
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
File: poNjJUbxoQeEvBpP9voLvmzsLU4.mft (raw, json)
Hash identifier: Mc88RMBfYBGM8Bu8Mhoz9KMdPx+YKONnqFQtMm4G8D4=
Subject key identifier: ED:86:49:0D:D2:54:AA:90:19:EE:8B:EF:92:E5:19:B0:F2:B7:CF:0B
Authority key identifier: A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E
Certificate issuer: /CN=A91EF547/serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E
Certificate serial: 03F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
Manifest number: 03EB
Signing time: Sun 19 Oct 2025 02:27:50 +0000
Manifest this update: Sun 19 Oct 2025 02:27:50 +0000
Manifest next update: Sun 26 Oct 2025 02:27:50 +0000
Files and hashes: 1: poNjJUbxoQeEvBpP9voLvmzsLU4.crl (hash: mTDi8RFHvix00kT6YBi3wuHrIeZOZRSXRRfVN9AstbI=)
2: 6246B1F2609A11EDAAF70C26C4F9AE02.roa (hash: CW3j/kB0iIlMJ+3lrD5HV2LAKz9hUDzTZRZrWdpxIYA=)
3: 636B090C609A11EDAAF70C26C4F9AE02.roa (hash: KwB5Za6c44Sp6WKsELOvklwRL+/LDv/rBqGOUWdpNrM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl
rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 02:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1011 (0x3f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF547, serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E
Validity
Not Before: Oct 19 02:27:50 2025 GMT
Not After : Oct 26 02:27:50 2025 GMT
Subject: CN=68f44ca6-6593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:41:6f:22:dc:52:fa:0c:44:3f:6f:4f:a3:73:
d0:f5:7e:c0:ad:28:0a:2b:78:63:4f:f8:ac:31:b7:
00:6f:e9:26:64:3f:65:80:3c:d4:b6:79:b2:57:fc:
0e:6c:82:98:c8:10:c8:24:17:7c:b4:69:f6:65:07:
9b:ed:97:4b:f7:a4:35:41:34:bf:3e:d9:dd:94:33:
22:c0:97:a2:5f:5c:a6:7e:a9:90:b1:67:e8:9a:73:
5e:f0:ff:4c:1e:01:26:b8:c6:8c:6d:3b:ad:39:12:
1c:ee:20:b8:b6:e0:e4:6a:12:87:48:24:2d:cb:b1:
c7:d1:a6:ce:70:3c:8c:f5:c1:d1:5a:96:7c:87:e6:
63:62:f4:cb:45:b2:cc:29:0e:93:93:27:9b:f1:f1:
70:b2:bc:90:f8:37:f2:23:8d:32:ce:a7:91:fd:3d:
34:b3:18:c0:2a:21:fd:bf:c9:3b:80:d3:e4:66:48:
52:d1:83:ee:bf:5b:eb:26:96:82:7a:d4:ce:fe:c3:
a7:9a:bc:e9:ba:8d:19:3c:c7:2e:5e:fd:28:7d:de:
ad:29:d2:1c:d9:1e:e9:68:ad:a4:10:82:e4:23:57:
af:ec:46:2c:cc:03:29:7c:6a:6f:30:1f:54:74:d2:
de:0f:79:f3:6c:9e:f9:64:8e:9b:28:7a:86:06:c2:
61:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:86:49:0D:D2:54:AA:90:19:EE:8B:EF:92:E5:19:B0:F2:B7:CF:0B
X509v3 Authority Key Identifier:
keyid:A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:6b:c2:53:b9:91:12:6b:30:93:8b:2b:3e:59:e0:9a:9c:70:
fa:ed:12:56:da:41:12:8d:cb:ab:6e:ae:2c:84:1b:e6:5c:54:
28:9e:87:7c:9e:8c:9e:1b:b0:d7:98:f2:14:a9:44:b5:c2:3c:
5e:0b:96:7a:14:62:28:eb:4d:5d:d7:e7:d1:c4:0d:06:0b:de:
17:64:12:bb:90:d2:f0:f8:f6:17:6c:e6:9d:d6:8b:0a:52:33:
e2:0e:f7:76:87:bb:7a:e8:78:ba:7d:03:b2:de:2a:53:8f:4b:
f9:84:8a:5f:32:df:89:35:70:27:a8:56:e5:db:00:7b:a9:03:
21:fe:8b:69:a8:0a:83:86:0a:3f:83:f0:1a:3f:a4:d5:b4:1d:
1b:3c:d8:d1:3b:07:8d:48:79:a8:3c:f4:fc:01:98:81:89:77:
82:1c:a8:bd:6f:42:59:01:b1:d2:39:30:70:a0:50:00:f1:36:
14:75:69:c2:77:e1:ae:9d:8c:df:f9:7a:29:8a:eb:f0:cc:e6:
4c:bf:dc:1d:4c:4d:ef:ba:ac:a3:65:26:08:aa:5e:1d:ea:7f:
82:83:88:85:aa:5b:28:4e:3f:27:21:9a:17:d2:29:f3:87:f7:
69:32:63:f5:24:ca:87:7f:6f:88:c6:bc:60:65:92:db:ef:3c:
c6:eb:11:0b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUY1NDcxMTAvBgNVBAUTKEE2ODM2MzI1NDZGMUExMDc4NEJDMUE0RkY2RkEwQkJF
NkNFQzJENEUwHhcNMjUxMDE5MDIyNzUwWhcNMjUxMDI2MDIyNzUwWjAYMRYwFAYD
VQQDEw02OGY0NGNhNi02NTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4UFvItxS+gxEP29Po3PQ9X7ArSgKK3hjT/isMbcAb+kmZD9lgDzUtnmyV/wO
bIKYyBDIJBd8tGn2ZQeb7ZdL96Q1QTS/PtndlDMiwJeiX1ymfqmQsWfomnNe8P9M
HgEmuMaMbTutORIc7iC4tuDkahKHSCQty7HH0abOcDyM9cHRWpZ8h+ZjYvTLRbLM
KQ6Tkyeb8fFwsryQ+DfyI40yzqeR/T00sxjAKiH9v8k7gNPkZkhS0YPuv1vrJpaC
etTO/sOnmrzpuo0ZPMcuXv0ofd6tKdIc2R7paK2kEILkI1ev7EYszAMpfGpvMB9U
dNLeD3nzbJ75ZI6bKHqGBsJhDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2GSQ3S
VKqQGe6L75LlGbDyt88LMB8GA1UdIwQYMBaAFKaDYyVG8aEHhLwaT/b6C75s7C1O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU0Ny82MjZFMTA5NDk4
QzcxMUVDODZBMDA5NDlDNEY5QUUwMi9wb05qSlVieG9RZUV2QnBQOXZvTHZtenNM
VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BvTmpKVWJ4b1FlRXZCcFA5dm9Mdm16c0xVNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjU0Ny82MjZFMTA5NDk4QzcxMUVDODZBMDA5NDlDNEY5QUUwMi9wb05qSlVieG9R
ZUV2QnBQOXZvTHZtenNMVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBea8JTuZESazCTiys+WeCanHD67RJW2kESjcurbq4shBvmXFQonod8
noyeG7DXmPIUqUS1wjxeC5Z6FGIo601d1+fRxA0GC94XZBK7kNLw+PYXbOad1osK
UjPiDvd2h7t66Hi6fQOy3ipTj0v5hIpfMt+JNXAnqFbl2wB7qQMh/otpqAqDhgo/
g/AaP6TVtB0bPNjROweNSHmoPPT8AZiBiXeCHKi9b0JZAbHSOTBwoFAA8TYUdWnC
d+GunYzf+XopiuvwzOZMv9wdTE3vuqyjZSYIql4d6n+Cg4iFqlsoTj8nIZoX0inz
h/dpMmP1JMqHf2+IxrxgZZLb7zzG6xEL
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:47:59 2025 by rpki-client