
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft
File: UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft (raw, json)
Hash identifier: s6cagLQ8VHQ3SC+lpMNfH6/+SiZdWZXzqDkeBwoxSsg=
Subject key identifier: 43:88:12:DF:A1:E8:E0:4F:5D:3E:3D:B4:F5:83:A0:CB:21:66:90:39
Authority key identifier: 52:B3:E8:3B:16:21:AF:B3:DC:CF:0A:CF:67:F2:7E:E0:B1:D6:C8:36
Certificate issuer: /CN=A916B30C/serialNumber=52B3E83B1621AFB3DCCF0ACF67F27EE0B1D6C836
Certificate serial: 014A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft
Manifest number: 014A
Signing time: Sun 19 Oct 2025 06:58:28 +0000
Manifest this update: Sun 19 Oct 2025 06:58:27 +0000
Manifest next update: Sun 26 Oct 2025 06:58:27 +0000
Files and hashes: 1: UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl (hash: uMCAx7aRHXm8+Uto4WoDVtWsH0ii2r6UH8dTDQhftwI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl
rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 06:58:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330 (0x14a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B30C, serialNumber=52B3E83B1621AFB3DCCF0ACF67F27EE0B1D6C836
Validity
Not Before: Oct 19 06:58:27 2025 GMT
Not After : Oct 26 06:58:27 2025 GMT
Subject: CN=68f48c13-d0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f2:13:15:14:70:26:8e:82:59:4b:c3:45:6b:
dd:59:71:8d:95:50:82:00:20:64:35:41:75:5a:d4:
b2:b0:eb:db:4e:9f:40:28:81:c8:55:49:21:2d:c6:
6d:6a:5c:bf:e2:c0:df:45:65:ea:c4:d5:a3:e4:62:
e8:4f:80:88:e5:f7:a4:20:4f:e9:84:c8:61:2b:a7:
87:c1:87:9f:89:1a:c2:44:7c:31:76:14:81:2e:6f:
72:48:ae:24:d5:42:66:d8:c2:a5:9b:2b:50:91:bf:
ed:29:c6:13:53:fe:38:37:a8:a6:90:ad:68:fd:86:
49:55:99:8b:1c:81:41:88:7c:02:06:b3:35:17:29:
dd:80:90:e2:2f:16:9e:ad:23:e6:89:4d:91:ec:aa:
ef:86:cd:3b:88:3b:61:86:36:cc:3a:59:63:1e:81:
2f:b4:ae:26:93:c8:43:62:f9:a8:a1:e5:29:bf:e2:
93:ca:41:52:fe:18:0e:11:4f:fc:32:0d:2f:46:4a:
60:00:0d:48:df:19:72:51:71:10:83:9b:d4:26:d4:
a1:0d:bb:c3:07:e2:e6:fb:73:96:32:91:00:06:e6:
e5:f1:23:16:26:50:6f:16:8a:b8:d8:e2:0f:43:dd:
a2:06:93:33:28:d2:24:3d:4f:d2:41:38:d2:a1:59:
31:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:88:12:DF:A1:E8:E0:4F:5D:3E:3D:B4:F5:83:A0:CB:21:66:90:39
X509v3 Authority Key Identifier:
keyid:52:B3:E8:3B:16:21:AF:B3:DC:CF:0A:CF:67:F2:7E:E0:B1:D6:C8:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2c:d5:8c:df:25:f4:e5:73:8c:72:9a:1d:e7:86:7c:97:0d:
14:6a:b4:12:c9:5b:0e:95:1b:11:5e:6a:c4:37:18:3b:8a:e0:
92:9f:3e:06:aa:3c:a6:03:55:01:47:de:7d:17:16:67:0b:13:
86:1e:f6:b7:6f:a8:0b:06:21:ed:d3:be:54:31:28:4c:5c:28:
65:98:8c:5f:78:f9:b0:a2:af:57:f6:d3:f5:9e:f4:a2:32:6e:
4c:df:14:3a:eb:40:8a:05:bb:ed:09:f3:5d:e2:6e:a3:3b:91:
07:29:ed:ab:43:da:14:70:20:b9:03:f1:d5:db:87:64:43:79:
cf:fc:b7:5f:1e:fc:46:81:e7:d2:03:dd:be:06:22:6c:72:c3:
c4:8d:1a:29:20:61:8e:3e:f4:d2:37:c5:66:bf:4b:a9:11:5f:
39:ad:75:42:f5:d8:e3:cd:72:71:fa:d3:83:13:b5:ea:09:93:
b6:dd:8b:3c:11:17:08:fd:49:88:81:a5:82:c3:15:0b:66:d7:
a6:8e:1e:e0:e0:fc:ac:94:9e:c2:3a:91:5e:ad:f8:92:b9:1a:
f7:4b:6c:91:20:be:48:56:05:20:7c:93:89:c6:79:c3:59:5d:
cb:45:cf:bd:d3:a1:4c:94:8b:3d:39:05:9f:d7:56:35:b9:a7:
36:47:fc:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIzMEMxMTAvBgNVBAUTKDUyQjNFODNCMTYyMUFGQjNEQ0NGMEFDRjY3RjI3RUUw
QjFENkM4MzYwHhcNMjUxMDE5MDY1ODI3WhcNMjUxMDI2MDY1ODI3WjAYMRYwFAYD
VQQDEw02OGY0OGMxMy1kMGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxPITFRRwJo6CWUvDRWvdWXGNlVCCACBkNUF1WtSysOvbTp9AKIHIVUkhLcZt
aly/4sDfRWXqxNWj5GLoT4CI5fekIE/phMhhK6eHwYefiRrCRHwxdhSBLm9ySK4k
1UJm2MKlmytQkb/tKcYTU/44N6imkK1o/YZJVZmLHIFBiHwCBrM1FyndgJDiLxae
rSPmiU2R7Krvhs07iDthhjbMOlljHoEvtK4mk8hDYvmooeUpv+KTykFS/hgOEU/8
Mg0vRkpgAA1I3xlyUXEQg5vUJtShDbvDB+Lm+3OWMpEABubl8SMWJlBvFoq42OIP
Q92iBpMzKNIkPU/SQTjSoVkxKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOIEt+h
6OBPXT49tPWDoMshZpA5MB8GA1UdIwQYMBaAFFKz6DsWIa+z3M8Kz2fyfuCx1sg2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjMwQy85QTg3NTQzQUIw
NUUxMUVFOTdDNzhCNzVDNEY5QUUwMi9VclBvT3hZaHI3UGN6d3JQWl9KLTRMSFd5
RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VyUG9PeFlocjdQY3p3clBaX0otNExIV3lEWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjMwQy85QTg3NTQzQUIwNUUxMUVFOTdDNzhCNzVDNEY5QUUwMi9VclBvT3hZaHI3
UGN6d3JQWl9KLTRMSFd5RFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAqLNWM3yX05XOMcpod54Z8lw0UarQSyVsOlRsRXmrENxg7iuCSnz4G
qjymA1UBR959FxZnCxOGHva3b6gLBiHt075UMShMXChlmIxfePmwoq9X9tP1nvSi
Mm5M3xQ660CKBbvtCfNd4m6jO5EHKe2rQ9oUcCC5A/HV24dkQ3nP/LdfHvxGgefS
A92+BiJscsPEjRopIGGOPvTSN8Vmv0upEV85rXVC9djjzXJx+tODE7XqCZO23Ys8
ERcI/UmIgaWCwxULZtemjh7g4PyslJ7COpFerfiSuRr3S2yRIL5IVgUgfJOJxnnD
WV3LRc+906FMlIs9OQWf11Y1uac2R/wx
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:14:20 2025 by rpki-client