
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
File: _vLBxOoJZEd1FMGqlG5sQXeNBr8.mft (raw, json)
Hash identifier: udIS/zrC1pNmZLHjt8uemSvnsrzAEdicKzX0xnNvOdE=
Subject key identifier: 7A:CA:3B:BD:0F:33:CF:31:50:F8:D3:BC:35:EF:4D:A5:96:C0:A8:42
Authority key identifier: FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF
Certificate issuer: /CN=A91D298D/serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF
Certificate serial: 08B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
Manifest number: 087B
Signing time: Sun 02 Nov 2025 20:48:36 +0000
Manifest this update: Sun 02 Nov 2025 20:48:36 +0000
Manifest next update: Sun 09 Nov 2025 20:48:36 +0000
Files and hashes: 1: _vLBxOoJZEd1FMGqlG5sQXeNBr8.crl (hash: ryt2yUmgOW57T5mUk8NiH6SU0YdifZoFI32D7q5SYiI=)
2: 65519ACC506C11EC99354984C4F9AE02.roa (hash: FSKLxu00ctg24+HmZkC2VPQWpobiDfHHaUN+7Y4NQZA=)
3: 01BB1B8E7C0411EFB0D29158C4F9AE02.roa (hash: KU0OYgNotYA3UtDO5hlxYlQJ813PAymWu54BIJPXlUQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl
rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 20:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2228 (0x8b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D298D, serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF
Validity
Not Before: Nov 2 20:48:36 2025 GMT
Not After : Nov 9 20:48:36 2025 GMT
Subject: CN=6907c3a4-1370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f9:84:10:d8:fe:63:dd:1c:4c:6e:a7:6e:e4:
f6:f9:c6:62:3a:4c:27:09:11:79:bb:62:c6:86:6e:
a0:9a:19:8c:ff:1b:b1:b0:98:f1:7c:ef:46:7e:61:
ec:9e:3b:5f:6d:25:98:c8:ae:d6:d9:78:12:00:f1:
94:fb:7f:bb:23:18:1b:f0:a0:4f:a0:11:9d:a0:55:
d0:88:c5:67:f2:32:7b:82:3a:f1:97:ca:65:5f:5b:
e3:54:76:32:fd:9a:d0:39:59:f0:73:2b:37:fe:78:
7a:87:16:8a:1f:0d:54:60:b4:f6:c5:e1:75:96:1e:
91:a9:f8:24:86:62:ac:6b:12:ca:e2:0d:66:dc:27:
47:92:1d:fe:52:c7:2b:73:73:35:f0:b4:8a:bf:e8:
44:8b:68:a1:27:f8:10:78:76:8b:5a:9b:d8:8e:f4:
76:00:72:66:e2:7a:12:a2:e1:9b:0b:29:76:a5:bb:
e1:c5:74:65:61:f8:37:8d:9f:ee:da:b2:2a:11:46:
95:76:a3:22:9f:9d:e2:00:a6:20:9f:15:e6:f5:3f:
94:70:65:ff:25:7f:49:4e:1f:92:78:2c:96:63:65:
84:85:de:fd:2f:4e:33:5d:5f:a0:3c:27:4c:56:43:
71:6e:97:ee:62:ce:67:c0:2f:98:ee:14:45:2e:a9:
73:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CA:3B:BD:0F:33:CF:31:50:F8:D3:BC:35:EF:4D:A5:96:C0:A8:42
X509v3 Authority Key Identifier:
keyid:FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:22:4b:ef:71:78:8b:7c:cb:dd:05:01:47:0f:03:5e:7f:52:
84:98:17:42:62:cf:50:4f:1b:77:95:98:78:aa:c0:8f:22:6e:
63:e4:db:0a:27:c8:43:6d:e0:3c:fc:aa:14:f7:8c:9a:c8:75:
fb:a3:eb:f8:de:d9:9e:90:f8:24:b7:b9:d8:05:a8:94:4a:1c:
fd:ea:af:ea:ea:2a:bc:43:5a:77:ce:ae:ba:50:25:35:5e:e9:
33:e6:55:d1:7f:a5:c5:cc:30:68:86:31:5c:13:50:c5:77:b7:
db:b2:53:1b:3d:a1:41:d2:3d:49:a3:b9:55:57:b6:06:36:01:
df:41:f0:06:03:b0:b1:87:75:7d:23:2e:6c:d4:fb:06:16:be:
08:87:ec:81:fe:ad:57:45:47:79:65:b7:9e:04:3f:37:67:aa:
41:bf:62:ad:b5:cf:d5:6e:fb:27:87:0d:8f:e7:84:7c:bc:0e:
1f:6c:70:67:19:92:ff:f2:64:68:85:db:d2:44:b2:76:40:4b:
36:ff:a6:83:3b:23:8d:ea:04:6e:ff:d7:1c:06:7c:89:07:85:
04:a2:91:f4:e9:58:1f:19:43:bc:9c:6a:71:97:0b:64:d5:de:
d2:10:25:e0:d4:04:ae:c7:fc:d1:46:19:da:5d:23:0c:5b:be:
ef:75:61:b7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDI5OEQxMTAvBgNVBAUTKEZFRjJDMUM0RUEwOTY0NDc3NTE0QzFBQTk0NkU2QzQx
Nzc4RDA2QkYwHhcNMjUxMTAyMjA0ODM2WhcNMjUxMTA5MjA0ODM2WjAYMRYwFAYD
VQQDEw02OTA3YzNhNC0xMzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqfmEENj+Y90cTG6nbuT2+cZiOkwnCRF5u2LGhm6gmhmM/xuxsJjxfO9GfmHs
njtfbSWYyK7W2XgSAPGU+3+7Ixgb8KBPoBGdoFXQiMVn8jJ7gjrxl8plX1vjVHYy
/ZrQOVnwcys3/nh6hxaKHw1UYLT2xeF1lh6RqfgkhmKsaxLK4g1m3CdHkh3+Uscr
c3M18LSKv+hEi2ihJ/gQeHaLWpvYjvR2AHJm4noSouGbCyl2pbvhxXRlYfg3jZ/u
2rIqEUaVdqMin53iAKYgnxXm9T+UcGX/JX9JTh+SeCyWY2WEhd79L04zXV+gPCdM
VkNxbpfuYs5nwC+Y7hRFLqlz6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrKO70P
M88xUPjTvDXvTaWWwKhCMB8GA1UdIwQYMBaAFP7ywcTqCWRHdRTBqpRubEF3jQa/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjk4RC8zMzdBNjQzMkYx
QTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9fdkxCeE9vSlpFZDFGTUdxbEc1c1FYZU5C
cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL192TEJ4T29KWkVkMUZNR3FsRzVzUVhlTkJyOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Mjk4RC8zMzdBNjQzMkYxQTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9fdkxCeE9vSlpF
ZDFGTUdxbEc1c1FYZU5CcjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAgIkvvcXiLfMvdBQFHDwNef1KEmBdCYs9QTxt3lZh4qsCPIm5j5NsK
J8hDbeA8/KoU94yayHX7o+v43tmekPgkt7nYBaiUShz96q/q6iq8Q1p3zq66UCU1
Xukz5lXRf6XFzDBohjFcE1DFd7fbslMbPaFB0j1Jo7lVV7YGNgHfQfAGA7Cxh3V9
Iy5s1PsGFr4Ih+yB/q1XRUd5ZbeeBD83Z6pBv2Kttc/Vbvsnhw2P54R8vA4fbHBn
GZL/8mRohdvSRLJ2QEs2/6aDOyON6gRu/9ccBnyJB4UEopH06VgfGUO8nGpxlwtk
1d7SECXg1ASux/zRRhnaXSMMW77vdWG3
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:13:23 2025 by rpki-client