
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
File: a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft (raw, json)
Hash identifier: Qmg1FhFgKoQ2JbOAAWik+yktBEu1Jz3uGe3TWdAz8EY=
Subject key identifier: F1:F0:A8:1A:C5:C6:21:6A:B9:58:C0:ED:3C:52:78:EB:DF:E4:85:FE
Authority key identifier: 6B:A7:9A:D5:4A:93:83:CB:52:67:33:99:6B:E6:6E:92:BF:8D:38:4D
Certificate issuer: /CN=A9112804/serialNumber=6BA79AD54A9383CB526733996BE66E92BF8D384D
Certificate serial: 0CD9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
Manifest number: 14A4
Signing time: Sat 18 Oct 2025 18:49:55 +0000
Manifest this update: Sat 18 Oct 2025 18:49:55 +0000
Manifest next update: Sat 25 Oct 2025 18:49:55 +0000
Files and hashes: 1: a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl (hash: FU+OZppLSO5ZU4rOL4vXrO3xVQ8t+c6eneVvjhJATdU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl
rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 18:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3289 (0xcd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112804, serialNumber=6BA79AD54A9383CB526733996BE66E92BF8D384D
Validity
Not Before: Oct 18 18:49:55 2025 GMT
Not After : Oct 25 18:49:55 2025 GMT
Subject: CN=68f3e153-597b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:69:1a:27:09:bf:e8:4f:5e:1a:15:21:65:
3b:42:fb:13:48:d7:50:1b:b4:42:39:12:70:6e:79:
84:98:8b:36:fd:12:2f:70:f5:a3:53:7b:a3:62:5d:
92:d3:8f:39:71:d2:31:9e:62:86:34:56:b3:13:76:
ea:23:18:b6:48:56:d5:bc:82:e3:a0:a0:61:68:93:
b6:7f:3b:34:e6:ba:2e:f8:f3:b5:b0:53:7a:2f:d5:
3c:b8:16:51:37:88:53:b6:da:b1:79:05:28:fc:be:
18:6d:3b:f8:79:3d:41:b7:37:41:ca:d5:4a:e8:22:
da:4d:26:4c:f8:61:d7:e8:fd:9b:25:07:c0:3a:e4:
54:d7:c4:f6:57:c1:9a:eb:93:8d:eb:e0:cc:af:55:
44:a3:4f:aa:47:23:f4:3d:5a:7d:74:8c:65:69:f6:
37:21:de:35:91:44:b6:6b:bf:49:4c:46:23:fe:3a:
07:2f:47:39:2d:37:0b:31:31:4d:d3:bc:02:51:3d:
0b:cd:38:38:0e:2f:c8:2e:70:b7:45:57:6b:29:4f:
4e:f3:32:44:ac:2a:77:f1:80:c2:e0:58:d4:7c:ab:
97:bc:6d:73:72:be:c8:0a:07:b2:56:60:76:44:a2:
2c:41:9b:75:1e:8d:f4:1b:3c:9c:5e:f8:a6:eb:2c:
2c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F0:A8:1A:C5:C6:21:6A:B9:58:C0:ED:3C:52:78:EB:DF:E4:85:FE
X509v3 Authority Key Identifier:
keyid:6B:A7:9A:D5:4A:93:83:CB:52:67:33:99:6B:E6:6E:92:BF:8D:38:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:b9:5f:36:c9:10:bc:8b:45:d9:9a:71:09:91:9b:a1:4e:df:
46:fb:58:f4:0a:18:19:7b:03:f5:5b:8e:23:2e:f5:47:2c:10:
4d:43:df:a0:d3:44:ea:b6:99:b0:6e:3c:ce:33:c4:41:e2:1e:
87:f4:1e:69:30:f3:35:7f:42:9f:33:2c:da:e6:36:63:e3:49:
f6:33:ae:0b:87:e7:47:29:dd:ca:15:c4:4b:d5:a7:2e:69:24:
e8:50:bc:55:06:22:3c:ff:13:82:aa:d5:e0:04:73:22:4b:e5:
e9:e0:96:42:f4:54:36:76:e3:12:7f:8a:4f:da:e9:56:e7:53:
e7:74:77:61:da:d9:cc:72:c3:5f:06:fe:03:b4:6f:b6:fe:4c:
eb:cd:51:ca:15:e4:3b:6a:40:94:47:c9:7a:a0:7c:ed:3f:a4:
bd:6c:39:34:0a:67:89:e4:01:db:e9:9b:1a:30:8a:d5:38:41:
1b:51:5e:ce:d8:aa:8d:b9:ec:d9:cc:c0:99:5b:6c:de:5c:18:
e8:e0:8b:7a:7e:1d:7f:a3:96:4d:5e:bd:ff:c6:85:b0:45:ae:
27:3d:9e:0e:b0:6d:57:95:b2:24:82:09:d8:9b:d2:c1:41:ad:
88:93:84:6c:98:bb:80:a5:3e:b8:00:da:71:dd:2b:98:61:d4:
7f:94:1b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:26:36 2025 by rpki-client