
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
File: hrKx0eeCRIuE9pgY8WofcHtUyGw.mft (raw, json)
Hash identifier: zU+/ZoqnqSBF2wNomwyIxolpb3smM1tzZmo0ktkRMHE=
Subject key identifier: 5A:BE:AB:9C:F7:47:B0:26:69:D1:46:13:A5:1E:4A:D0:7F:CF:D4:F9
Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
Certificate issuer: /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Certificate serial: 0726
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
Manifest number: 0712
Signing time: Tue 28 Oct 2025 21:45:47 +0000
Manifest this update: Tue 28 Oct 2025 21:45:47 +0000
Manifest next update: Tue 04 Nov 2025 21:45:47 +0000
Files and hashes: 1: hrKx0eeCRIuE9pgY8WofcHtUyGw.crl (hash: IVhI8/+6OiN80GIfDtB36TE6acyonTOuamClbfi/2K8=)
2: E658D57AAB4111F09E35ED65C4F9AE02.roa (hash: Hd39KMCP5bAeu+noj7ulmTIBQfRBGl83787l/+OHLDU=)
3: 8A5AA9BAAB4111F09E531265C4F9AE02.roa (hash: 5nVofohvG6M+3k2sujdcV8yvkToMkKYigEUYnGzho5Y=)
4: 7A27A6E45FDB11EBA5C9EA7CC4F9AE02.roa (hash: W63Eb+30MCK+wn3+q84oKaizsJ4BNesWyN0s9mJY3b8=)
5: 06E6952AAB4211F08DC86D66C4F9AE02.roa (hash: KCCPcPWsDKv1DRkqBbiUhd//6nA7nvgYDQUksRP6Wns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Nov 2025 21:45:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1830 (0x726)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC979, serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Validity
Not Before: Oct 28 21:45:47 2025 GMT
Not After : Nov 4 21:45:47 2025 GMT
Subject: CN=6901398b-87fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:6f:95:be:37:d8:6e:23:11:d3:e2:6c:31:
23:17:ba:7a:80:52:a5:86:b8:09:3c:20:9e:94:89:
a8:a2:d3:f9:bc:89:a6:18:e6:ee:45:95:3b:bc:a7:
7f:b0:1d:9d:66:ad:af:46:bb:aa:6e:29:83:de:61:
b5:e5:76:46:bc:24:d3:a0:fb:4f:db:dd:32:27:74:
5c:ef:e5:90:f8:1c:b6:55:f5:a9:f2:ab:a2:70:1a:
9a:8b:41:93:b8:c1:ba:ad:3a:5b:c2:b3:18:6b:99:
9f:cc:4a:64:37:fd:43:2a:45:39:cb:45:d7:95:78:
fe:6d:6f:32:08:67:21:56:92:64:24:3e:93:27:1f:
8f:f4:56:ef:b2:22:06:d4:ed:23:9c:97:b1:1b:bf:
3d:69:51:a4:71:88:36:e2:20:8b:9a:6f:f2:b1:46:
68:b4:c1:c8:59:c0:09:6a:43:b8:ef:84:c9:af:b6:
24:c5:47:4e:bb:d1:87:bb:b4:a7:81:c2:6b:2b:03:
e7:6c:2f:d4:6e:c7:7c:58:2b:ae:34:1d:c3:60:be:
f3:71:35:c0:f9:d3:26:d5:7d:ea:6f:bd:b5:fd:da:
df:41:56:19:5f:4b:98:4e:a2:6e:82:1f:e3:66:93:
06:02:94:c1:8d:40:d8:38:91:44:6e:9a:6e:56:da:
fd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BE:AB:9C:F7:47:B0:26:69:D1:46:13:A5:1E:4A:D0:7F:CF:D4:F9
X509v3 Authority Key Identifier:
keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:d0:3d:5e:d0:8d:21:22:ab:65:2f:c5:50:5e:ec:fb:b5:90:
ec:e2:ce:af:69:12:8e:99:a5:41:24:b9:4c:4a:d8:09:74:1b:
0a:a5:86:7d:59:5a:ec:98:31:15:19:91:b6:71:29:7c:ca:03:
6b:cb:eb:f1:a6:62:54:55:7a:4f:5a:c6:2a:01:78:bc:66:97:
5a:43:89:ea:79:da:a4:01:c7:cb:09:30:08:5e:ce:e8:1c:96:
7a:f9:62:5b:10:68:79:46:30:99:2e:1c:ea:7f:d9:41:ae:a0:
74:a3:f0:41:a6:3e:1d:3f:1d:c0:50:9d:87:5f:a1:79:52:66:
16:19:8f:c5:5c:56:e5:32:24:98:a5:ad:3b:05:6c:31:6e:93:
d8:c7:20:50:f0:ed:73:3a:bf:e9:42:e6:24:f3:e0:27:1d:a4:
4f:9d:86:4c:09:a2:27:1e:7a:86:1d:ba:68:9e:79:ab:2f:06:
6c:27:4a:55:45:63:c1:f3:4b:f4:36:0b:c0:87:1f:31:49:92:
62:d5:ff:87:0a:5d:04:0f:a2:81:14:31:64:d7:be:72:4a:8b:
63:35:85:eb:cf:da:fa:77:3d:f5:37:71:26:12:4d:4b:95:e7:
cb:cb:eb:47:45:53:20:5a:53:79:53:5b:3e:5a:f3:98:01:e9:
8f:b4:be:0f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICByYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUM5NzkxMTAvBgNVBAUTKDg2QjJCMUQxRTc4MjQ0OEI4NEY2OTgxOEYxNkExRjcw
N0I1NEM4NkMwHhcNMjUxMDI4MjE0NTQ3WhcNMjUxMTA0MjE0NTQ3WjAYMRYwFAYD
VQQDEw02OTAxMzk4Yi04N2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtABvlb432G4jEdPibDEjF7p6gFKlhrgJPCCelImootP5vImmGObuRZU7vKd/
sB2dZq2vRruqbimD3mG15XZGvCTToPtP290yJ3Rc7+WQ+By2VfWp8quicBqai0GT
uMG6rTpbwrMYa5mfzEpkN/1DKkU5y0XXlXj+bW8yCGchVpJkJD6TJx+P9FbvsiIG
1O0jnJexG789aVGkcYg24iCLmm/ysUZotMHIWcAJakO474TJr7YkxUdOu9GHu7Sn
gcJrKwPnbC/Ubsd8WCuuNB3DYL7zcTXA+dMm1X3qb721/drfQVYZX0uYTqJugh/j
ZpMGApTBjUDYOJFEbppuVtr9swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFq+q5z3
R7AmadFGE6UeStB/z9T5MB8GA1UdIwQYMBaAFIaysdHngkSLhPaYGPFqH3B7VMhs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzk3OS9FRDYzM0U4NjVG
RDkxMUVCQTMwRUUzN0JDNEY5QUUwMi9ockt4MGVlQ1JJdUU5cGdZOFdvZmNIdFV5
R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hyS3gwZWVDUkl1RTlwZ1k4V29mY0h0VXlHdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
Qzk3OS9FRDYzM0U4NjVGRDkxMUVCQTMwRUUzN0JDNEY5QUUwMi9ockt4MGVlQ1JJ
dUU5cGdZOFdvZmNIdFV5R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCz0D1e0I0hIqtlL8VQXuz7tZDs4s6vaRKOmaVBJLlMStgJdBsKpYZ9
WVrsmDEVGZG2cSl8ygNry+vxpmJUVXpPWsYqAXi8ZpdaQ4nqedqkAcfLCTAIXs7o
HJZ6+WJbEGh5RjCZLhzqf9lBrqB0o/BBpj4dPx3AUJ2HX6F5UmYWGY/FXFblMiSY
pa07BWwxbpPYxyBQ8O1zOr/pQuYk8+AnHaRPnYZMCaInHnqGHbponnmrLwZsJ0pV
RWPB80v0NgvAhx8xSZJi1f+HCl0ED6KBFDFk175ySotjNYXrz9r6dz31N3EmEk1L
lefLy+tHRVMgWlN5U1s+WvOYAemPtL4P
-----END CERTIFICATE-----
Generated at Wed Oct 29 18:12:04 2025 by rpki-client