
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
File: -pTeOQiOw4pStpInmkLEr_tbc7E.mft (raw, json)
Hash identifier: 1PHJwut6EfAXgW9f4owvA2XDjrJjVmQ47wHKkEId0+A=
Subject key identifier: 27:27:4E:6A:B0:31:0E:23:C2:DA:A8:3A:02:C9:78:00:23:14:73:CF
Authority key identifier: FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1
Certificate issuer: /CN=A91FEE70/serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1
Certificate serial: 0C8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
Manifest number: 0C79
Signing time: Tue 04 Nov 2025 18:33:04 +0000
Manifest this update: Tue 04 Nov 2025 18:33:03 +0000
Manifest next update: Tue 11 Nov 2025 18:33:03 +0000
Files and hashes: 1: -pTeOQiOw4pStpInmkLEr_tbc7E.crl (hash: ihtCjIBOTXsj235M4/S0YJNv91biWmYrkJJKNj4dXKM=)
2: B74426C88AA711EB876EF84BC4F9AE02.roa (hash: I8xUhuaKZwm6lPAAKATroItwpWXb2vxsxqVz/BIgbyE=)
3: B69D3A2A8AA711EB876EF84BC4F9AE02.roa (hash: oiRTxf178GSVajMFJOV88czGN0g9LsEQwe3fVsmhNYs=)
4: 33B6385E09E911EAA0C05451C4F9AE02.roa (hash: MSG4IEJD21Lg46cXlyVsJXQNoEWSJs0ZdoCdo0HPe4k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl
rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 18:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3212 (0xc8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEE70, serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1
Validity
Not Before: Nov 4 18:33:03 2025 GMT
Not After : Nov 11 18:33:03 2025 GMT
Subject: CN=690a46df-ba5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8a:b7:2e:19:77:a8:16:92:1c:9b:6b:7c:55:
3c:28:f9:53:33:f2:32:c7:1b:24:34:49:a8:e3:5d:
cf:be:e1:a7:d6:9f:f0:3a:1e:36:d8:fd:1d:da:af:
20:b6:96:e0:e6:76:ca:17:5b:f8:88:cc:84:bb:b4:
bb:3f:9c:39:d9:9c:02:f6:9d:2a:40:74:e4:08:c3:
fb:7b:d0:d3:58:f1:e7:15:d1:c2:c2:d3:eb:a6:19:
b9:11:77:d3:1e:85:81:e8:3a:ca:20:a5:7f:06:41:
49:13:6a:da:4a:3f:32:ce:79:94:b5:83:40:3a:55:
cd:ab:d6:59:ad:7c:c8:06:ae:c3:54:76:6f:81:9e:
92:9f:6a:89:b2:86:54:17:5c:27:8c:85:52:38:3d:
2d:d6:7e:87:4e:29:63:24:1e:d6:91:f8:74:52:65:
1d:0f:b8:96:93:c7:37:36:fc:66:a9:c2:b1:82:29:
26:ed:e5:b0:a1:37:26:a3:99:99:26:68:ac:b5:fe:
c1:b1:a6:d2:87:2d:c0:cd:3a:dc:03:22:f9:ed:87:
86:c5:ec:c8:78:44:75:ff:c3:eb:9c:0c:2b:15:44:
ab:19:ba:a4:84:a1:5d:0d:f6:c4:0c:19:e2:d1:8d:
4e:8a:c2:3b:95:9a:da:30:46:75:e6:e7:b4:a8:96:
dc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:27:4E:6A:B0:31:0E:23:C2:DA:A8:3A:02:C9:78:00:23:14:73:CF
X509v3 Authority Key Identifier:
keyid:FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:92:d4:88:8d:ba:20:c9:6d:98:b0:da:c8:d1:b5:a8:17:54:
53:df:6e:88:b5:cf:b7:4d:b9:28:80:07:15:01:5b:55:7f:c1:
13:79:a6:67:85:11:72:41:83:d7:9d:9a:92:44:ee:ea:0f:ff:
00:10:07:76:96:d6:b5:bc:e4:91:1a:36:b2:d8:70:01:05:ea:
6f:9e:0c:17:1a:97:6b:87:d9:a7:cd:1e:39:f1:44:46:52:7d:
a8:c3:54:24:d9:db:08:b8:74:f8:9e:24:7b:3a:14:be:18:f4:
6b:46:dd:59:ef:e2:e9:fe:4b:3b:83:52:a5:38:a5:08:30:53:
06:fb:23:ae:6c:bc:83:01:2a:e6:41:c6:d7:81:80:72:86:ea:
51:0b:6e:21:5b:03:6f:b0:00:92:7d:6b:14:b2:d7:90:e4:b7:
b2:53:0c:0d:48:28:8c:9f:52:3e:65:45:53:10:95:f8:91:9a:
f9:86:f2:e0:c6:31:9e:b1:69:04:84:94:91:e2:c9:43:c9:93:
71:86:b6:3a:6f:0c:74:ad:6f:57:02:b9:0e:b3:f9:c8:2b:da:
43:b7:94:b3:98:15:dc:f4:f2:50:ec:16:24:51:b5:e4:ec:4d:
48:4a:28:52:da:a2:29:bd:be:27:44:f4:0e:ae:f6:99:8b:19:
ef:6c:06:ed
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkVFNzAxMTAvBgNVBAUTKEZBOTRERTM5MDg4RUMzOEE1MkI2OTIyNzlBNDJDNEFG
RkI1QjczQjEwHhcNMjUxMTA0MTgzMzAzWhcNMjUxMTExMTgzMzAzWjAYMRYwFAYD
VQQDEw02OTBhNDZkZi1iYTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxIq3Lhl3qBaSHJtrfFU8KPlTM/IyxxskNEmo413PvuGn1p/wOh422P0d2q8g
tpbg5nbKF1v4iMyEu7S7P5w52ZwC9p0qQHTkCMP7e9DTWPHnFdHCwtPrphm5EXfT
HoWB6DrKIKV/BkFJE2raSj8yznmUtYNAOlXNq9ZZrXzIBq7DVHZvgZ6Sn2qJsoZU
F1wnjIVSOD0t1n6HTiljJB7Wkfh0UmUdD7iWk8c3NvxmqcKxgikm7eWwoTcmo5mZ
Jmistf7BsabShy3AzTrcAyL57YeGxezIeER1/8PrnAwrFUSrGbqkhKFdDfbEDBni
0Y1OisI7lZraMEZ15ue0qJbc3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcnTmqw
MQ4jwtqoOgLJeAAjFHPPMB8GA1UdIwQYMBaAFPqU3jkIjsOKUraSJ5pCxK/7W3Ox
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUU3MC8wOTEwRDFBMDA5
RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0cFN0cElubWtMRXJfdGJj
N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1wVGVPUWlPdzRwU3RwSW5ta0xFcl90YmM3RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RUU3MC8wOTEwRDFBMDA5RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0
cFN0cElubWtMRXJfdGJjN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB3ktSIjbogyW2YsNrI0bWoF1RT326Itc+3TbkogAcVAVtVf8ETeaZn
hRFyQYPXnZqSRO7qD/8AEAd2lta1vOSRGjay2HABBepvngwXGpdrh9mnzR458URG
Un2ow1Qk2dsIuHT4niR7OhS+GPRrRt1Z7+Lp/ks7g1KlOKUIMFMG+yOubLyDASrm
QcbXgYByhupRC24hWwNvsACSfWsUsteQ5LeyUwwNSCiMn1I+ZUVTEJX4kZr5hvLg
xjGesWkEhJSR4slDyZNxhrY6bwx0rW9XArkOs/nIK9pDt5SzmBXc9PJQ7BYkUbXk
7E1ISihS2qIpvb4nRPQOrvaZixnvbAbt
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:23:45 2025 by rpki-client