
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
File: TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft (raw, json)
Hash identifier: JMdFYRzT2b6/cAvKcNaPc6TUSsfCelFAaLn9Rq8l3hE=
Subject key identifier: D1:FF:29:97:96:E6:C1:47:3D:D5:BD:C0:0F:B6:EA:EB:7C:7A:35:E1
Authority key identifier: 4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C
Certificate issuer: /CN=A91EF590/serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C
Certificate serial: 0780
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
Manifest number: 0772
Signing time: Tue 04 Nov 2025 21:42:06 +0000
Manifest this update: Tue 04 Nov 2025 21:42:05 +0000
Manifest next update: Tue 11 Nov 2025 21:42:05 +0000
Files and hashes: 1: TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl (hash: iE1B0GA+GElsfUEIxQnCGHoQ+i/koYpJ4iH9EhzGb+U=)
2: 3B85CDCC5AC611F0A650577AC4F9AE02.roa (hash: xmCa0S6gH7UT6IXBmoA13nKDzBCa881kyZEoIomnGCw=)
3: 3C4D39C05AC611F0A650577AC4F9AE02.roa (hash: UDmf7YDCi7nUXuyz+EQ/ianBiDIEB+Xhn6jTOtoUZ/Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl
rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:42:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1920 (0x780)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF590, serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C
Validity
Not Before: Nov 4 21:42:05 2025 GMT
Not After : Nov 11 21:42:05 2025 GMT
Subject: CN=690a732d-cb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:03:72:ca:75:01:dd:bd:98:05:75:60:83:05:
a2:07:ab:4c:63:3b:b7:6d:dd:9e:cc:7d:5d:49:0f:
86:73:5e:42:58:0a:a4:db:af:c9:91:2c:91:1c:ee:
63:1b:d0:6a:02:29:c7:72:69:c5:2d:66:fb:b8:d8:
ea:25:78:8a:a0:b3:43:91:33:47:50:c0:a8:25:8e:
1d:03:6d:3b:2b:8f:d7:93:7d:80:f3:2f:8b:6e:ad:
86:22:96:0b:40:fa:f7:b2:cf:04:35:b8:fd:f4:a3:
d3:10:83:70:a0:f7:f1:46:33:0d:9e:73:bc:34:f8:
87:a3:07:91:c6:ab:31:f1:a9:5d:a4:24:8f:66:2e:
4f:a3:02:f4:c1:57:be:39:25:6d:0e:96:c6:25:c6:
4c:c8:0b:5f:6a:b3:05:27:90:2b:ef:6a:b5:11:4c:
4c:3a:ff:ff:a8:f3:d0:a9:75:25:57:67:9b:49:93:
4b:ff:da:68:f8:45:43:6c:74:ef:7c:6a:a2:d8:9e:
11:43:fc:01:2b:56:ae:f6:72:d1:02:5b:a6:3e:d5:
be:cc:e8:e2:c6:aa:53:17:39:09:24:3d:17:7e:59:
3a:da:6d:8e:79:ad:c0:06:f0:7c:f2:c0:9e:32:e6:
64:54:f7:bf:fd:f8:bc:cf:a0:c5:56:b0:d8:b4:11:
ad:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FF:29:97:96:E6:C1:47:3D:D5:BD:C0:0F:B6:EA:EB:7C:7A:35:E1
X509v3 Authority Key Identifier:
keyid:4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:37:9d:a1:6a:a1:3d:a3:18:aa:48:c1:ad:9f:65:df:ab:61:
c6:5c:f5:e3:7f:6b:67:ff:71:2a:ad:0c:59:cd:ec:d2:99:93:
c0:1a:fe:76:5d:6f:1b:a6:5e:a6:96:e2:a0:ec:43:a0:14:4d:
e0:38:85:36:1a:98:da:69:b3:ad:56:61:fc:82:52:06:d2:a1:
f7:ce:14:4f:ef:be:2a:fc:21:be:3d:c8:59:fd:21:d5:45:8b:
f6:0b:ae:51:5a:59:7c:30:e5:ad:c7:c1:70:72:7c:2d:73:f8:
09:eb:d4:ad:78:1c:1b:5e:f7:af:1f:33:f2:00:aa:71:45:ec:
32:4a:4d:60:cb:c3:9b:85:06:3e:8c:f1:20:66:3c:c9:4b:c4:
63:34:bd:5e:8a:1f:04:43:ec:d7:76:ff:9a:e8:31:36:f4:e7:
39:b9:05:cc:70:6f:a9:1e:23:5a:39:0d:44:b9:3e:6c:c5:ad:
97:03:0b:9d:04:a9:a0:20:d4:c1:b8:7f:6b:94:fd:24:60:76:
76:60:ea:a7:5f:29:95:15:0c:9d:d2:a5:de:b0:3c:e3:f6:71:
aa:42:9e:db:c5:da:6a:d3:fb:a1:0f:e4:fe:7d:f8:61:bb:a5:
81:2f:d1:02:1e:34:9c:87:01:27:9f:22:08:83:17:b5:f9:cc:
ed:1f:c5:e8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUY1OTAxMTAvBgNVBAUTKDRENzFBN0ExOEE4MkFERDA0NEJDMjhFRjVERjIxOTZC
MEZEMjFENUMwHhcNMjUxMTA0MjE0MjA1WhcNMjUxMTExMjE0MjA1WjAYMRYwFAYD
VQQDEw02OTBhNzMyZC1jYjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2wNyynUB3b2YBXVggwWiB6tMYzu3bd2ezH1dSQ+Gc15CWAqk26/JkSyRHO5j
G9BqAinHcmnFLWb7uNjqJXiKoLNDkTNHUMCoJY4dA207K4/Xk32A8y+Lbq2GIpYL
QPr3ss8ENbj99KPTEINwoPfxRjMNnnO8NPiHoweRxqsx8aldpCSPZi5PowL0wVe+
OSVtDpbGJcZMyAtfarMFJ5Ar72q1EUxMOv//qPPQqXUlV2ebSZNL/9po+EVDbHTv
fGqi2J4RQ/wBK1au9nLRAlumPtW+zOjixqpTFzkJJD0Xflk62m2Oea3ABvB88sCe
MuZkVPe//fi8z6DFVrDYtBGtXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNH/KZeW
5sFHPdW9wA+26ut8ejXhMB8GA1UdIwQYMBaAFE1xp6GKgq3QRLwo713yGWsP0h1c
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU5MC8yRjdCMTdDNDM5
MEQxMUVCODhCQzYxNjVDNEY5QUUwMi9UWEdub1lxQ3JkQkV2Q2p2WGZJWmF3X1NI
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RYR25vWXFDcmRCRXZDanZYZklaYXdfU0hWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjU5MC8yRjdCMTdDNDM5MEQxMUVCODhCQzYxNjVDNEY5QUUwMi9UWEdub1lxQ3Jk
QkV2Q2p2WGZJWmF3X1NIVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAtN52haqE9oxiqSMGtn2Xfq2HGXPXjf2tn/3EqrQxZzezSmZPAGv52
XW8bpl6mluKg7EOgFE3gOIU2GpjaabOtVmH8glIG0qH3zhRP774q/CG+PchZ/SHV
RYv2C65RWll8MOWtx8Fwcnwtc/gJ69SteBwbXvevHzPyAKpxRewySk1gy8ObhQY+
jPEgZjzJS8RjNL1eih8EQ+zXdv+a6DE29Oc5uQXMcG+pHiNaOQ1EuT5sxa2XAwud
BKmgINTBuH9rlP0kYHZ2YOqnXymVFQyd0qXesDzj9nGqQp7bxdpq0/uhD+T+ffhh
u6WBL9ECHjSchwEnnyIIgxe1+cztH8Xo
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:25:50 2025 by rpki-client