
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
File: ak27o21Mdn1b1ytu6XCoAA_FSV4.mft (raw, json)
Hash identifier: RAD5nYR3i6ZC8S8QxFxNVMZXw5453FpPLlWQFRQRuQs=
Subject key identifier: B8:3F:EA:D3:70:F6:6F:FA:FB:9E:34:1C:92:A4:AF:93:CB:75:FD:82
Authority key identifier: 6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E
Certificate issuer: /CN=A91BF8C3/serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E
Certificate serial: 081E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
Manifest number: 0809
Signing time: Sun 02 Nov 2025 20:58:45 +0000
Manifest this update: Sun 02 Nov 2025 20:58:45 +0000
Manifest next update: Sun 09 Nov 2025 20:58:45 +0000
Files and hashes: 1: ak27o21Mdn1b1ytu6XCoAA_FSV4.crl (hash: VVmLITPYV2clv2jxCqB2UF5MQNvDb2JUb8J3Gn6mIl0=)
2: 0BD04D300F6D11EC8D9F1E13C4F9AE02.roa (hash: FfGvWbRgw7M2d0HlF6t0whQketZeGqrQDCwVLn5jEfk=)
3: A1D678CACD1D11EEBBCDB72BC4F9AE02.roa (hash: KUbdaIcIL3ANAib1/1yNdALhPqZywuDeLgdVE3tNncA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl
rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 20:58:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2078 (0x81e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF8C3, serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E
Validity
Not Before: Nov 2 20:58:45 2025 GMT
Not After : Nov 9 20:58:45 2025 GMT
Subject: CN=6907c605-44eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:44:d4:7a:b8:3f:3f:74:d0:29:31:b4:fc:
7c:11:74:e7:eb:6c:a4:cb:c3:82:54:37:58:bf:92:
9b:7a:1e:03:0b:c1:af:15:ff:e4:3a:80:6a:7d:25:
7f:4d:8c:de:20:83:ad:81:00:dc:62:65:38:d8:3a:
91:c9:db:f0:fa:51:2c:0c:6a:7c:ac:2b:ef:c5:21:
bd:66:47:a2:80:37:9e:b7:2e:70:a7:ab:21:1d:ba:
1f:0b:cb:33:c4:ee:3a:ef:3b:42:94:41:52:57:0f:
35:9f:27:d9:f5:c6:d1:0b:c8:3a:f6:a7:68:b5:24:
04:10:ce:7f:54:9d:ff:1a:b0:a8:ba:cc:34:bd:9a:
36:f0:c8:ce:bd:c7:1f:21:96:2a:03:2d:5a:b5:45:
fe:84:21:3f:3b:f4:34:2b:69:69:a7:3d:c9:24:8d:
d5:c2:40:5c:d9:ae:ed:b4:ff:d1:cf:e0:0e:ce:e2:
91:e1:b1:28:6b:8f:67:e7:44:27:ab:fe:5b:ed:34:
7d:1a:1d:66:f8:d4:86:09:13:06:b5:06:40:96:84:
53:3a:4c:be:c6:36:5f:00:f2:08:4f:19:70:ef:a7:
92:04:27:bd:ea:15:41:49:36:69:46:b6:fd:60:01:
5d:cf:e6:ea:0c:d8:02:fe:0c:65:8e:bd:a6:04:fb:
f5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3F:EA:D3:70:F6:6F:FA:FB:9E:34:1C:92:A4:AF:93:CB:75:FD:82
X509v3 Authority Key Identifier:
keyid:6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:4d:26:f4:0b:2d:da:83:5b:75:5d:e8:87:df:a3:9f:85:60:
56:d1:1e:16:9a:57:00:5a:68:db:a6:b4:67:e1:1a:5e:4e:e6:
a5:86:10:8c:b7:81:29:ec:1d:f9:5f:a4:34:d5:d1:b1:a3:9a:
e4:55:52:95:b4:ec:0b:5d:c0:cb:b8:db:57:a6:ef:72:44:bb:
24:ce:23:b6:91:99:3d:36:74:35:a0:07:9f:59:92:a9:3f:90:
14:02:bb:ff:83:0f:cc:5a:f4:eb:79:75:b8:62:00:53:a0:d8:
64:ae:35:2c:ba:8b:40:fc:68:b4:46:2a:2b:4f:6c:48:d4:a9:
df:3f:f5:6d:d8:67:6e:e9:6a:5d:1b:56:36:db:86:b3:77:88:
56:30:08:95:56:7a:7f:0d:19:ab:33:28:9a:d8:05:63:85:40:
6c:08:68:c4:50:a6:cc:c6:2e:52:a7:87:e2:3c:44:7f:1b:8f:
ca:a6:6f:40:2c:54:18:bd:7c:f2:22:2c:c8:40:ec:df:a1:6d:
8d:5b:e1:09:99:f9:e9:d4:b3:c8:fc:92:3a:68:5d:92:a9:60:
2d:8d:ed:20:dc:c9:90:3e:5e:bd:10:07:a8:3a:4f:a4:54:b0:
e6:d5:6e:7a:47:d5:aa:0e:eb:5c:bb:84:71:59:f2:e9:a3:46:
87:b9:a7:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkY4QzMxMTAvBgNVBAUTKDZBNERCQkEzNkQ0Qzc2N0Q1QkQ3MkI2RUU5NzBBODAw
MEZDNTQ5NUUwHhcNMjUxMTAyMjA1ODQ1WhcNMjUxMTA5MjA1ODQ1WjAYMRYwFAYD
VQQDEw02OTA3YzYwNS00NGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy3hE1Hq4Pz900CkxtPx8EXTn62yky8OCVDdYv5Kbeh4DC8GvFf/kOoBqfSV/
TYzeIIOtgQDcYmU42DqRydvw+lEsDGp8rCvvxSG9ZkeigDeety5wp6shHbofC8sz
xO467ztClEFSVw81nyfZ9cbRC8g69qdotSQEEM5/VJ3/GrCousw0vZo28MjOvccf
IZYqAy1atUX+hCE/O/Q0K2lppz3JJI3VwkBc2a7ttP/Rz+AOzuKR4bEoa49n50Qn
q/5b7TR9Gh1m+NSGCRMGtQZAloRTOky+xjZfAPIITxlw76eSBCe96hVBSTZpRrb9
YAFdz+bqDNgC/gxljr2mBPv18QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLg/6tNw
9m/6+540HJKkr5PLdf2CMB8GA1UdIwQYMBaAFGpNu6NtTHZ9W9crbulwqAAPxUle
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhDMy9EMEUzM0ZBNDAy
QzMxMUVCOEFEQzMyMzhDNEY5QUUwMi9hazI3bzIxTWRuMWIxeXR1NlhDb0FBX0ZT
VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FrMjdvMjFNZG4xYjF5dHU2WENvQUFfRlNWNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjhDMy9EMEUzM0ZBNDAyQzMxMUVCOEFEQzMyMzhDNEY5QUUwMi9hazI3bzIxTWRu
MWIxeXR1NlhDb0FBX0ZTVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBiTSb0Cy3ag1t1XeiH36OfhWBW0R4WmlcAWmjbprRn4RpeTualhhCM
t4Ep7B35X6Q01dGxo5rkVVKVtOwLXcDLuNtXpu9yRLskziO2kZk9NnQ1oAefWZKp
P5AUArv/gw/MWvTreXW4YgBToNhkrjUsuotA/Gi0RiorT2xI1KnfP/Vt2Gdu6Wpd
G1Y224azd4hWMAiVVnp/DRmrMyia2AVjhUBsCGjEUKbMxi5Sp4fiPER/G4/Kpm9A
LFQYvXzyIizIQOzfoW2NW+EJmfnp1LPI/JI6aF2SqWAtje0g3MmQPl69EAeoOk+k
VLDm1W56R9WqDutcu4RxWfLpo0aHuad7
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:13:29 2025 by rpki-client