
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft
File: 7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft (raw, json)
Hash identifier: Y55+gi3WvoY1QWwAMXkIjm6wzxb9ftBfPhoqGadfQ8o=
Subject key identifier: 30:E5:AD:4D:BD:07:CF:88:60:2E:63:68:68:47:70:DB:31:C8:B7:0A
Authority key identifier: EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4
Certificate issuer: /CN=A91EF17A/serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft
Manifest number: F5
Signing time: Mon 03 Nov 2025 05:11:29 +0000
Manifest this update: Mon 03 Nov 2025 05:11:29 +0000
Manifest next update: Mon 10 Nov 2025 05:11:29 +0000
Files and hashes: 1: 7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl (hash: C8awjADT/YoFQIzQsLoe5bCtPgbB4Mb3DsmFx0IaS2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl
rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 05:11:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF17A, serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4
Validity
Not Before: Nov 3 05:11:29 2025 GMT
Not After : Nov 10 05:11:29 2025 GMT
Subject: CN=69083981-b534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0a:6e:f4:2f:a1:0d:3c:89:cb:4c:29:62:40:
fc:db:e9:c0:85:4e:c9:3f:a1:d6:be:6f:96:e2:e9:
d1:72:22:96:35:97:d2:3e:b7:25:9b:a5:88:8a:ed:
c2:4a:85:e5:5e:da:12:ba:e9:dd:ae:94:4b:59:ce:
66:a2:7b:61:8f:5d:a6:e0:bc:3c:19:27:4c:72:d8:
8b:2f:24:14:cc:1c:5d:9f:e0:7e:96:b1:41:fc:7a:
67:1d:9e:c7:82:2d:4d:05:d9:2b:18:4a:08:51:6c:
40:ad:e9:38:79:cf:0c:63:f2:99:47:7b:f2:a4:d1:
54:ed:a0:3e:a3:81:ee:53:e3:2f:c6:59:c3:ae:42:
e7:93:6f:f8:d2:33:01:1b:62:09:7d:36:a7:15:05:
2e:ec:5d:88:2b:13:99:1a:a6:aa:93:b2:76:a5:3d:
83:59:95:cc:c5:d7:76:4a:ac:3d:50:d3:67:98:b2:
b7:a5:f3:99:ce:e9:aa:f3:e5:b4:bf:1a:70:0a:ec:
0e:c1:53:cb:8c:b9:b7:65:df:76:90:94:b0:0c:76:
27:66:0d:7e:4f:fa:3a:2a:80:cc:3d:ca:fb:91:e7:
5a:0e:31:0f:b6:df:88:57:2e:eb:a4:1d:ca:8e:38:
ba:4f:4f:57:f0:96:05:59:ba:07:15:db:2d:ce:7d:
37:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E5:AD:4D:BD:07:CF:88:60:2E:63:68:68:47:70:DB:31:C8:B7:0A
X509v3 Authority Key Identifier:
keyid:EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:86:6b:9e:6a:03:ae:3f:1a:f6:65:3c:9f:2a:f8:1a:8f:f6:
70:32:78:45:27:fa:7c:38:6e:3c:87:73:7e:0a:96:7f:a5:58:
9d:3a:1b:3c:13:83:0e:2d:48:af:bb:6c:ac:47:44:54:5f:15:
0f:77:57:9d:ac:31:06:a9:c5:6f:ae:d5:99:d8:81:5f:9e:c8:
a6:c6:92:e1:fe:48:53:e9:6e:8b:9d:b5:e8:2e:12:d6:87:db:
8d:a9:62:cc:c7:a0:29:04:e6:50:de:50:67:de:fd:55:a8:e8:
41:6a:d7:a4:38:b7:84:03:44:cc:84:01:08:80:85:5b:9d:8a:
84:03:30:a4:4d:13:95:a5:7f:bd:b9:d8:bb:e3:f1:83:9a:01:
6c:20:fb:7b:f5:09:f4:4f:02:e9:96:86:9f:93:7f:18:ca:d2:
36:f0:de:ba:80:d0:68:9a:c8:08:32:8f:02:06:40:10:ee:8a:
8b:d8:26:71:a5:47:d7:b3:2d:ba:63:3c:82:e3:0b:61:ae:a0:
62:4e:b7:c0:1d:53:b0:7c:c9:dc:9e:2d:bc:24:ff:2c:ba:17:
ab:87:10:3d:21:cc:b9:6f:e3:87:74:6f:b2:ed:df:c4:d1:9c:
24:48:9c:93:b0:28:4e:ca:5d:d1:d1:10:3b:5a:3c:3f:98:12:
7e:af:51:6b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUYxN0ExMTAvBgNVBAUTKEVDMDlFQTVDNjNDQ0Y2NDREMkIyNkZCQUNENUYyRDVD
QTU1RjE1QTQwHhcNMjUxMTAzMDUxMTI5WhcNMjUxMTEwMDUxMTI5WjAYMRYwFAYD
VQQDEw02OTA4Mzk4MS1iNTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6wpu9C+hDTyJy0wpYkD82+nAhU7JP6HWvm+W4unRciKWNZfSPrclm6WIiu3C
SoXlXtoSuundrpRLWc5monthj12m4Lw8GSdMctiLLyQUzBxdn+B+lrFB/HpnHZ7H
gi1NBdkrGEoIUWxArek4ec8MY/KZR3vypNFU7aA+o4HuU+MvxlnDrkLnk2/40jMB
G2IJfTanFQUu7F2IKxOZGqaqk7J2pT2DWZXMxdd2Sqw9UNNnmLK3pfOZzumq8+W0
vxpwCuwOwVPLjLm3Zd92kJSwDHYnZg1+T/o6KoDMPcr7kedaDjEPtt+IVy7rpB3K
jji6T09X8JYFWboHFdstzn03FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDlrU29
B8+IYC5jaGhHcNsxyLcKMB8GA1UdIwQYMBaAFOwJ6lxjzPZE0rJvus1fLVylXxWk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3QS83Q0MyRUZDMDNG
NUQxMUVGOEJGNzg2MEVDNEY5QUUwMi83QW5xWEdQTTlrVFNzbS02elY4dFhLVmZG
YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdBbnFYR1BNOWtUU3NtLTZ6Vjh0WEtWZkZhUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjE3QS83Q0MyRUZDMDNGNUQxMUVGOEJGNzg2MEVDNEY5QUUwMi83QW5xWEdQTTlr
VFNzbS02elY4dFhLVmZGYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA4hmueagOuPxr2ZTyfKvgaj/ZwMnhFJ/p8OG48h3N+CpZ/pVidOhs8
E4MOLUivu2ysR0RUXxUPd1edrDEGqcVvrtWZ2IFfnsimxpLh/khT6W6LnbXoLhLW
h9uNqWLMx6ApBOZQ3lBn3v1VqOhBatekOLeEA0TMhAEIgIVbnYqEAzCkTROVpX+9
udi74/GDmgFsIPt79Qn0TwLploafk38YytI28N66gNBomsgIMo8CBkAQ7oqL2CZx
pUfXsy26YzyC4wthrqBiTrfAHVOwfMncni28JP8suherhxA9Icy5b+OHdG+y7d/E
0ZwkSJyTsChOyl3R0RA7Wjw/mBJ+r1Fr
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:03 2025 by rpki-client