
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/-SborqRks6WJBsCbrEbeMddAn2Q.mft
File: -SborqRks6WJBsCbrEbeMddAn2Q.mft (raw, json)
Hash identifier: jmCgzvXywMBv+sZ4Daby1lBgMnBFWRhstFL5m6k8h40=
Subject key identifier: 1E:A1:1E:51:D0:00:01:68:F6:99:93:17:9E:F2:EF:A4:90:CE:E8:88
Authority key identifier: F9:26:E8:AE:A4:64:B3:A5:89:06:C0:9B:AC:46:DE:31:D7:40:9F:64
Certificate issuer: /CN=A91D8806/serialNumber=F926E8AEA464B3A58906C09BAC46DE31D7409F64
Certificate serial: 28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SborqRks6WJBsCbrEbeMddAn2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/-SborqRks6WJBsCbrEbeMddAn2Q.mft
Manifest number: 27
Signing time: Mon 03 Nov 2025 07:41:03 +0000
Manifest this update: Mon 03 Nov 2025 07:41:03 +0000
Manifest next update: Mon 10 Nov 2025 07:41:03 +0000
Files and hashes: 1: -SborqRks6WJBsCbrEbeMddAn2Q.crl (hash: c+iKVj5P3vRY+tAznM7P+OtkANSc3Gr25ce36GFyTpM=)
2: 0A2186867CD111F0B302D85AC4F9AE02.roa (hash: nhRwGjDx0Fm5UM7mImMZBw38WV939OfcRi7SwP7Yv4I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/-SborqRks6WJBsCbrEbeMddAn2Q.crl
rsync://rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/-SborqRks6WJBsCbrEbeMddAn2Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SborqRks6WJBsCbrEbeMddAn2Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 07:41:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8806, serialNumber=F926E8AEA464B3A58906C09BAC46DE31D7409F64
Validity
Not Before: Nov 3 07:41:03 2025 GMT
Not After : Nov 10 07:41:03 2025 GMT
Subject: CN=69085c8f-a653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:a2:45:ad:1d:d2:19:91:7d:e6:bb:f9:a4:
ab:ff:80:2b:bb:ad:ec:74:3e:20:7f:57:9f:39:da:
0d:d5:49:63:1c:af:8e:c1:7d:a1:94:43:06:a3:3c:
82:4d:12:06:f7:1b:da:c4:5f:45:7e:12:e8:fe:73:
ba:02:65:de:57:93:e9:f8:a6:90:11:26:a1:ba:7a:
f1:56:c7:fe:45:36:34:0e:02:a5:10:b6:2e:81:7d:
4c:56:b2:eb:ff:d1:d4:10:4a:27:42:c9:b9:1c:02:
09:fa:99:47:38:ba:84:78:fc:88:cd:95:9b:1e:7d:
d5:ba:dc:70:f0:c9:6d:1b:57:68:c2:83:b4:4e:d9:
e1:bd:af:46:be:c0:40:91:1f:b2:96:98:5b:06:ec:
eb:d3:f2:92:1e:1f:c3:95:ef:af:f6:35:4c:8b:70:
b1:dd:98:62:b1:59:80:5d:7d:6a:8c:f4:ff:34:d1:
d0:94:a9:26:00:96:b2:a1:f6:fb:09:27:8a:c3:8a:
8d:06:0d:c8:eb:2c:ce:23:76:09:50:db:c8:74:f5:
25:79:75:9e:55:45:f1:df:50:f7:fa:a2:93:0a:ab:
42:4a:1d:6c:df:ef:d9:14:3d:c5:d0:6a:3d:3a:ef:
f2:96:57:94:8c:dd:19:a6:3b:7d:cc:0c:97:fd:32:
40:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A1:1E:51:D0:00:01:68:F6:99:93:17:9E:F2:EF:A4:90:CE:E8:88
X509v3 Authority Key Identifier:
keyid:F9:26:E8:AE:A4:64:B3:A5:89:06:C0:9B:AC:46:DE:31:D7:40:9F:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/-SborqRks6WJBsCbrEbeMddAn2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SborqRks6WJBsCbrEbeMddAn2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/-SborqRks6WJBsCbrEbeMddAn2Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7f:c3:6a:73:cd:d6:19:64:b1:a9:30:93:c4:1c:0f:cf:f0:
65:ab:8e:27:cc:82:78:7b:e6:39:01:d8:b7:a5:6b:b7:b7:d8:
a0:f1:57:8f:ee:22:ed:25:93:7b:c1:8e:ab:c6:fa:bb:41:9e:
c6:14:ef:62:9a:81:35:51:46:90:49:61:33:47:04:b6:74:d9:
65:e2:94:4f:9a:51:73:3d:e9:8a:a2:08:8d:d4:d0:7f:ce:6d:
f5:55:5b:97:f7:30:da:82:36:71:68:0b:f6:17:b3:6d:c3:98:
06:ac:97:26:40:02:51:9b:c2:67:6a:e3:a8:a8:43:73:bd:51:
aa:18:4a:47:a8:45:ec:dc:31:85:c2:9c:d4:ad:e8:fd:b5:e6:
25:e3:35:1b:39:fa:f4:aa:ca:40:2d:47:06:57:40:92:dd:67:
54:1f:81:4c:25:e5:1a:c4:50:60:a6:6e:ff:73:18:38:14:52:
87:64:d2:89:7e:05:89:f2:32:13:77:23:3d:cd:fe:89:f9:84:
97:fa:f4:a4:41:78:af:51:7e:2a:16:5a:e6:17:36:47:0a:65:
af:3f:1f:1c:a8:44:93:85:d9:94:d1:d7:eb:29:1a:44:ab:10:
c3:3a:51:42:68:b8:93:fa:5c:91:c6:38:cd:02:51:2a:a2:6f:
59:a1:c5:88
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
ODgwNjExMC8GA1UEBRMoRjkyNkU4QUVBNDY0QjNBNTg5MDZDMDlCQUM0NkRFMzFE
NzQwOUY2NDAeFw0yNTExMDMwNzQxMDNaFw0yNTExMTAwNzQxMDNaMBgxFjAUBgNV
BAMTDTY5MDg1YzhmLWE2NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCtwqJFrR3SGZF95rv5pKv/gCu7rex0PiB/V5852g3VSWMcr47BfaGUQwajPIJN
Egb3G9rEX0V+Euj+c7oCZd5Xk+n4ppARJqG6evFWx/5FNjQOAqUQti6BfUxWsuv/
0dQQSidCybkcAgn6mUc4uoR4/IjNlZsefdW63HDwyW0bV2jCg7RO2eG9r0a+wECR
H7KWmFsG7OvT8pIeH8OV76/2NUyLcLHdmGKxWYBdfWqM9P800dCUqSYAlrKh9vsJ
J4rDio0GDcjrLM4jdglQ28h09SV5dZ5VRfHfUPf6opMKq0JKHWzf79kUPcXQaj06
7/KWV5SM3RmmO33MDJf9MkA1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHqEeUdAA
AWj2mZMXnvLvpJDO6IgwHwYDVR0jBBgwFoAU+SborqRks6WJBsCbrEbeMddAn2Qw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4ODA2L0UwMDhDRjU0N0ND
RjExRjBBRTE2NTk1N0M0RjlBRTAyLy1TYm9ycVJrczZXSkJzQ2JyRWJlTWRkQW4y
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvLVNib3JxUmtzNldKQnNDYnJFYmVNZGRBbjJRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4
ODA2L0UwMDhDRjU0N0NDRjExRjBBRTE2NTk1N0M0RjlBRTAyLy1TYm9ycVJrczZX
SkJzQ2JyRWJlTWRkQW4yUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBABx/w2pzzdYZZLGpMJPEHA/P8GWrjifMgnh75jkB2Lela7e32KDxV4/u
Iu0lk3vBjqvG+rtBnsYU72KagTVRRpBJYTNHBLZ02WXilE+aUXM96YqiCI3U0H/O
bfVVW5f3MNqCNnFoC/YXs23DmAaslyZAAlGbwmdq46ioQ3O9UaoYSkeoRezcMYXC
nNSt6P215iXjNRs5+vSqykAtRwZXQJLdZ1QfgUwl5RrEUGCmbv9zGDgUUodk0ol+
BYnyMhN3Iz3N/on5hJf69KRBeK9RfioWWuYXNkcKZa8/HxyoRJOF2ZTR1+spGkSr
EMM6UUJouJP6XJHGOM0CUSqib1mhxYg=
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:08:07 2025 by rpki-client