+zYlbFNexGq
Qf7bWRf2WL425mm2lDGs9C0ejsbQ9SQyQ6VmQ3bDMZkPqJUgt1RsQFKaQxOrFvZn
YJdA0P65nsvaUPT2HVkcNfDUquv5KVKjuuP+HbjgJ5WywDIdw16E/2Qq132bp16h
QodVEX4a0UkhFgF/jK1s8jjV1deEIdpleYHkjMFE/SPRczoWU1klbRtSVegd1aWH
+hAhCO9iRZf6pvUmx+tkD7SJyyI402s=
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:09:48 2025 by rpki-client