
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft
File: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft (raw, json)
Hash identifier: Rv9ohWlidlZMfCO+uk8zJDYSjBU7P33nl/RTPXGq2AY=
Subject key identifier: 0F:ED:D4:04:9F:7C:A5:51:E7:28:41:B4:21:F7:D9:1D:84:FA:14:4F
Authority key identifier: 09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC
Certificate issuer: /CN=A91A5098/serialNumber=099714A70E6F401289108209D6A7F4859F9800CC
Certificate serial: 1DD2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft
Manifest number: 1DB9
Signing time: Mon 20 Oct 2025 16:24:29 +0000
Manifest this update: Mon 20 Oct 2025 16:24:28 +0000
Manifest next update: Mon 27 Oct 2025 16:24:28 +0000
Files and hashes: 1: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl (hash: iHWr98E7NNroQ0qZhHwwMbY5FB0L2bgY4RsrKJl0fNA=)
2: 945DB376E34711EE87868164C4F9AE02.roa (hash: jKYWlk4C7kYul3yO/WtiSzFFPrzY/sFxwRTKtBHcm64=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl
rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 16:24:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7634 (0x1dd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5098, serialNumber=099714A70E6F401289108209D6A7F4859F9800CC
Validity
Not Before: Oct 20 16:24:28 2025 GMT
Not After : Oct 27 16:24:28 2025 GMT
Subject: CN=68f6623d-3c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:51:dc:48:a3:1f:7f:b3:1f:fa:0f:b0:83:76:
cd:3a:ea:56:df:96:31:c8:2b:74:43:03:ce:94:5c:
95:a1:a5:84:8c:21:dc:d9:a6:db:a1:bb:0f:5e:1a:
03:12:cd:ff:fd:de:9d:15:43:9b:83:47:8a:d5:28:
78:48:31:a6:a7:8a:ef:e6:a7:08:4f:d0:0f:cf:82:
18:0f:24:f6:3a:4f:a4:fc:8c:df:d5:74:6b:6d:20:
56:83:95:99:7f:65:f2:f2:ac:a9:9d:ed:3b:a2:aa:
c8:ae:c3:39:54:83:ac:6b:57:0f:0e:30:6b:17:94:
17:41:45:1f:7d:ee:49:48:f5:37:92:71:78:ec:2e:
5a:3e:19:cf:90:af:c3:0a:d4:bf:37:4a:cc:68:5a:
ba:62:02:4f:cb:6d:2c:59:b3:ae:bb:03:c8:d1:f2:
d0:4f:45:4f:95:9e:05:37:a7:29:ce:b6:95:a3:ae:
5a:56:3b:42:2f:e4:83:77:c7:62:a2:8c:b2:cc:8c:
a0:f0:f2:54:71:8d:51:57:c1:d9:7a:0e:e5:03:81:
4e:30:12:31:86:68:8f:be:a2:08:21:c8:29:31:ef:
94:01:3a:44:6c:57:b3:03:c2:36:a3:35:01:c7:57:
50:e1:d7:96:b2:ce:4c:55:ab:87:57:2a:ff:84:ef:
06:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:ED:D4:04:9F:7C:A5:51:E7:28:41:B4:21:F7:D9:1D:84:FA:14:4F
X509v3 Authority Key Identifier:
keyid:09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:6c:b7:2c:c0:b8:e3:16:97:9c:58:39:e8:a8:c6:d6:1a:e3:
3c:1b:4c:f7:a2:83:f2:1d:94:21:0e:c4:ff:64:93:2e:19:71:
4a:67:2e:67:be:46:a7:23:9a:12:e2:d9:d6:14:d6:46:15:9b:
bb:d6:81:60:e8:01:f8:49:c7:b0:f0:78:68:e0:23:77:b1:74:
89:3b:20:47:81:3d:00:f9:d6:41:f0:40:3e:9f:da:3f:db:30:
35:53:f2:48:08:1e:b7:cf:9b:20:cc:e4:63:d0:7c:6d:88:0f:
14:78:63:b7:38:94:3e:1e:26:f1:f0:70:5a:77:ec:74:3d:1d:
50:fc:b4:e4:da:82:2d:24:d8:e4:12:e9:3f:42:86:2d:9e:fb:
31:4c:02:72:74:25:b3:7d:5f:2f:2e:48:80:07:43:38:b2:3d:
96:f4:d3:82:39:e6:49:cd:43:e2:af:4d:6c:ee:1c:86:9f:b4:
5a:03:ad:53:77:60:47:30:17:a7:56:87:b0:7f:00:41:d0:3f:
56:3b:1d:c2:2c:dd:16:9f:25:a9:f1:cd:a1:74:67:0f:8f:66:
d2:25:76:03:a5:90:14:02:6d:fe:6f:94:9c:e5:83:33:87:ea:
09:a6:82:b4:e0:32:cc:c3:98:ef:5e:1c:6a:7a:dc:89:e4:d7:
9f:4e:81:39
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTUwOTgxMTAvBgNVBAUTKDA5OTcxNEE3MEU2RjQwMTI4OTEwODIwOUQ2QTdGNDg1
OUY5ODAwQ0MwHhcNMjUxMDIwMTYyNDI4WhcNMjUxMDI3MTYyNDI4WjAYMRYwFAYD
VQQDEw02OGY2NjIzZC0zYzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp1HcSKMff7Mf+g+wg3bNOupW35YxyCt0QwPOlFyVoaWEjCHc2abbobsPXhoD
Es3//d6dFUObg0eK1Sh4SDGmp4rv5qcIT9APz4IYDyT2Ok+k/Izf1XRrbSBWg5WZ
f2Xy8qypne07oqrIrsM5VIOsa1cPDjBrF5QXQUUffe5JSPU3knF47C5aPhnPkK/D
CtS/N0rMaFq6YgJPy20sWbOuuwPI0fLQT0VPlZ4FN6cpzraVo65aVjtCL+SDd8di
ooyyzIyg8PJUcY1RV8HZeg7lA4FOMBIxhmiPvqIIIcgpMe+UATpEbFezA8I2ozUB
x1dQ4deWss5MVauHVyr/hO8G/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/t1ASf
fKVR5yhBtCH32R2E+hRPMB8GA1UdIwQYMBaAFAmXFKcOb0ASiRCCCdan9IWfmADM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTA5OC9DNjgwOTE5NkFD
OTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFCS0pFSUlKMXFmMGhaLVlB
TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NaY1VwdzV2UUJLSkVJSUoxcWYwaFotWUFNdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTA5OC9DNjgwOTE5NkFDOTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFC
S0pFSUlKMXFmMGhaLVlBTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCDbLcswLjjFpecWDnoqMbWGuM8G0z3ooPyHZQhDsT/ZJMuGXFKZy5n
vkanI5oS4tnWFNZGFZu71oFg6AH4Scew8Hho4CN3sXSJOyBHgT0A+dZB8EA+n9o/
2zA1U/JICB63z5sgzORj0HxtiA8UeGO3OJQ+Hibx8HBad+x0PR1Q/LTk2oItJNjk
Euk/QoYtnvsxTAJydCWzfV8vLkiAB0M4sj2W9NOCOeZJzUPir01s7hyGn7RaA61T
d2BHMBenVoewfwBB0D9WOx3CLN0WnyWp8c2hdGcPj2bSJXYDpZAUAm3+b5Sc5YMz
h+oJpoK04DLMw5jvXhxqetyJ5NefToE5
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:11:15 2025 by rpki-client