
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
File: S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft (raw, json)
Hash identifier: R9nfrvd2LFv3aZC8qWU0S+aEZfys9vCQPLgCIVzXeWs=
Subject key identifier: F9:5A:32:FF:65:28:29:D4:31:66:48:14:E8:F9:CB:51:F0:C7:28:BD
Authority key identifier: 4B:97:84:15:E1:67:DB:26:3E:F2:64:9A:1C:3B:8B:B2:D4:3F:61:B7
Certificate issuer: /CN=A91EF8D6/serialNumber=4B978415E167DB263EF2649A1C3B8BB2D43F61B7
Certificate serial: 082B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
Manifest number: 0824
Signing time: Sun 02 Nov 2025 20:48:27 +0000
Manifest this update: Sun 02 Nov 2025 20:48:27 +0000
Manifest next update: Sun 09 Nov 2025 20:48:27 +0000
Files and hashes: 1: S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl (hash: OYN7d0IYm/w0IJ5fRtA93CxISFemtomowlE3k+PHfZU=)
2: 6E603522F1AB11EA9F82A23DC4F9AE02.roa (hash: T4mDZ210SpDVRfUxvUs173RpQ0D7OXBy/5JPPZDEJ78=)
3: 3DA25C7A036811F0A14CC938C4F9AE02.roa (hash: 6wXXxuIxd9enMsyVcB9pxqsVVca0vy4SEk/LuQef8jA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl
rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 20:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2091 (0x82b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF8D6, serialNumber=4B978415E167DB263EF2649A1C3B8BB2D43F61B7
Validity
Not Before: Nov 2 20:48:27 2025 GMT
Not After : Nov 9 20:48:27 2025 GMT
Subject: CN=6907c39b-e4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8f:6c:0c:5b:5d:bb:02:50:eb:0c:99:38:df:
4a:69:bd:ba:9f:c6:d1:0d:fb:66:83:12:c1:cd:4c:
63:6d:8c:b5:9c:2b:57:88:94:96:bd:fb:54:37:5f:
e6:c7:77:e7:77:c6:5e:de:d0:21:78:f3:01:ad:76:
03:d0:6b:39:9e:2f:77:17:59:3d:84:c3:79:08:00:
7c:0d:c4:7e:3c:4d:3d:6b:97:85:09:fb:17:c8:2f:
ff:71:41:a1:76:69:a6:3b:b1:cd:86:9a:3c:0f:b3:
4c:47:7a:ae:d7:c0:44:3f:97:1e:74:29:e8:e4:9b:
1d:7a:b1:96:75:c3:e2:3d:33:2d:d4:2d:71:7f:ae:
44:62:ee:2f:3b:4e:6f:81:c3:bb:9d:f2:b0:50:35:
2c:b5:b1:58:67:57:d4:36:e0:39:5c:d7:44:96:72:
97:a2:88:09:3c:39:7d:7f:f3:7b:0d:24:64:94:c5:
e2:a5:8c:9c:3d:ad:45:17:d8:c1:cb:45:29:7a:40:
e2:36:f8:c7:80:b5:52:b9:14:fa:61:79:13:a1:3f:
7b:a7:90:1c:fe:84:9f:21:5f:50:68:05:29:c3:a3:
30:05:ff:b3:52:34:d4:82:42:9c:33:06:be:0a:e4:
ea:57:1d:fb:45:de:52:ed:f6:85:d2:ba:51:55:6d:
38:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5A:32:FF:65:28:29:D4:31:66:48:14:E8:F9:CB:51:F0:C7:28:BD
X509v3 Authority Key Identifier:
keyid:4B:97:84:15:E1:67:DB:26:3E:F2:64:9A:1C:3B:8B:B2:D4:3F:61:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:e7:18:68:d5:82:3b:b9:ab:b4:cd:8c:9c:c0:ed:c6:eb:5f:
c5:d8:71:6a:8d:11:06:69:cc:5c:6f:69:04:46:09:9f:ed:1f:
27:8f:d3:7e:df:c0:a0:42:aa:a2:32:fb:17:f1:3f:49:8a:45:
1b:d7:a0:96:1f:3a:5c:bc:7a:c4:01:ac:f0:78:64:01:72:82:
f1:6c:93:4f:11:d4:5a:8f:91:bd:91:55:bb:9a:5e:fc:d1:ca:
1d:5e:2b:b4:a3:4d:6b:d6:4f:06:aa:c6:f9:8e:69:16:23:d9:
73:6e:c5:8d:b9:25:dc:3b:3f:95:ad:31:61:90:e1:dc:85:21:
e3:23:87:40:96:c1:f8:83:57:65:62:9f:81:d5:b2:f7:7b:9d:
90:5c:71:02:7a:94:91:8e:76:ad:fe:53:23:bc:d8:72:9d:b7:
1a:58:54:40:39:93:1f:f1:c3:d7:09:23:a7:3c:20:ea:a7:22:
a5:60:18:c1:f9:73:1e:3e:6c:7f:9d:15:9f:fd:92:4e:14:5d:
9f:91:2e:f6:0e:5e:fc:0b:5e:53:31:b5:f3:d4:70:0f:da:2f:
3a:53:95:6c:b9:ff:7c:09:54:a6:78:6e:0a:6d:0e:72:ed:11:
2b:4e:23:5a:71:00:1e:74:3d:76:59:84:ad:d1:d0:46:3b:df:
34:11:c0:48
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUY4RDYxMTAvBgNVBAUTKDRCOTc4NDE1RTE2N0RCMjYzRUYyNjQ5QTFDM0I4QkIy
RDQzRjYxQjcwHhcNMjUxMTAyMjA0ODI3WhcNMjUxMTA5MjA0ODI3WjAYMRYwFAYD
VQQDEw02OTA3YzM5Yi1lNGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA149sDFtduwJQ6wyZON9Kab26n8bRDftmgxLBzUxjbYy1nCtXiJSWvftUN1/m
x3fnd8Ze3tAhePMBrXYD0Gs5ni93F1k9hMN5CAB8DcR+PE09a5eFCfsXyC//cUGh
dmmmO7HNhpo8D7NMR3qu18BEP5cedCno5JsderGWdcPiPTMt1C1xf65EYu4vO05v
gcO7nfKwUDUstbFYZ1fUNuA5XNdElnKXoogJPDl9f/N7DSRklMXipYycPa1FF9jB
y0UpekDiNvjHgLVSuRT6YXkToT97p5Ac/oSfIV9QaAUpw6MwBf+zUjTUgkKcMwa+
CuTqVx37Rd5S7faF0rpRVW04awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPlaMv9l
KCnUMWZIFOj5y1Hwxyi9MB8GA1UdIwQYMBaAFEuXhBXhZ9smPvJkmhw7i7LUP2G3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjhENi80RDQyRjU2Q0Yx
QTMxMUVBQjVGRDk4MjRDNEY5QUUwMi9TNWVFRmVGbjJ5WS04bVNhSER1THN0UV9Z
YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1M1ZUVGZUZuMnlZLThtU2FIRHVMc3RRX1liYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjhENi80RDQyRjU2Q0YxQTMxMUVBQjVGRDk4MjRDNEY5QUUwMi9TNWVFRmVGbjJ5
WS04bVNhSER1THN0UV9ZYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAC5xho1YI7uau0zYycwO3G61/F2HFqjREGacxcb2kERgmf7R8nj9N+
38CgQqqiMvsX8T9JikUb16CWHzpcvHrEAazweGQBcoLxbJNPEdRaj5G9kVW7ml78
0codXiu0o01r1k8Gqsb5jmkWI9lzbsWNuSXcOz+VrTFhkOHchSHjI4dAlsH4g1dl
Yp+B1bL3e52QXHECepSRjnat/lMjvNhynbcaWFRAOZMf8cPXCSOnPCDqpyKlYBjB
+XMePmx/nRWf/ZJOFF2fkS72Dl78C15TMbXz1HAP2i86U5Vsuf98CVSmeG4KbQ5y
7RErTiNacQAedD12WYSt0dBGO980EcBI
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:16 2025 by rpki-client