
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft
File: X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft (raw, json)
Hash identifier: uFs4rM2td/2DU1JmIi8hQmYD7oqNwoQrzkFL5hO/U/w=
Subject key identifier: 19:71:1E:55:32:23:8C:EF:39:72:C5:94:87:D2:86:D8:93:5E:4F:D2
Authority key identifier: 5F:93:3D:30:F2:47:D0:41:9F:F0:BE:06:03:E1:6D:5C:27:C4:04:07
Certificate issuer: /CN=A91A6B8E/serialNumber=5F933D30F247D0419FF0BE0603E16D5C27C40407
Certificate serial: 0795
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft
Manifest number: 078B
Signing time: Sun 02 Nov 2025 21:30:21 +0000
Manifest this update: Sun 02 Nov 2025 21:30:21 +0000
Manifest next update: Sun 09 Nov 2025 21:30:21 +0000
Files and hashes: 1: X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl (hash: Hy2h5xoXPO0q8L6IIEWTzG34t7vrlKBydp7HYMRYKgM=)
2: 4D12DEAE2E9311EBB9FC5259C4F9AE02.roa (hash: 7nAwvijUmnaIMOxevk905gWR2HOoFSC7V0ZEJzsRaVE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl
rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1941 (0x795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6B8E, serialNumber=5F933D30F247D0419FF0BE0603E16D5C27C40407
Validity
Not Before: Nov 2 21:30:21 2025 GMT
Not After : Nov 9 21:30:21 2025 GMT
Subject: CN=6907cd6d-ed8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c3:68:55:11:6c:b9:42:7c:a5:14:d1:b0:24:
9f:8f:b3:21:db:67:78:a7:6a:9b:e1:7d:d6:35:6b:
ef:90:63:5e:0f:1c:3c:33:3c:75:2e:a4:4a:e4:4b:
29:00:73:a1:d3:f5:e0:d2:d9:8f:bc:33:62:90:b4:
90:b0:ca:79:19:94:dc:2d:8b:03:93:fe:42:c8:81:
02:c6:7f:33:ba:80:88:5a:1e:60:df:e4:c7:09:1e:
97:22:e3:70:e0:45:24:7e:41:8e:9d:29:f5:02:dc:
5e:37:0d:b3:84:89:47:df:4a:f6:a0:83:c4:b6:8b:
10:a5:82:b6:f2:4c:30:bd:01:a7:a9:f3:ed:4d:53:
c1:b0:db:1c:18:7e:6b:85:a6:94:64:7f:fc:33:12:
a0:61:a3:97:a3:c4:2e:38:2c:99:a7:8e:63:f0:96:
5e:e0:08:a1:39:1b:cc:76:70:7c:fe:6e:0e:bc:85:
51:11:e7:51:1c:c7:fe:57:e7:71:0b:c9:5c:94:aa:
0d:c5:17:58:70:e9:8e:60:99:b0:08:c3:b9:8c:03:
92:49:3d:b3:78:bd:13:21:99:53:a8:e8:88:08:8a:
c9:bf:1b:a2:57:02:9e:79:3d:bb:c3:52:6f:b5:0b:
ed:49:b7:a9:c5:84:f6:52:2d:68:42:ad:21:0d:5b:
0e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:71:1E:55:32:23:8C:EF:39:72:C5:94:87:D2:86:D8:93:5E:4F:D2
X509v3 Authority Key Identifier:
keyid:5F:93:3D:30:F2:47:D0:41:9F:F0:BE:06:03:E1:6D:5C:27:C4:04:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:06:31:dd:fc:4c:10:e0:5c:47:2c:1e:68:47:00:86:76:95:
77:0b:09:c7:e9:54:6f:13:eb:24:9f:65:47:2f:cb:e9:ad:24:
0a:b4:33:e9:eb:c2:1a:ab:f1:6b:a0:f6:75:ad:4d:84:a3:7b:
29:8c:4d:64:7f:fd:79:b0:84:c5:ff:bf:fa:1c:67:08:7b:2d:
b8:96:50:72:3b:75:4e:da:38:f6:f9:7b:8f:83:70:9d:ab:43:
39:d2:e3:87:e8:9d:2a:5f:39:9c:b8:36:59:58:2d:54:76:06:
59:2f:d8:4b:60:82:5b:fe:76:8e:d8:79:3f:e9:a5:a8:b4:fd:
64:1a:4a:16:d6:b1:25:3f:89:b5:a7:18:40:c1:b3:82:4e:d9:
25:6a:ae:27:7e:c4:4f:e9:98:20:cb:e9:d2:45:63:70:6a:e8:
dd:30:0e:4e:9d:dc:70:64:ae:96:d4:76:7e:a9:e4:e2:9f:6c:
57:ef:b1:db:d7:d3:70:2e:d4:6f:45:67:11:50:2f:dc:3f:16:
5c:8f:64:64:3b:73:81:cf:a3:1b:58:44:98:35:47:d5:4d:88:
f9:d3:be:75:1c:54:3e:0e:84:3a:12:fe:1a:fa:ff:ed:3f:f1:
0a:79:7a:fd:8f:55:a6:dc:f6:7c:c2:9a:84:ec:80:3f:49:d8:
16:f6:71:e3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTZCOEUxMTAvBgNVBAUTKDVGOTMzRDMwRjI0N0QwNDE5RkYwQkUwNjAzRTE2RDVD
MjdDNDA0MDcwHhcNMjUxMTAyMjEzMDIxWhcNMjUxMTA5MjEzMDIxWjAYMRYwFAYD
VQQDEw02OTA3Y2Q2ZC1lZDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA78NoVRFsuUJ8pRTRsCSfj7Mh22d4p2qb4X3WNWvvkGNeDxw8Mzx1LqRK5Esp
AHOh0/Xg0tmPvDNikLSQsMp5GZTcLYsDk/5CyIECxn8zuoCIWh5g3+THCR6XIuNw
4EUkfkGOnSn1AtxeNw2zhIlH30r2oIPEtosQpYK28kwwvQGnqfPtTVPBsNscGH5r
haaUZH/8MxKgYaOXo8QuOCyZp45j8JZe4AihORvMdnB8/m4OvIVREedRHMf+V+dx
C8lclKoNxRdYcOmOYJmwCMO5jAOSST2zeL0TIZlTqOiICIrJvxuiVwKeeT27w1Jv
tQvtSbepxYT2Ui1oQq0hDVsOgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBlxHlUy
I4zvOXLFlIfShtiTXk/SMB8GA1UdIwQYMBaAFF+TPTDyR9BBn/C+BgPhbVwnxAQH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkI4RS85N0E0NTFCNjJF
OTExMUVCQTUxRUU4M0NDNEY5QUUwMi9YNU05TVBKSDBFR2Y4TDRHQS1GdFhDZkVC
QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1g1TTlNUEpIMEVHZjhMNEdBLUZ0WENmRUJBYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NkI4RS85N0E0NTFCNjJFOTExMUVCQTUxRUU4M0NDNEY5QUUwMi9YNU05TVBKSDBF
R2Y4TDRHQS1GdFhDZkVCQWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCXBjHd/EwQ4FxHLB5oRwCGdpV3CwnH6VRvE+skn2VHL8vprSQKtDPp
68Iaq/FroPZ1rU2Eo3spjE1kf/15sITF/7/6HGcIey24llByO3VO2jj2+XuPg3Cd
q0M50uOH6J0qXzmcuDZZWC1UdgZZL9hLYIJb/naO2Hk/6aWotP1kGkoW1rElP4m1
pxhAwbOCTtklaq4nfsRP6Zggy+nSRWNwaujdMA5OndxwZK6W1HZ+qeTin2xX77Hb
19NwLtRvRWcRUC/cPxZcj2RkO3OBz6MbWESYNUfVTYj50751HFQ+DoQ6Ev4a+v/t
P/EKeXr9j1Wm3PZ8wpqE7IA/SdgW9nHj
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:03 2025 by rpki-client