
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
File: ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft (raw, json)
Hash identifier: 7qV7OKfyEg0RnYWlhDv3tv0Jb13M2D4Rj+x6PGPCvro=
Subject key identifier: DC:43:FD:A5:2E:FE:9C:1E:31:C3:BB:AE:1E:C7:2E:2C:EF:F9:D9:19
Authority key identifier: 65:E0:AF:A4:D1:01:BA:A0:5D:42:5D:EB:7C:25:28:96:CB:8D:5A:86
Certificate issuer: /CN=A91E13CF/serialNumber=65E0AFA4D101BAA05D425DEB7C252896CB8D5A86
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
Manifest number: 1E
Signing time: Mon 03 Nov 2025 07:47:50 +0000
Manifest this update: Mon 03 Nov 2025 07:47:49 +0000
Manifest next update: Mon 10 Nov 2025 07:47:49 +0000
Files and hashes: 1: ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl (hash: WARAJDOa1DlfOrjFLvYr2a5bbqqGy4vGQe8nhBaXgoE=)
2: D88B7AD48E3511F0A7463923C4F9AE02.roa (hash: iBuE2y9jsCxNhDssZJLnYX+1LbXLRzvojv5ZS/EkcXw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl
rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 07:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E13CF, serialNumber=65E0AFA4D101BAA05D425DEB7C252896CB8D5A86
Validity
Not Before: Nov 3 07:47:49 2025 GMT
Not After : Nov 10 07:47:49 2025 GMT
Subject: CN=69085e25-b445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:aa:41:af:d2:58:06:c6:10:18:fb:0f:99:33:
cd:25:e3:ae:72:58:92:86:10:13:56:0d:00:76:e5:
c9:1a:d5:c9:b5:59:d1:ec:3b:1e:c6:f0:06:5a:85:
0a:ed:26:66:97:12:64:40:06:a4:b8:fb:e1:72:d8:
bc:b7:57:a3:ef:0b:71:1d:a2:d0:87:c7:49:f7:11:
f4:61:d4:4d:70:f1:02:88:c3:ce:b9:a3:69:87:95:
1d:6a:ed:25:1a:ed:9f:f5:75:4b:ad:fe:7b:38:fa:
ec:95:94:25:95:8b:4a:6e:48:ce:90:be:15:be:bd:
fa:fa:e4:37:c1:67:65:d4:f7:ed:fc:b3:ba:7a:64:
f0:27:be:af:68:d9:0b:aa:e8:09:07:0d:fe:d6:87:
d9:00:b2:15:15:c5:4a:07:9f:ec:00:c7:d2:09:37:
4c:cf:6f:d6:17:1d:d2:4a:f0:37:cf:84:55:b1:e4:
84:98:76:d9:52:73:c6:13:a5:86:a1:98:36:f5:de:
17:43:c0:81:01:7d:ab:67:f2:43:c3:5e:96:5b:e0:
b2:c2:a0:fe:d7:aa:cd:4f:da:61:35:96:0b:cd:2a:
12:03:3c:e2:b5:c7:db:f1:da:4b:af:ce:d4:4f:17:
91:cb:9d:55:95:70:d8:f5:ba:4a:93:49:8f:83:46:
1b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:43:FD:A5:2E:FE:9C:1E:31:C3:BB:AE:1E:C7:2E:2C:EF:F9:D9:19
X509v3 Authority Key Identifier:
keyid:65:E0:AF:A4:D1:01:BA:A0:5D:42:5D:EB:7C:25:28:96:CB:8D:5A:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:15:01:4d:bf:4d:ff:0a:f3:64:1f:2d:24:ea:e2:a4:93:e2:
59:a5:d0:c5:c4:8b:b7:b4:f0:ae:fa:4b:65:a0:5b:15:36:45:
fd:d8:c2:8c:04:77:03:86:75:54:06:58:30:49:cd:e9:73:55:
7b:aa:57:c8:8e:60:f3:a8:6a:a7:0a:7d:e3:a8:1b:68:87:93:
33:4e:03:8a:08:77:c2:80:96:71:f4:92:3c:f4:f9:e2:a8:64:
cf:63:50:c6:a6:91:56:37:a7:f4:93:60:34:e5:ab:29:53:78:
f4:e7:74:1b:20:27:b4:d1:4c:2c:af:db:f6:49:6e:7f:1e:65:
e7:a1:91:66:b8:08:04:ec:99:fc:04:45:8f:9b:ef:47:e3:6d:
fd:04:65:87:2d:b8:9a:40:f6:d1:b1:08:a2:cc:cb:95:4f:2c:
ae:63:7f:af:ae:b8:58:0e:68:eb:f1:18:74:04:c0:ed:82:9c:
5c:73:f3:db:12:b0:3a:ce:f6:b1:e4:13:c4:dd:49:c2:7a:84:
a9:01:11:28:5a:a0:d7:b0:4a:b9:14:73:1b:31:04:82:12:95:
ad:e9:e7:59:72:86:2b:8b:24:5e:9d:89:8c:08:e8:5b:c2:9c:
35:b0:62:42:b1:a7:a4:1c:59:78:80:81:27:10:a7:4e:2e:7a:
f5:f6:84:ab
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MTNDRjExMC8GA1UEBRMoNjVFMEFGQTREMTAxQkFBMDVENDI1REVCN0MyNTI4OTZD
QjhENUE4NjAeFw0yNTExMDMwNzQ3NDlaFw0yNTExMTAwNzQ3NDlaMBgxFjAUBgNV
BAMTDTY5MDg1ZTI1LWI0NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCgqkGv0lgGxhAY+w+ZM80l465yWJKGEBNWDQB25cka1cm1WdHsOx7G8AZahQrt
JmaXEmRABqS4++Fy2Ly3V6PvC3EdotCHx0n3EfRh1E1w8QKIw865o2mHlR1q7SUa
7Z/1dUut/ns4+uyVlCWVi0puSM6QvhW+vfr65DfBZ2XU9+38s7p6ZPAnvq9o2Quq
6AkHDf7Wh9kAshUVxUoHn+wAx9IJN0zPb9YXHdJK8DfPhFWx5ISYdtlSc8YTpYah
mDb13hdDwIEBfatn8kPDXpZb4LLCoP7Xqs1P2mE1lgvNKhIDPOK1x9vx2kuvztRP
F5HLnVWVcNj1ukqTSY+DRhtNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3EP9pS7+
nB4xw7uuHscuLO/52RkwHwYDVR0jBBgwFoAUZeCvpNEBuqBdQl3rfCUolsuNWoYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxM0NGLzE5MDZBQTRFOEUz
NTExRjA5RTA1RTMxMEM0RjlBRTAyL1plQ3ZwTkVCdXFCZFFsM3JmQ1VvbHN1Tldv
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWmVDdnBORUJ1cUJkUWwzcmZDVW9sc3VOV29ZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx
M0NGLzE5MDZBQTRFOEUzNTExRjA5RTA1RTMxMEM0RjlBRTAyL1plQ3ZwTkVCdXFC
ZFFsM3JmQ1VvbHN1TldvWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHIVAU2/Tf8K82QfLSTq4qST4lml0MXEi7e08K76S2WgWxU2Rf3YwowE
dwOGdVQGWDBJzelzVXuqV8iOYPOoaqcKfeOoG2iHkzNOA4oId8KAlnH0kjz0+eKo
ZM9jUMamkVY3p/STYDTlqylTePTndBsgJ7TRTCyv2/ZJbn8eZeehkWa4CATsmfwE
RY+b70fjbf0EZYctuJpA9tGxCKLMy5VPLK5jf6+uuFgOaOvxGHQEwO2CnFxz89sS
sDrO9rHkE8TdScJ6hKkBEShaoNewSrkUcxsxBIISla3p51lyhiuLJF6diYwI6FvC
nDWwYkKxp6QcWXiAgScQp04uevX2hKs=
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:14:31 2025 by rpki-client