
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
File: tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft (raw, json)
Hash identifier: VeOG5QkyyHCxAmxVOPcTa1KsKGsjGRTKk1ddx3aCJJg=
Subject key identifier: AC:46:D2:0C:5A:91:4F:54:4A:2F:09:28:AE:73:C2:88:F9:01:E7:3B
Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
Certificate issuer: /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Certificate serial: 014B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
Manifest number: 013C
Signing time: Thu 23 Oct 2025 06:30:46 +0000
Manifest this update: Thu 23 Oct 2025 06:30:46 +0000
Manifest next update: Thu 30 Oct 2025 06:30:46 +0000
Files and hashes: 1: tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl (hash: spQYcmvuRL8HUl137w3zxbCRUOqsLS8zarWSayFmmXM=)
2: F2D62F12A5FD11F09E86DE59C4F9AE02.roa (hash: dbyE92rBZMKmsivB+ep5rxHPze9Bbozx1KkgXLzY/Bs=)
3: 4CF8923058BC11F09869AC87C4F9AE02.roa (hash: zY90zo/xojHjF1wecs/HwesdG3vMHXP6Ku/hhTPUGd8=)
4: 6D85335A58BC11F0983EE987C4F9AE02.roa (hash: YJ4UnxpzDCCzQhrx6wFr1GrzFRiuwNVyQ4kIp3p0jlQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Oct 2025 06:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4849, serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Validity
Not Before: Oct 23 06:30:46 2025 GMT
Not After : Oct 30 06:30:46 2025 GMT
Subject: CN=68f9cb96-866d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:35:6c:c2:ce:e4:38:06:86:11:eb:1b:24:76:
04:22:ba:26:10:93:a2:f9:5b:88:cd:f6:58:8b:13:
d4:56:f4:26:b1:af:14:bd:dc:83:a6:4e:49:54:11:
0c:57:d2:cd:c8:a6:a2:de:ca:ee:9e:25:3e:4f:d7:
6d:87:81:91:a8:a1:9f:38:69:91:5e:62:5e:d8:6e:
f6:0d:09:3b:6b:7a:06:35:fa:4a:8f:f9:fb:4d:7d:
50:9f:bb:c5:cf:f7:78:85:3f:6b:2e:c1:a4:3f:75:
4c:0a:f3:77:e4:ae:2b:0e:d3:b8:32:f6:d7:73:fa:
fb:63:0a:ce:a7:0c:d8:d0:7b:4e:9a:bb:67:b2:a7:
89:40:37:8d:b9:05:43:c9:ab:58:89:af:8e:4e:5d:
7a:07:10:29:51:0a:68:fd:c2:3f:83:f0:fd:a1:1f:
ad:e1:8c:c6:1f:9b:c0:7f:6a:3b:4f:e8:42:d1:4a:
4c:ea:a9:15:4c:6b:a5:3e:61:71:46:c7:19:3b:24:
92:2d:08:00:79:e6:59:d2:7c:22:6b:c1:b7:98:2d:
02:e6:cf:1f:f5:51:41:bb:51:80:95:53:ee:de:28:
c8:e4:66:20:80:5d:a6:1e:a4:95:a7:c6:fb:3d:bf:
e5:d1:0a:09:7f:a8:8f:7a:40:f9:b3:b5:c9:49:12:
46:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:46:D2:0C:5A:91:4F:54:4A:2F:09:28:AE:73:C2:88:F9:01:E7:3B
X509v3 Authority Key Identifier:
keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:60:a2:ea:27:0b:f6:f2:04:87:98:c0:49:3d:06:36:fd:34:
07:0f:f7:03:08:e4:53:28:9a:45:3d:93:04:5e:ff:7f:be:7e:
c5:85:f5:d7:04:2c:40:b6:16:f7:b7:bf:58:d3:f1:20:a0:8d:
aa:6c:b5:f0:f1:78:14:ca:ad:79:67:f9:6d:17:69:17:03:53:
f9:be:6a:42:02:f5:43:d9:ba:7a:2a:6c:79:26:74:f3:2e:2f:
f1:7e:ac:33:50:23:47:96:75:1f:0b:3e:2d:f2:6d:67:cb:0e:
12:db:c8:0b:6a:7a:de:f4:93:37:ce:78:a9:ed:7c:a2:ab:7f:
68:30:b8:2d:4e:98:39:51:79:ba:67:27:be:9d:82:2c:dc:99:
ac:e1:37:75:b3:27:30:2f:65:27:f9:c4:f9:c9:54:a5:08:10:
51:57:df:c5:9b:36:f6:e4:e2:3f:6a:81:3f:79:85:e2:8f:7a:
fb:64:ea:35:f0:e1:d3:a0:7a:82:85:5b:9b:e8:8c:93:43:3a:
a3:17:e3:94:07:75:66:4c:a9:0c:b9:e3:6b:53:a8:b1:e4:99:
25:a5:52:7f:2d:a7:4e:92:af:c1:c3:fe:13:cd:f0:f0:2c:ba:
55:32:10:51:7a:43:97:50:a8:a0:d5:2b:8e:a5:27:2a:eb:30:
c8:46:a1:c8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ4NDkxMTAvBgNVBAUTKEI2Q0MwMkE3REI4QTREQjUzMEYxMTJCNjIyNEYxOTA4
MDg2OEZCRDkwHhcNMjUxMDIzMDYzMDQ2WhcNMjUxMDMwMDYzMDQ2WjAYMRYwFAYD
VQQDEw02OGY5Y2I5Ni04NjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2DVsws7kOAaGEesbJHYEIromEJOi+VuIzfZYixPUVvQmsa8UvdyDpk5JVBEM
V9LNyKai3sruniU+T9dth4GRqKGfOGmRXmJe2G72DQk7a3oGNfpKj/n7TX1Qn7vF
z/d4hT9rLsGkP3VMCvN35K4rDtO4MvbXc/r7YwrOpwzY0HtOmrtnsqeJQDeNuQVD
yatYia+OTl16BxApUQpo/cI/g/D9oR+t4YzGH5vAf2o7T+hC0UpM6qkVTGulPmFx
RscZOySSLQgAeeZZ0nwia8G3mC0C5s8f9VFBu1GAlVPu3ijI5GYggF2mHqSVp8b7
Pb/l0QoJf6iPekD5s7XJSRJGSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxG0gxa
kU9USi8JKK5zwoj5Aec7MB8GA1UdIwQYMBaAFLbMAqfbik21MPEStiJPGQgIaPvZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDg0OS8wODdEM0VFOEU2
NkQxMUVFOEEzMUE5NjBDNEY5QUUwMi90c3dDcDl1S1RiVXc4UksySWs4WkNBaG8t
OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Rzd0NwOXVLVGJVdzhSSzJJazhaQ0Foby05ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDg0OS8wODdEM0VFOEU2NkQxMUVFOEEzMUE5NjBDNEY5QUUwMi90c3dDcDl1S1Ri
VXc4UksySWs4WkNBaG8tOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBIYKLqJwv28gSHmMBJPQY2/TQHD/cDCORTKJpFPZMEXv9/vn7FhfXX
BCxAthb3t79Y0/EgoI2qbLXw8XgUyq15Z/ltF2kXA1P5vmpCAvVD2bp6Kmx5JnTz
Li/xfqwzUCNHlnUfCz4t8m1nyw4S28gLanre9JM3znip7Xyiq39oMLgtTpg5UXm6
Zye+nYIs3Jms4Td1sycwL2Un+cT5yVSlCBBRV9/Fmzb25OI/aoE/eYXij3r7ZOo1
8OHToHqChVub6IyTQzqjF+OUB3VmTKkMueNrU6ix5JklpVJ/LadOkq/Bw/4TzfDw
LLpVMhBRekOXUKig1SuOpScq6zDIRqHI
-----END CERTIFICATE-----
Generated at Fri Oct 24 13:32:57 2025 by rpki-client