
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft
File: 5GuTGFhaweBs84Ti7swh9HQzibs.mft (raw, json)
Hash identifier: pbOmhiurylN/sdtqmwRN8dJ6n5Z7X/tn2IrbxaTPzw8=
Subject key identifier: A2:FB:22:84:2F:38:8A:8A:D9:B0:A9:3F:04:A6:40:4B:35:FF:28:EF
Authority key identifier: E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB
Certificate issuer: /CN=A91F83B6/serialNumber=E46B9318585AC1E06CF384E2EECC21F4743389BB
Certificate serial: 87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft
Manifest number: 83
Signing time: Mon 03 Nov 2025 06:42:38 +0000
Manifest this update: Mon 03 Nov 2025 06:42:38 +0000
Manifest next update: Mon 10 Nov 2025 06:42:38 +0000
Files and hashes: 1: 5GuTGFhaweBs84Ti7swh9HQzibs.crl (hash: gi8XUHI7KbaKVo9zCL4qzDKUhg+eFx83k5b9DOXQm3k=)
2: 3CA27876F73F11EF95C5F011C4F9AE02.roa (hash: N43S8PomeMoOc73XP6mqN9NeUSUDTrEwlo9H3GKtmMY=)
3: E0E5603A371611F0A29AF975C4F9AE02.roa (hash: 7sGkTVjWqxDLmNFPgwzndzV8HDq97b9L4xe31X9V3nA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.crl
rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:42:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F83B6, serialNumber=E46B9318585AC1E06CF384E2EECC21F4743389BB
Validity
Not Before: Nov 3 06:42:38 2025 GMT
Not After : Nov 10 06:42:38 2025 GMT
Subject: CN=69084ede-0363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1b:b9:2e:16:b5:b3:b5:66:93:c5:28:e2:36:
22:55:b5:4f:fd:18:3d:16:04:34:49:11:17:04:08:
84:f5:18:2c:48:1b:48:e7:1c:59:89:78:ed:54:1e:
42:ab:ef:34:8c:b8:75:25:30:e2:98:2d:d3:68:a7:
6b:c7:35:a7:d9:55:18:2e:8a:26:e7:a9:51:b0:78:
52:13:ce:c5:15:66:44:b9:61:90:b9:e7:69:34:8b:
50:a5:a3:b1:4f:c9:28:a9:04:76:44:03:ee:1b:b3:
39:6d:12:dd:ac:92:08:e0:65:32:62:a9:a3:38:90:
e0:9f:5f:23:ec:ab:ae:3a:ad:a1:b6:8b:c4:74:94:
e0:72:0d:fa:8b:89:e1:a0:16:c9:fe:74:73:cb:9e:
c7:a8:be:1a:25:f4:0a:9d:9c:74:94:ac:6e:d8:37:
24:d9:d7:01:c9:a0:7d:04:fe:24:de:26:36:36:93:
25:dc:c5:7c:61:35:2c:ff:6e:bc:09:5d:31:f7:22:
c3:fa:cb:77:66:f2:a4:13:b6:41:4d:ca:bf:28:7b:
2f:e4:b6:c8:d4:e7:ed:5c:d7:52:8d:75:19:9b:cf:
82:2b:e3:e0:7b:91:38:0a:e3:77:ad:b8:3d:80:2d:
7d:b5:1c:16:70:3d:9f:82:3f:ec:0b:9d:4d:f2:7b:
1e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FB:22:84:2F:38:8A:8A:D9:B0:A9:3F:04:A6:40:4B:35:FF:28:EF
X509v3 Authority Key Identifier:
keyid:E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:29:de:60:64:07:27:fe:0c:70:90:29:95:bd:cd:7c:2a:b0:
36:7f:1d:4a:84:ad:6a:1a:11:8a:5d:40:b3:e6:77:78:5f:fd:
ed:f4:54:78:cc:8a:e3:0b:30:50:62:66:93:d3:c2:45:36:86:
57:41:99:e4:13:66:b0:26:a2:fd:5f:24:ca:87:33:1c:41:11:
2d:0d:3c:01:09:8a:95:d4:5a:0d:33:c8:6e:22:ee:a7:9c:7b:
06:cc:62:a7:b6:49:db:20:5e:e4:5b:9e:bf:7d:10:a6:10:02:
33:88:15:c9:48:a3:16:ad:25:e5:d9:c7:df:94:a5:ff:fe:4d:
d1:b5:77:e8:3a:6c:72:a1:3a:3f:64:81:db:cb:53:a9:1d:4f:
e0:4b:5b:34:7e:8a:6c:cf:6e:fd:ec:98:d2:72:73:53:b0:97:
0e:f8:e6:d3:cc:b4:5a:82:5d:48:d7:2f:36:19:c6:e4:16:5b:
53:0c:5f:29:8e:7a:eb:26:14:01:0c:fe:44:a5:5f:f4:3a:3d:
a4:28:d9:12:ed:c8:6f:ca:94:ef:60:db:60:6a:17:ba:40:fd:
50:08:d8:cf:dc:f2:53:4d:c1:21:ae:54:11:e5:d0:fe:87:37:
53:b6:a4:43:7c:aa:51:54:84:88:a4:94:40:0f:23:fc:bb:fe:
40:4c:85:40
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjgzQjYxMTAvBgNVBAUTKEU0NkI5MzE4NTg1QUMxRTA2Q0YzODRFMkVFQ0MyMUY0
NzQzMzg5QkIwHhcNMjUxMTAzMDY0MjM4WhcNMjUxMTEwMDY0MjM4WjAYMRYwFAYD
VQQDEw02OTA4NGVkZS0wMzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwBu5Lha1s7Vmk8Uo4jYiVbVP/Rg9FgQ0SREXBAiE9RgsSBtI5xxZiXjtVB5C
q+80jLh1JTDimC3TaKdrxzWn2VUYLoom56lRsHhSE87FFWZEuWGQuedpNItQpaOx
T8koqQR2RAPuG7M5bRLdrJII4GUyYqmjOJDgn18j7KuuOq2htovEdJTgcg36i4nh
oBbJ/nRzy57HqL4aJfQKnZx0lKxu2Dck2dcByaB9BP4k3iY2NpMl3MV8YTUs/268
CV0x9yLD+st3ZvKkE7ZBTcq/KHsv5LbI1OftXNdSjXUZm8+CK+Pge5E4CuN3rbg9
gC19tRwWcD2fgj/sC51N8nseXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKL7IoQv
OIqK2bCpPwSmQEs1/yjvMB8GA1UdIwQYMBaAFORrkxhYWsHgbPOE4u7MIfR0M4m7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODNCNi9FOEYxOEIyMkY3
M0UxMUVGOTY4NzM3MERDNEY5QUUwMi81R3VUR0ZoYXdlQnM4NFRpN3N3aDlIUXpp
YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVHdVRHRmhhd2VCczg0VGk3c3doOUhRemlicy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODNCNi9FOEYxOEIyMkY3M0UxMUVGOTY4NzM3MERDNEY5QUUwMi81R3VUR0ZoYXdl
QnM4NFRpN3N3aDlIUXppYnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCaKd5gZAcn/gxwkCmVvc18KrA2fx1KhK1qGhGKXUCz5nd4X/3t9FR4
zIrjCzBQYmaT08JFNoZXQZnkE2awJqL9XyTKhzMcQREtDTwBCYqV1FoNM8huIu6n
nHsGzGKntknbIF7kW56/fRCmEAIziBXJSKMWrSXl2cfflKX//k3RtXfoOmxyoTo/
ZIHby1OpHU/gS1s0fopsz2797JjScnNTsJcO+ObTzLRagl1I1y82GcbkFltTDF8p
jnrrJhQBDP5EpV/0Oj2kKNkS7chvypTvYNtgahe6QP1QCNjP3PJTTcEhrlQR5dD+
hzdTtqRDfKpRVISIpJRADyP8u/5ATIVA
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:14 2025 by rpki-client