
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft
File: Ym10UmNzXXYYZJvVMYyB-6it3MA.mft (raw, json)
Hash identifier: t8FbyaXViobSYgM+YaDaggACAKkKTVFFlHg/hPpW5oQ=
Subject key identifier: BD:72:55:BD:BF:BD:B5:3C:31:26:D5:9B:59:24:C2:B7:CC:C4:0F:F0
Authority key identifier: 62:6D:74:52:63:73:5D:76:18:64:9B:D5:31:8C:81:FB:A8:AD:DC:C0
Certificate issuer: /CN=A916B7FC/serialNumber=626D745263735D7618649BD5318C81FBA8ADDCC0
Certificate serial: 6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym10UmNzXXYYZJvVMYyB-6it3MA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft
Manifest number: 6F
Signing time: Sun 19 Oct 2025 10:14:47 +0000
Manifest this update: Sun 19 Oct 2025 10:14:47 +0000
Manifest next update: Sun 26 Oct 2025 10:14:46 +0000
Files and hashes: 1: Ym10UmNzXXYYZJvVMYyB-6it3MA.crl (hash: fC/S2S8D5d0pnB9mfTu1wM/gHdyMXWTlzKldFoAtjts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.crl
rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym10UmNzXXYYZJvVMYyB-6it3MA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 10:14:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B7FC, serialNumber=626D745263735D7618649BD5318C81FBA8ADDCC0
Validity
Not Before: Oct 19 10:14:47 2025 GMT
Not After : Oct 26 10:14:46 2025 GMT
Subject: CN=68f4ba17-24bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:ef:eb:6a:2d:08:b5:63:07:c5:04:9d:fe:
6a:cc:1f:ff:09:da:61:be:39:a8:9e:51:69:a5:04:
ce:de:85:ff:1e:b6:ba:74:fb:ae:ed:81:05:ab:77:
6c:a2:0a:a5:b9:d0:af:44:83:e0:ac:33:d8:a1:b5:
c1:13:5c:36:dd:71:d5:0d:d6:6a:cd:ff:db:d2:16:
c0:86:b3:a2:ca:01:3a:28:06:7e:49:bf:f5:01:85:
c9:2b:fd:e8:f7:cb:65:06:db:9a:e1:45:96:b1:c6:
06:56:60:a8:d8:9a:d0:1c:b0:84:d0:1f:59:a6:2a:
e4:bd:e2:f2:1b:e5:62:77:18:f4:5d:a1:ed:a7:45:
30:81:bc:2b:fb:ef:12:c2:ab:a8:72:c3:5c:7b:6a:
e7:fc:09:54:b7:88:d9:d4:a4:4c:6d:6f:5c:4c:a1:
eb:20:02:ae:1d:39:8c:9a:fb:59:4a:ad:d5:ed:fd:
a2:7f:e4:e3:9f:a6:04:c5:75:f8:49:27:34:8e:54:
ef:16:76:ef:f1:20:a3:bb:20:af:b3:dc:47:1e:87:
e7:50:86:90:6d:67:7f:94:02:10:63:38:f6:4a:21:
49:55:c7:16:f3:e2:87:5e:e6:62:03:51:d8:be:49:
82:93:14:22:e1:04:e2:66:44:15:f1:20:38:4f:ce:
36:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:72:55:BD:BF:BD:B5:3C:31:26:D5:9B:59:24:C2:B7:CC:C4:0F:F0
X509v3 Authority Key Identifier:
keyid:62:6D:74:52:63:73:5D:76:18:64:9B:D5:31:8C:81:FB:A8:AD:DC:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym10UmNzXXYYZJvVMYyB-6it3MA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:f0:3a:19:1f:f0:34:f9:ab:9b:b0:26:71:15:94:22:03:21:
8b:f4:63:f6:6d:9c:6b:37:ba:9c:9b:bd:a1:ae:e5:6d:c4:8e:
0a:80:3a:82:20:25:33:9f:d9:54:b6:44:84:a4:9e:8d:6a:fc:
02:c5:ad:c5:1e:57:c4:d3:13:32:72:69:1d:44:1a:a2:57:8d:
3c:28:75:ab:b4:f9:c3:34:46:59:cd:bc:35:37:2b:4c:40:91:
dd:f6:f6:1f:cc:82:33:3d:43:56:0c:ee:5a:a0:71:bc:84:f3:
0e:0f:2d:d8:63:44:53:da:1f:25:b5:75:30:43:de:e2:dc:a2:
ee:3b:8e:b5:c4:2e:4a:4b:92:bb:4c:25:02:8c:16:b3:33:63:
59:a9:d3:70:d4:69:73:d0:34:01:6b:00:af:6b:54:7d:df:79:
9d:81:de:81:18:bb:a0:cb:52:54:72:dc:f1:45:82:20:2f:8c:
ab:f7:8b:27:90:13:1e:f3:c6:f9:48:6e:b5:01:19:c8:4b:ee:
07:15:6f:b4:d4:66:12:bf:fc:8b:d0:6b:6b:68:7b:f6:70:99:
7a:a5:09:33:97:3b:28:a3:e7:e7:42:a4:69:ab:f5:f8:37:d7:
0c:02:5e:3b:6f:92:45:ff:e2:50:a2:79:3d:12:f2:76:9e:ba:
7e:ad:20:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:59:51 2025 by rpki-client