
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.mft
File: C6dUacYtJZIFuou2XbmdAze6130.mft (raw, json)
Hash identifier: G6XeUSl2H0x2ruHYObfWBiBRzS8dfQCMu9xQeztTAek=
Subject key identifier: 8D:68:AE:24:D8:AA:B6:2E:56:B5:BC:98:26:5E:65:F4:F8:F4:E9:04
Authority key identifier: 0B:A7:54:69:C6:2D:25:92:05:BA:8B:B6:5D:B9:9D:03:37:BA:D7:7D
Certificate issuer: /CN=A915C532/serialNumber=0BA75469C62D259205BA8BB65DB99D0337BAD77D
Certificate serial: 0E3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6dUacYtJZIFuou2XbmdAze6130.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.mft
Manifest number: 0E33
Signing time: Sat 18 Oct 2025 18:27:46 +0000
Manifest this update: Sat 18 Oct 2025 18:27:45 +0000
Manifest next update: Sat 25 Oct 2025 18:27:45 +0000
Files and hashes: 1: C6dUacYtJZIFuou2XbmdAze6130.crl (hash: cTXrbyGg3k7SOcniXmWR4/5Zn1dHGQba7seOyqd5QOg=)
2: ACE45EC4C5AE11E998CC136CC4F9AE02.roa (hash: g3qDe1sc3cQP3xfaLWtTraSUhZiLD4IiyWXHano3tHA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.crl
rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6dUacYtJZIFuou2XbmdAze6130.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 18:27:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3645 (0xe3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C532, serialNumber=0BA75469C62D259205BA8BB65DB99D0337BAD77D
Validity
Not Before: Oct 18 18:27:45 2025 GMT
Not After : Oct 25 18:27:45 2025 GMT
Subject: CN=68f3dc21-af05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:34:36:2a:0e:ac:7f:e0:23:fd:04:2b:70:
03:00:09:0e:63:6e:31:ee:53:8c:ed:59:2c:3a:ec:
ad:6d:0f:76:e0:c5:0c:e5:8b:3b:f7:67:09:2e:bc:
67:07:ae:64:3e:03:b6:77:6c:54:86:7c:5d:04:07:
7d:ce:49:36:1f:50:7c:4a:f8:2e:23:18:db:a7:45:
f9:b7:f8:f9:6b:6b:ee:9c:ef:05:e2:69:0a:88:26:
93:3f:a5:bd:2a:81:23:cc:ba:c4:13:01:b5:1f:37:
61:ec:68:55:36:1e:2f:a3:28:aa:36:dc:44:a2:c3:
68:92:7d:b9:e9:3c:1d:29:c3:75:9a:86:97:02:8f:
d0:ef:20:80:5c:ed:07:15:ec:4d:13:32:2a:eb:4f:
65:1b:d3:39:e4:01:85:89:36:f8:9d:54:8c:86:76:
2e:57:38:7b:96:88:c6:2a:98:d7:04:0a:6b:81:c6:
45:b7:10:e5:00:0a:1b:35:40:cd:5d:1f:08:34:dc:
89:89:54:c7:2f:59:7a:1e:78:46:cb:f0:5a:1b:eb:
42:7f:8f:bd:8c:1a:10:bb:0d:78:5a:19:47:56:3f:
1b:b1:ec:76:30:70:97:00:47:d2:b6:4e:65:b6:3a:
22:25:d4:fb:5e:42:f2:1d:a2:15:37:9c:08:aa:5b:
27:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:68:AE:24:D8:AA:B6:2E:56:B5:BC:98:26:5E:65:F4:F8:F4:E9:04
X509v3 Authority Key Identifier:
keyid:0B:A7:54:69:C6:2D:25:92:05:BA:8B:B6:5D:B9:9D:03:37:BA:D7:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6dUacYtJZIFuou2XbmdAze6130.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:39:f4:d7:80:23:55:e6:c9:7f:e1:53:03:84:d5:72:78:27:
2e:35:45:28:69:34:1e:29:34:bd:de:6c:ab:23:d9:0c:49:e3:
09:e4:de:ec:e2:33:a1:65:05:6e:42:ec:68:18:4e:0b:39:8c:
10:57:77:61:38:0b:b1:8a:23:53:09:eb:da:57:79:b1:ee:c6:
3f:00:11:b6:68:8d:20:12:48:3e:0d:36:27:5f:cf:c9:b5:3a:
10:61:ee:82:a1:52:db:c3:57:3a:87:b2:b8:63:dc:f1:c6:99:
9d:60:4f:f5:b5:3d:1c:59:17:5d:38:e2:24:07:1f:f3:56:0e:
22:37:2e:77:7b:d5:80:fe:d1:35:7c:8e:78:7d:ea:53:f7:f2:
b4:b9:cb:44:1b:4f:88:d5:0b:5f:8b:f0:b9:3a:ec:6b:b3:f8:
d1:c7:17:7c:18:5d:5b:c5:a0:8b:9a:3f:a1:38:b0:14:01:9a:
9d:21:c7:57:6d:34:5a:d7:8a:78:dc:5b:f4:2b:f6:39:5b:4d:
d9:5a:4d:b3:fc:e1:0f:5b:2b:14:c7:dc:eb:50:14:73:0f:80:
cb:79:bd:b4:11:df:83:cb:68:ae:40:e1:13:74:92:da:e0:62:
2b:96:6b:44:3e:31:cd:20:29:c4:e8:56:e6:e7:bf:e3:9e:ab:
fa:5b:dc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:24:51 2025 by rpki-client