
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft
File: 4UpZOzEqmIVz16Xd-uB_kSaTyII.mft (raw, json)
Hash identifier: 1bWwLu2bepEg4QicJf3sjsYmPiy42JJotk/HUNKG9r8=
Subject key identifier: A2:AF:56:EB:8E:D1:92:B2:E1:93:D9:C7:78:78:8E:39:92:42:8A:D9
Authority key identifier: E1:4A:59:3B:31:2A:98:85:73:D7:A5:DD:FA:E0:7F:91:26:93:C8:82
Certificate issuer: /CN=A91D4ACD/serialNumber=E14A593B312A988573D7A5DDFAE07F912693C882
Certificate serial: D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft
Manifest number: D8
Signing time: Mon 03 Nov 2025 05:38:56 +0000
Manifest this update: Mon 03 Nov 2025 05:38:56 +0000
Manifest next update: Mon 10 Nov 2025 05:38:56 +0000
Files and hashes: 1: 4UpZOzEqmIVz16Xd-uB_kSaTyII.crl (hash: PlodgP9qH/vXHqZXmoITYAK7l2aiSwCWLAGmtKWpD1k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.crl
rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 05:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4ACD, serialNumber=E14A593B312A988573D7A5DDFAE07F912693C882
Validity
Not Before: Nov 3 05:38:56 2025 GMT
Not After : Nov 10 05:38:56 2025 GMT
Subject: CN=69083ff0-af12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8a:66:84:58:5a:7d:b0:1d:e4:f4:ab:fe:a3:
32:f5:2f:a6:89:08:b9:62:d1:bd:37:68:84:6d:52:
fa:91:46:24:77:e0:6a:11:bc:89:cc:bd:58:16:13:
17:29:29:a3:bd:79:7a:cf:86:46:3d:8a:80:67:2d:
97:14:16:9a:11:13:6c:03:b5:65:bb:c4:3b:59:94:
d2:1f:32:d9:42:08:a1:c5:28:c2:0b:98:93:d2:1d:
3a:09:39:f8:f5:ed:84:db:b8:7a:6d:ba:79:04:be:
64:07:bd:d1:21:e1:b7:86:e6:ee:33:0d:a0:12:59:
a5:c2:5d:59:3b:2f:63:9a:c2:53:ac:4f:81:5d:fa:
8b:de:e8:eb:8f:87:fc:f6:22:be:43:b6:51:8f:d7:
4a:8e:ee:1d:c8:a8:41:9b:1d:5e:db:81:4a:35:d6:
37:7d:07:29:ca:f2:a4:fc:b5:01:9e:48:6c:74:20:
98:20:d4:63:e5:f6:ae:fd:7c:2f:ef:a4:c9:08:ca:
ed:b1:53:db:5b:49:cc:58:65:b3:81:ab:63:4b:3a:
13:98:c8:da:83:e7:8f:3a:27:cd:46:72:d3:21:86:
c4:7a:46:60:e6:04:db:22:19:13:01:57:49:c6:de:
5d:7e:45:e9:08:ce:af:0e:8b:2f:db:78:77:0e:9a:
9b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AF:56:EB:8E:D1:92:B2:E1:93:D9:C7:78:78:8E:39:92:42:8A:D9
X509v3 Authority Key Identifier:
keyid:E1:4A:59:3B:31:2A:98:85:73:D7:A5:DD:FA:E0:7F:91:26:93:C8:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:a2:74:9f:9f:af:54:29:2b:49:f2:87:fd:2c:8e:b0:90:b3:
71:f2:e3:a1:12:cc:68:bb:29:09:8e:2a:e6:72:36:40:45:79:
20:89:08:fb:83:67:0f:a6:7b:86:4e:45:2a:aa:f5:95:cd:7c:
73:20:ef:11:8e:1c:99:cf:5c:47:83:48:55:4f:b0:4f:34:5c:
d6:d1:24:0f:25:4a:0f:5a:ac:04:18:1c:1a:85:bd:0f:8c:57:
8e:c7:a9:b9:ab:7c:d1:87:4a:31:73:38:da:fd:fd:2e:9a:f5:
0a:4b:1a:9f:f2:17:04:dc:aa:59:47:b9:5e:71:ca:ed:1b:33:
1f:db:40:c0:a8:d7:94:f4:83:d0:b0:a1:6a:00:d5:a2:d1:c8:
fd:75:7c:fa:48:d3:60:e3:fc:4c:51:d7:36:f6:e7:e1:42:f8:
bd:ec:80:ce:81:91:8e:f4:9a:a3:bb:7d:72:91:86:46:c8:29:
6e:1b:28:c5:ff:16:7e:1b:cc:8c:51:05:59:ae:bf:0a:24:cf:
c0:d6:97:47:a1:bc:e5:26:09:e4:ee:90:a7:e3:d4:a8:f6:f3:
17:ab:d6:c1:4d:c1:32:5f:81:22:cb:d5:55:87:e4:b3:bd:d4:
e3:86:5d:6b:6b:1f:dc:19:46:7d:ae:f2:5f:0f:39:34:70:5d:
c8:e4:3a:b5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDRBQ0QxMTAvBgNVBAUTKEUxNEE1OTNCMzEyQTk4ODU3M0Q3QTVEREZBRTA3Rjkx
MjY5M0M4ODIwHhcNMjUxMTAzMDUzODU2WhcNMjUxMTEwMDUzODU2WjAYMRYwFAYD
VQQDEw02OTA4M2ZmMC1hZjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA34pmhFhafbAd5PSr/qMy9S+miQi5YtG9N2iEbVL6kUYkd+BqEbyJzL1YFhMX
KSmjvXl6z4ZGPYqAZy2XFBaaERNsA7Vlu8Q7WZTSHzLZQgihxSjCC5iT0h06CTn4
9e2E27h6bbp5BL5kB73RIeG3hubuMw2gElmlwl1ZOy9jmsJTrE+BXfqL3ujrj4f8
9iK+Q7ZRj9dKju4dyKhBmx1e24FKNdY3fQcpyvKk/LUBnkhsdCCYINRj5fau/Xwv
76TJCMrtsVPbW0nMWGWzgatjSzoTmMjag+ePOifNRnLTIYbEekZg5gTbIhkTAVdJ
xt5dfkXpCM6vDosv23h3Dpqb3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKvVuuO
0ZKy4ZPZx3h4jjmSQorZMB8GA1UdIwQYMBaAFOFKWTsxKpiFc9el3frgf5Emk8iC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEFDRC8yOTAzMUEzQTc1
NkUxMUVGOUNBNDZFNTFDNEY5QUUwMi80VXBaT3pFcW1JVnoxNlhkLXVCX2tTYVR5
SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRVcFpPekVxbUlWejE2WGQtdUJfa1NhVHlJSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NEFDRC8yOTAzMUEzQTc1NkUxMUVGOUNBNDZFNTFDNEY5QUUwMi80VXBaT3pFcW1J
VnoxNlhkLXVCX2tTYVR5SUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAxonSfn69UKStJ8of9LI6wkLNx8uOhEsxouykJjirmcjZARXkgiQj7
g2cPpnuGTkUqqvWVzXxzIO8RjhyZz1xHg0hVT7BPNFzW0SQPJUoPWqwEGBwahb0P
jFeOx6m5q3zRh0oxczja/f0umvUKSxqf8hcE3KpZR7leccrtGzMf20DAqNeU9IPQ
sKFqANWi0cj9dXz6SNNg4/xMUdc29ufhQvi97IDOgZGO9Jqju31ykYZGyCluGyjF
/xZ+G8yMUQVZrr8KJM/A1pdHobzlJgnk7pCn49So9vMXq9bBTcEyX4Eiy9VVh+Sz
vdTjhl1rax/cGUZ9rvJfDzk0cF3I5Dq1
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:31 2025 by rpki-client