
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft
File: ZgXWapgEftsGpJSzdC9eyCuB3LA.mft (raw, json)
Hash identifier: Dt0RF+pr9Fokp0BsuRmZpRnfKa7ooK/WF2xfB7r9qCI=
Subject key identifier: 0B:91:1B:E2:F7:F5:85:5E:70:83:05:52:14:2F:96:C0:0E:37:14:FC
Authority key identifier: 66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0
Certificate issuer: /CN=A91E22E3/serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0
Certificate serial: 010F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft
Manifest number: 010F
Signing time: Mon 03 Nov 2025 04:53:05 +0000
Manifest this update: Mon 03 Nov 2025 04:53:04 +0000
Manifest next update: Mon 10 Nov 2025 04:53:04 +0000
Files and hashes: 1: ZgXWapgEftsGpJSzdC9eyCuB3LA.crl (hash: 1t2XeH/en3JiRn7ZsYcSPXVy+3GOPwWdyIgvALG13G4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl
rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E22E3, serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0
Validity
Not Before: Nov 3 04:53:04 2025 GMT
Not After : Nov 10 04:53:04 2025 GMT
Subject: CN=69083531-77d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bc:2d:25:eb:bb:cb:8c:84:85:5d:c1:0a:24:
91:47:60:dc:78:85:a7:f8:cf:65:5e:8f:12:48:35:
35:15:7c:fc:8a:92:fa:10:fd:3b:d1:83:33:b5:29:
36:00:05:36:9d:c2:95:0b:72:ce:c0:87:03:40:fa:
da:04:d0:ba:1a:eb:8b:d7:c7:fd:92:84:d3:a2:e7:
2a:22:13:d7:b3:fb:00:7d:5f:1d:bc:e8:3b:07:8e:
d2:a2:1b:10:0e:6a:9d:d0:cc:53:80:b1:30:d8:87:
a3:1a:04:87:5e:91:a2:cf:f2:eb:72:67:86:05:fa:
f3:c0:19:f7:39:6a:38:26:f8:55:35:6e:81:ef:2a:
1d:45:a9:d1:d1:39:fd:4e:d6:3a:5b:d2:6c:2d:55:
84:b4:db:43:9a:61:d5:19:41:87:0a:c4:2f:15:90:
dd:fa:c3:e6:b4:dd:c2:a5:0d:b8:4e:d8:88:0d:76:
f2:87:4c:f7:4b:26:b7:36:a0:36:a2:1a:9b:6d:6c:
6e:9f:50:6c:8c:1a:ab:dd:88:91:7a:e1:df:4d:7f:
bc:5c:0d:43:92:19:68:0d:33:8c:4f:63:4b:8d:55:
50:52:d7:35:46:c6:2f:50:a5:de:44:16:b8:22:e9:
71:01:02:28:58:de:46:28:57:0e:f9:68:32:86:d6:
a7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:91:1B:E2:F7:F5:85:5E:70:83:05:52:14:2F:96:C0:0E:37:14:FC
X509v3 Authority Key Identifier:
keyid:66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:40:55:10:b1:af:da:6b:4c:60:b5:6d:d5:7a:aa:d4:ea:19:
cf:71:99:68:55:8b:b3:ab:a2:ae:62:ab:2c:44:c3:56:d3:99:
9f:5b:ea:ff:5f:da:db:7d:e9:b0:ae:36:a9:db:dd:fa:20:0f:
c3:01:cc:71:86:1a:83:dc:bd:7f:49:60:5d:d6:bf:5c:51:a3:
8f:3b:1d:de:c7:d5:fd:07:88:f1:11:47:e6:fe:28:8b:dc:d6:
98:2d:f8:9e:9d:ec:65:f8:03:71:69:76:6a:17:c1:09:85:29:
b7:eb:47:b4:bb:fc:92:3f:e8:f3:0e:3e:58:38:f4:3a:b4:99:
50:5c:f6:36:36:9d:7d:44:c1:f5:71:14:e9:b0:13:e4:07:a9:
68:03:7b:e6:8f:35:ee:a8:a3:ec:c3:8f:71:81:8b:87:dd:e4:
7b:90:34:2c:bd:13:c3:31:75:7f:52:6b:95:f3:6e:2f:23:8a:
61:64:32:0e:60:4c:f4:e2:25:e0:e1:f3:53:32:33:a1:29:ac:
68:30:96:cb:f5:42:30:43:0b:4b:ee:f9:92:9b:a9:d0:f4:93:
63:7d:2a:82:1c:23:62:98:5d:f5:dc:13:dc:ab:5e:f1:ae:00:
40:1b:9a:0f:32:03:a8:f4:d5:4b:f1:2c:de:29:e9:87:2c:46:
77:24:87:c5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTIyRTMxMTAvBgNVBAUTKDY2MDVENjZBOTgwNDdFREIwNkE0OTRCMzc0MkY1RUM4
MkI4MURDQjAwHhcNMjUxMTAzMDQ1MzA0WhcNMjUxMTEwMDQ1MzA0WjAYMRYwFAYD
VQQDEw02OTA4MzUzMS03N2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0LwtJeu7y4yEhV3BCiSRR2DceIWn+M9lXo8SSDU1FXz8ipL6EP070YMztSk2
AAU2ncKVC3LOwIcDQPraBNC6GuuL18f9koTToucqIhPXs/sAfV8dvOg7B47SohsQ
Dmqd0MxTgLEw2IejGgSHXpGiz/LrcmeGBfrzwBn3OWo4JvhVNW6B7yodRanR0Tn9
TtY6W9JsLVWEtNtDmmHVGUGHCsQvFZDd+sPmtN3CpQ24TtiIDXbyh0z3Sya3NqA2
ohqbbWxun1BsjBqr3YiReuHfTX+8XA1DkhloDTOMT2NLjVVQUtc1RsYvUKXeRBa4
IulxAQIoWN5GKFcO+WgyhtanEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAuRG+L3
9YVecIMFUhQvlsAONxT8MB8GA1UdIwQYMBaAFGYF1mqYBH7bBqSUs3QvXsgrgdyw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjJFMy84NEIwQTg1RTE3
MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi9aZ1hXYXBnRWZ0c0dwSlN6ZEM5ZXlDdUIz
TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pnWFdhcGdFZnRzR3BKU3pkQzlleUN1QjNMQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MjJFMy84NEIwQTg1RTE3MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi9aZ1hXYXBnRWZ0
c0dwSlN6ZEM5ZXlDdUIzTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA+QFUQsa/aa0xgtW3VeqrU6hnPcZloVYuzq6KuYqssRMNW05mfW+r/
X9rbfemwrjap2936IA/DAcxxhhqD3L1/SWBd1r9cUaOPOx3ex9X9B4jxEUfm/iiL
3NaYLfienexl+ANxaXZqF8EJhSm360e0u/ySP+jzDj5YOPQ6tJlQXPY2Np19RMH1
cRTpsBPkB6loA3vmjzXuqKPsw49xgYuH3eR7kDQsvRPDMXV/UmuV824vI4phZDIO
YEz04iXg4fNTMjOhKaxoMJbL9UIwQwtL7vmSm6nQ9JNjfSqCHCNimF313BPcq17x
rgBAG5oPMgOo9NVL8SzeKemHLEZ3JIfF
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:45 2025 by rpki-client