
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
File: fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json)
Hash identifier: 11VjgWwX0b9x5w8DwRs19lBWjQsjhzjqefZt6u0gM5E=
Subject key identifier: 86:6D:03:90:D6:47:11:02:65:B0:ED:D5:DB:5F:A4:B1:B2:51:C0:9E
Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Certificate serial: 09B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
Manifest number: 0945
Signing time: Tue 28 Oct 2025 20:18:36 +0000
Manifest this update: Tue 28 Oct 2025 20:18:35 +0000
Manifest next update: Tue 04 Nov 2025 20:18:35 +0000
Files and hashes: 1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: CpW5bihGPKfxrAGH6J6NCMkFPNI38sf1goUtqZFqgWo=)
2: 49E75ECAD66F11EF8C443287C4F9AE02.roa (hash: 6eLBLTiRLG59b19Vh6VakQSbL4yifX/0CdBZxWB4WEY=)
3: 501941C093F211EEA029A113C4F9AE02.roa (hash: FhESrn/DCqUnNSrnrcCxTem1wxJCB6TNgEsA8vGhFD0=)
4: 8DA3D4E03F7E11F0B8EF8F28C4F9AE02.roa (hash: /znaKV3KjWiiYiywi65esGpUip1B0gcKXgL7UimYW5U=)
5: 781C64FAF58611ED89273159C4F9AE02.roa (hash: lwV/ynteCUHJi+p3z2mrWfc4T5PCrXOSxxmLmNk4dP0=)
6: FECBA2C23B2611EFAF167E83C4F9AE02.roa (hash: Y7HIfK+dgei476aRla7phi/541mDTNFxZ1eh4K1sDYk=)
7: A8896B1892E811F0A5E48134C4F9AE02.roa (hash: xCyhd7BrMRSo37r2kc8C1tCVJGoR2T+Kqf1BZgUiJL0=)
8: 9672E862793811EE92C54834C4F9AE02.roa (hash: UGwpdFjyj5op9VWtjdDebDyJLyb7++gFQLq7ibC5Zo8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl
rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Nov 2025 20:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2483 (0x9b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Validity
Not Before: Oct 28 20:18:35 2025 GMT
Not After : Nov 4 20:18:35 2025 GMT
Subject: CN=6901251b-ca89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:00:bd:5c:c5:0d:61:01:af:45:1f:73:4b:f3:
f6:8e:f2:7a:18:09:69:23:33:d8:da:86:72:ce:e5:
91:70:95:80:79:a6:e8:37:6f:5f:b6:6b:e6:27:4d:
b6:f5:ee:52:bf:20:a0:d6:01:91:2f:d1:d4:66:9c:
c2:f0:df:9b:d4:c7:b0:17:72:4b:94:b0:36:9b:5a:
0c:3c:bc:d0:4a:bd:8c:40:c5:46:b5:d3:37:0d:05:
8e:5e:7e:2c:0b:32:de:fd:f0:86:b3:d6:63:16:aa:
f2:77:e4:ce:0b:bc:7a:17:86:83:79:24:13:86:36:
06:b9:2f:0f:55:c9:eb:cb:c0:84:ac:6c:6c:7b:e0:
4b:46:dd:55:5b:16:9b:78:57:53:98:af:84:63:ed:
bf:0d:0a:6f:6f:c4:f7:03:97:08:b8:87:e5:2b:b0:
8b:c5:2f:ad:38:d4:4d:2d:90:31:4b:e7:a3:c9:d3:
62:fc:78:35:55:3a:ac:d9:ab:54:31:98:aa:69:d6:
e8:a2:b1:3f:66:03:4f:85:55:8d:49:2b:45:70:f0:
00:fa:46:ea:61:80:a1:89:7b:02:7c:46:ad:9e:c3:
a2:49:c6:7a:2e:97:de:bf:1e:fd:1d:28:af:96:2a:
34:5c:31:21:c8:24:db:82:72:95:d3:62:23:01:34:
ff:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6D:03:90:D6:47:11:02:65:B0:ED:D5:DB:5F:A4:B1:B2:51:C0:9E
X509v3 Authority Key Identifier:
keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:11:fd:f7:4a:c4:ac:fb:d0:29:d4:33:81:a2:ba:c5:22:42:
1a:d2:a3:b3:43:0a:8e:7e:a6:7c:72:36:8c:39:40:5d:25:7a:
7d:66:6f:a5:38:31:f7:9e:fd:79:2c:6c:c4:c5:9e:a2:16:77:
41:7b:17:ed:68:98:a8:3d:ec:15:10:00:97:78:a5:b4:2e:ad:
ed:ba:a2:78:4b:18:82:9d:10:1d:3a:c2:f5:39:dd:4c:cc:ed:
c1:49:62:7b:5b:14:20:65:9b:af:28:67:28:bf:a5:00:98:65:
f7:fc:81:12:00:82:58:72:41:f1:77:2e:f5:0a:8a:17:e1:ba:
5c:1b:fb:8e:34:70:3e:2b:8e:a6:63:6e:14:58:f7:0d:b6:63:
4a:5c:93:63:16:44:0e:99:50:bc:05:16:19:12:0d:96:5a:8a:
9e:b1:bc:c3:f0:a6:19:14:c7:4d:98:56:49:5d:d7:87:43:31:
06:cd:04:51:d7:f0:af:d4:01:9c:e0:d8:79:e4:82:3c:12:82:
8e:52:dd:d4:df:68:2a:7e:e7:01:4b:ac:dd:48:85:dd:74:4b:
73:e7:42:f5:78:6d:f4:46:06:64:39:51:45:e8:bc:3c:20:12:
88:f0:b2:af:5d:b4:61:e3:e5:ba:7d:87:ec:30:d1:0c:38:28:
1e:69:f3:c7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjc3NzAxMTAvBgNVBAUTKDdENTU0Njk5MjZEMUY5MzRGM0FGMjk2NDVFQjZDMTBC
QjYwNjlCQzkwHhcNMjUxMDI4MjAxODM1WhcNMjUxMTA0MjAxODM1WjAYMRYwFAYD
VQQDEw02OTAxMjUxYi1jYTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1gC9XMUNYQGvRR9zS/P2jvJ6GAlpIzPY2oZyzuWRcJWAeaboN29ftmvmJ022
9e5SvyCg1gGRL9HUZpzC8N+b1MewF3JLlLA2m1oMPLzQSr2MQMVGtdM3DQWOXn4s
CzLe/fCGs9ZjFqryd+TOC7x6F4aDeSQThjYGuS8PVcnry8CErGxse+BLRt1VWxab
eFdTmK+EY+2/DQpvb8T3A5cIuIflK7CLxS+tONRNLZAxS+ejydNi/Hg1VTqs2atU
MZiqadboorE/ZgNPhVWNSStFcPAA+kbqYYChiXsCfEatnsOiScZ6Lpfevx79HSiv
lio0XDEhyCTbgnKV02IjATT/0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZtA5DW
RxECZbDt1dtfpLGyUcCeMB8GA1UdIwQYMBaAFH1VRpkm0fk0868pZF62wQu2BpvJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3MC9FNjgxMDQxMEMw
QUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1UVHpyeWxrWHJiQkM3WUdt
OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZWVkdtU2JSLVRUenJ5bGtYcmJCQzdZR204ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Nzc3MC9FNjgxMDQxMEMwQUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1U
VHpyeWxrWHJiQkM3WUdtOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC8Ef33SsSs+9Ap1DOBorrFIkIa0qOzQwqOfqZ8cjaMOUBdJXp9Zm+l
ODH3nv15LGzExZ6iFndBexftaJioPewVEACXeKW0Lq3tuqJ4SxiCnRAdOsL1Od1M
zO3BSWJ7WxQgZZuvKGcov6UAmGX3/IESAIJYckHxdy71CooX4bpcG/uONHA+K46m
Y24UWPcNtmNKXJNjFkQOmVC8BRYZEg2WWoqesbzD8KYZFMdNmFZJXdeHQzEGzQRR
1/Cv1AGc4Nh55II8EoKOUt3U32gqfucBS6zdSIXddEtz50L1eG30RgZkOVFF6Lw8
IBKI8LKvXbRh4+W6fYfsMNEMOCgeafPH
-----END CERTIFICATE-----
Generated at Thu Oct 30 05:16:04 2025 by rpki-client