
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft
File: P80_M6jgglw55KhM1pOVpvKwYUg.mft (raw, json)
Hash identifier: iHv5L/9EkXQcnbO1ELdli6mYYDQy704OR7kPeVMTjnA=
Subject key identifier: B6:E3:7A:E5:25:27:C4:3B:DB:D9:15:03:7B:CD:29:B8:39:F8:AF:E9
Authority key identifier: 3F:CD:3F:33:A8:E0:82:5C:39:E4:A8:4C:D6:93:95:A6:F2:B0:61:48
Certificate issuer: /CN=A91D4120/serialNumber=3FCD3F33A8E0825C39E4A84CD69395A6F2B06148
Certificate serial: 0209
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft
Manifest number: 0206
Signing time: Sun 19 Oct 2025 04:39:44 +0000
Manifest this update: Sun 19 Oct 2025 04:39:44 +0000
Manifest next update: Sun 26 Oct 2025 04:39:44 +0000
Files and hashes: 1: P80_M6jgglw55KhM1pOVpvKwYUg.crl (hash: 3epjY+/vuLxjZ5dR6/vRt84keKVTqIpgpCRdWlePH8M=)
2: F67C04568FE011EDA9919C57C4F9AE02.roa (hash: LmlR9YlBwg7cT9J6J0IKLnKoAUaVj8qqBXEJpjhDI58=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.crl
rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 04:39:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 521 (0x209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4120, serialNumber=3FCD3F33A8E0825C39E4A84CD69395A6F2B06148
Validity
Not Before: Oct 19 04:39:44 2025 GMT
Not After : Oct 26 04:39:44 2025 GMT
Subject: CN=68f46b90-30c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7f:9f:f3:47:28:8a:4a:50:f3:d7:75:38:7c:
57:ab:7f:63:6e:09:c4:3e:b7:d0:ea:9d:f4:d4:52:
fb:17:89:54:53:eb:c6:e3:c1:d1:82:5d:93:a1:58:
93:7f:eb:bb:f5:95:cb:66:47:03:bb:2d:27:9c:c3:
76:ee:79:76:03:cb:91:5b:d2:fb:7a:d0:7b:55:07:
c9:2d:6b:ec:ad:ec:cc:64:35:30:68:25:83:46:6c:
88:43:09:ac:13:a0:ad:61:2f:58:8b:cf:fb:a0:a0:
08:d0:d9:75:0d:dc:65:08:7d:53:0e:50:27:d2:af:
c5:b7:9f:ae:07:7e:9c:9b:dd:71:1d:a1:93:bf:cd:
07:97:34:b2:78:b0:12:72:e6:ce:5c:60:29:82:18:
40:57:4a:a3:a2:ae:5e:f9:56:ff:52:07:00:f6:f1:
38:95:a4:b1:ec:76:68:3c:1e:42:6c:72:fb:91:5f:
5a:01:6a:55:b7:f4:37:d1:c8:28:8e:14:cf:a1:44:
18:6a:9f:6a:38:1a:62:ec:82:ce:b1:58:ce:0f:9c:
b7:e1:39:07:f9:24:34:91:da:3a:1f:3f:40:9c:a7:
2f:5a:9c:39:e0:29:7d:25:09:5a:eb:de:e6:0f:4d:
cd:19:0c:1e:9e:94:e2:d9:1d:ce:80:b3:ed:18:8d:
9b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E3:7A:E5:25:27:C4:3B:DB:D9:15:03:7B:CD:29:B8:39:F8:AF:E9
X509v3 Authority Key Identifier:
keyid:3F:CD:3F:33:A8:E0:82:5C:39:E4:A8:4C:D6:93:95:A6:F2:B0:61:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:35:ba:29:5d:45:7e:e1:fc:4a:e2:4f:3f:d1:fb:08:2f:fe:
b1:7f:d5:bc:21:e4:1e:0a:2a:22:97:20:eb:96:3c:51:94:06:
5d:65:8d:28:9e:b4:be:37:c2:aa:b2:9d:bd:ae:7e:43:bc:62:
54:b4:43:8d:1d:2e:21:06:1d:7e:bc:26:48:19:9d:a6:80:72:
3d:2f:d2:bb:cc:5b:87:34:1b:6f:c2:ba:fb:0e:93:2c:6f:03:
39:3a:6f:39:40:5b:ea:b5:63:43:49:c5:3f:57:f9:a7:af:53:
41:8c:1a:66:6a:da:72:16:b6:58:0d:60:1f:1c:77:14:bc:c9:
49:4d:63:0b:2c:3c:8c:92:a9:2e:1b:ec:7f:c8:65:6c:ca:00:
58:e9:5c:67:62:73:51:1a:94:7c:b9:df:ca:9e:a2:9b:b9:5b:
37:0d:8b:5e:a0:e1:f5:a7:17:6a:1a:88:1b:f1:dc:93:4c:d5:
cc:ea:9b:de:74:b5:e9:fd:33:6d:40:9a:25:ee:7e:53:6b:c1:
17:28:8c:93:ad:29:dc:43:d4:4c:b4:b8:17:be:e1:8f:a7:02:
b6:45:2d:aa:81:8d:a9:33:36:72:d0:2f:9b:d1:bd:04:11:a3:
37:43:53:2b:4e:75:30:35:25:0b:bb:18:d0:11:71:8a:f8:68:
69:c3:06:24
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQxMjAxMTAvBgNVBAUTKDNGQ0QzRjMzQThFMDgyNUMzOUU0QTg0Q0Q2OTM5NUE2
RjJCMDYxNDgwHhcNMjUxMDE5MDQzOTQ0WhcNMjUxMDI2MDQzOTQ0WjAYMRYwFAYD
VQQDEw02OGY0NmI5MC0zMGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqn+f80coikpQ89d1OHxXq39jbgnEPrfQ6p301FL7F4lUU+vG48HRgl2ToViT
f+u79ZXLZkcDuy0nnMN27nl2A8uRW9L7etB7VQfJLWvsrezMZDUwaCWDRmyIQwms
E6CtYS9Yi8/7oKAI0Nl1DdxlCH1TDlAn0q/Ft5+uB36cm91xHaGTv80HlzSyeLAS
cubOXGApghhAV0qjoq5e+Vb/UgcA9vE4laSx7HZoPB5CbHL7kV9aAWpVt/Q30cgo
jhTPoUQYap9qOBpi7ILOsVjOD5y34TkH+SQ0kdo6Hz9AnKcvWpw54Cl9JQla697m
D03NGQwenpTi2R3OgLPtGI2bbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLbjeuUl
J8Q729kVA3vNKbg5+K/pMB8GA1UdIwQYMBaAFD/NPzOo4IJcOeSoTNaTlabysGFI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDEyMC83NkE1ODg0RThG
REUxMUVEQTczNTE5NTdDNEY5QUUwMi9QODBfTTZqZ2dsdzU1S2hNMXBPVnB2S3dZ
VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1A4MF9NNmpnZ2x3NTVLaE0xcE9WcHZLd1lVZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDEyMC83NkE1ODg0RThGREUxMUVEQTczNTE5NTdDNEY5QUUwMi9QODBfTTZqZ2ds
dzU1S2hNMXBPVnB2S3dZVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAbNbopXUV+4fxK4k8/0fsIL/6xf9W8IeQeCioilyDrljxRlAZdZY0o
nrS+N8Kqsp29rn5DvGJUtEONHS4hBh1+vCZIGZ2mgHI9L9K7zFuHNBtvwrr7DpMs
bwM5Om85QFvqtWNDScU/V/mnr1NBjBpmatpyFrZYDWAfHHcUvMlJTWMLLDyMkqku
G+x/yGVsygBY6VxnYnNRGpR8ud/KnqKbuVs3DYteoOH1pxdqGogb8dyTTNXM6pve
dLXp/TNtQJol7n5Ta8EXKIyTrSncQ9RMtLgXvuGPpwK2RS2qgY2pMzZy0C+b0b0E
EaM3Q1MrTnUwNSULuxjQEXGK+GhpwwYk
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:26:46 2025 by rpki-client