
$ rpki-client -vvf rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
File: 8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft (raw, json)
Hash identifier: kC0ytD9/G/SuyhFcP8z1wHfP3AjQhNl86kmMZvvBVHE=
Subject key identifier: D4:D5:FF:69:24:60:2B:47:05:24:7F:5F:79:85:C8:4D:C9:8F:6D:B7
Authority key identifier: F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78
Certificate issuer: /CN=A91955D9/serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78
Certificate serial: B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
Manifest number: B6
Signing time: Wed 05 Nov 2025 06:14:54 +0000
Manifest this update: Wed 05 Nov 2025 06:14:53 +0000
Manifest next update: Wed 12 Nov 2025 06:14:53 +0000
Files and hashes: 1: 8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl (hash: SCkLSDJDyAxt/fzivl4omviKWkbHU5KkFlYcuoR4O+w=)
2: 0D041790A28611EFBD5A8C11C4F9AE02.roa (hash: 97I65+Q066TDiRkq5FVajUp8ATxWSUAGmGMHS8ACfSY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl
rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:14:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955D9, serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78
Validity
Not Before: Nov 5 06:14:53 2025 GMT
Not After : Nov 12 06:14:53 2025 GMT
Subject: CN=690aeb5d-9555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:e8:83:d2:d2:6a:c1:b7:a8:ad:06:bc:0c:
0b:23:f2:75:38:17:79:44:12:d4:db:ab:c5:0b:67:
0b:24:2c:48:45:d6:f1:bb:99:0b:da:da:15:70:ec:
c2:63:08:ef:e4:dc:08:05:55:a5:e7:8c:fa:15:a0:
c3:c9:a1:b4:31:05:93:1b:cb:6e:20:2f:71:43:d0:
fe:42:e9:e2:08:9c:57:91:00:ac:9c:fc:87:f9:3d:
3d:cb:5c:d2:8a:aa:c9:88:0e:70:de:95:12:9e:ab:
52:f2:fe:b9:e5:50:f2:6d:4c:73:aa:e5:3b:3a:f7:
df:8e:e5:13:d4:5f:2f:59:45:87:58:8c:d9:56:04:
48:a8:6c:6f:0c:ac:f8:37:b1:02:6e:21:90:4c:25:
3a:36:bc:35:9f:cb:85:92:a0:10:bd:08:c7:41:92:
6e:bc:c2:44:d9:03:e8:d0:69:a3:02:d4:cb:fa:60:
99:39:d0:50:32:96:26:55:0a:36:f8:d9:fb:33:27:
77:9d:58:6f:ad:64:3f:59:5c:a8:8e:ff:72:af:df:
0d:0d:c0:dd:26:01:87:f7:02:8c:22:bc:64:af:b2:
a1:94:34:54:84:4b:67:e4:b1:03:f0:23:29:25:65:
df:84:86:72:36:a1:cb:13:23:61:7e:75:24:a2:5e:
23:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D5:FF:69:24:60:2B:47:05:24:7F:5F:79:85:C8:4D:C9:8F:6D:B7
X509v3 Authority Key Identifier:
keyid:F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d2:3a:c8:60:45:bf:45:47:b9:bc:19:15:8c:eb:9c:e2:ea:
e1:7c:9e:21:77:a7:f3:e9:4b:7b:53:51:72:24:fe:76:7d:fe:
ef:6e:fb:a0:24:bd:71:05:a9:e5:26:b0:aa:bd:62:96:4a:01:
be:cd:1e:3b:13:f1:93:e8:ca:90:c2:2f:e2:dc:34:9f:8f:37:
14:e2:9f:bd:0b:6e:8d:96:6a:e0:44:40:35:33:69:43:3c:34:
83:f9:e6:6e:0e:68:27:41:68:bd:d4:67:60:a6:7a:92:14:d7:
9c:1a:c9:6f:11:f6:17:87:ce:2f:30:30:6e:f2:7f:a6:86:88:
cf:dc:1d:ec:65:d2:df:59:85:b9:29:aa:65:3e:8c:6f:48:fd:
5e:56:8f:3a:d8:d3:a9:80:bf:49:15:63:68:88:59:3c:04:01:
86:5b:25:5c:c9:22:a0:d6:53:31:ed:22:eb:bb:88:83:54:14:
81:f7:1d:70:b2:43:e9:e4:e7:4b:dd:9d:04:c2:d4:af:d5:7c:
26:5f:56:e5:cd:67:6c:36:02:9b:3d:12:c8:cd:ef:82:4d:d1:
6e:fb:92:b7:f2:71:51:c3:ff:a8:0e:8f:56:37:0f:06:67:7a:
ea:dd:78:35:02:32:c8:66:83:2d:da:52:19:5d:1a:be:ed:ae:
19:73:bb:66
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTU1RDkxMTAvBgNVBAUTKEYyNkE4MTAxOTE2OTUyRkIyMEJFMDFFOEZDN0M5MEVE
QzlFRTlGNzgwHhcNMjUxMTA1MDYxNDUzWhcNMjUxMTEyMDYxNDUzWjAYMRYwFAYD
VQQDEw02OTBhZWI1ZC05NTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwhvog9LSasG3qK0GvAwLI/J1OBd5RBLU26vFC2cLJCxIRdbxu5kL2toVcOzC
Ywjv5NwIBVWl54z6FaDDyaG0MQWTG8tuIC9xQ9D+QuniCJxXkQCsnPyH+T09y1zS
iqrJiA5w3pUSnqtS8v655VDybUxzquU7OvffjuUT1F8vWUWHWIzZVgRIqGxvDKz4
N7ECbiGQTCU6Nrw1n8uFkqAQvQjHQZJuvMJE2QPo0GmjAtTL+mCZOdBQMpYmVQo2
+Nn7Myd3nVhvrWQ/WVyojv9yr98NDcDdJgGH9wKMIrxkr7KhlDRUhEtn5LED8CMp
JWXfhIZyNqHLEyNhfnUkol4jlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTV/2kk
YCtHBSR/X3mFyE3Jj223MB8GA1UdIwQYMBaAFPJqgQGRaVL7IL4B6Px8kO3J7p94
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVEOS9DRDU0RDczOEEy
ODUxMUVGQjY2QjE4MTFDNEY5QUUwMi84bXFCQVpGcFV2c2d2Z0hvX0h5UTdjbnVu
M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhtcUJBWkZwVXZzZ3ZnSG9fSHlRN2NudW4zZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NTVEOS9DRDU0RDczOEEyODUxMUVGQjY2QjE4MTFDNEY5QUUwMi84bXFCQVpGcFV2
c2d2Z0hvX0h5UTdjbnVuM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB60jrIYEW/RUe5vBkVjOuc4urhfJ4hd6fz6Ut7U1FyJP52ff7vbvug
JL1xBanlJrCqvWKWSgG+zR47E/GT6MqQwi/i3DSfjzcU4p+9C26NlmrgREA1M2lD
PDSD+eZuDmgnQWi91GdgpnqSFNecGslvEfYXh84vMDBu8n+mhojP3B3sZdLfWYW5
KaplPoxvSP1eVo862NOpgL9JFWNoiFk8BAGGWyVcySKg1lMx7SLru4iDVBSB9x1w
skPp5OdL3Z0EwtSv1XwmX1blzWdsNgKbPRLIze+CTdFu+5K38nFRw/+oDo9WNw8G
Z3rq3Xg1AjLIZoMt2lIZXRq+7a4Zc7tm
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:46:38 2025 by rpki-client