
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
File: aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft (raw, json)
Hash identifier: QDO904y49TtSiKkTV/QZbrXDoKpsUrDIyM9rwarblWU=
Subject key identifier: 45:93:06:E9:6A:D7:B2:7B:3B:C1:23:AC:A7:89:0D:10:12:F4:03:4B
Authority key identifier: 69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38
Certificate issuer: /CN=A917C6D9/serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
Certificate serial: 0733
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
Manifest number: 072B
Signing time: Sat 18 Oct 2025 23:10:13 +0000
Manifest this update: Sat 18 Oct 2025 23:10:12 +0000
Manifest next update: Sat 25 Oct 2025 23:10:12 +0000
Files and hashes: 1: aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl (hash: Zzih9Ff0sVSx/p89AvWARBQdF8UbXQnyGbDwkr8wu44=)
2: 8F1629524FD411EB9F1A0673C4F9AE02.roa (hash: 0+1qqFR2dQAbs8bJZhkVHckF6TnHu8C+B8873r1KDqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl
rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 23:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1843 (0x733)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C6D9, serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
Validity
Not Before: Oct 18 23:10:12 2025 GMT
Not After : Oct 25 23:10:12 2025 GMT
Subject: CN=68f41e54-ddc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:de:bc:b3:6a:b2:aa:fe:d2:54:a4:0a:3d:e1:
e0:e6:48:35:d3:06:f9:74:75:d5:65:30:6c:bc:58:
2c:16:3c:7e:7b:7d:4e:08:1d:ff:4a:67:10:6f:9c:
cf:64:93:3c:9a:4d:05:18:d5:87:b6:e3:a4:2e:67:
47:71:01:2a:0c:de:c7:26:53:5c:73:54:e9:b8:3a:
33:a6:b9:40:fa:93:02:87:3e:47:63:45:88:43:4c:
c5:40:6e:18:b0:ab:89:06:64:20:56:7c:52:b3:97:
d2:a6:7d:c8:6d:9a:cf:3c:e9:2d:36:d1:37:92:a8:
1c:b8:a3:60:71:26:7a:b1:db:4d:26:94:83:7f:36:
54:bf:ff:1e:0d:7f:71:52:3e:16:e9:d7:78:09:c3:
11:46:65:89:cd:aa:32:bb:28:09:48:71:13:a8:c2:
84:c6:ae:29:0e:6d:ef:fd:95:ef:07:d7:56:11:05:
98:5d:ff:70:48:a9:43:00:52:ca:b7:b6:60:4b:1b:
f5:13:cc:bc:3d:f6:cb:52:3d:a0:ef:68:87:d3:e9:
65:76:f2:56:df:db:12:68:ec:29:7c:50:58:46:8e:
10:df:d3:8c:38:d2:e3:d8:cb:72:44:8f:3f:b1:58:
54:86:8f:a0:e4:12:e2:15:e8:07:15:44:0e:5a:08:
7b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:93:06:E9:6A:D7:B2:7B:3B:C1:23:AC:A7:89:0D:10:12:F4:03:4B
X509v3 Authority Key Identifier:
keyid:69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:68:42:0f:7d:59:8f:3d:f8:46:c8:dc:9d:24:ca:1e:56:72:
71:54:33:65:f8:be:30:be:34:df:a5:ec:ff:8e:66:a7:cd:eb:
37:ba:da:02:b7:05:4b:88:92:3f:c5:12:0e:5b:8e:87:8a:b4:
0f:04:46:34:43:1a:14:22:9f:c3:c2:5d:e8:8d:6c:1c:da:2d:
f1:e6:53:52:96:f4:0b:a3:ee:66:02:72:22:14:e3:d9:21:0d:
f0:ec:1a:81:47:7f:7f:8a:55:6f:2f:7e:ae:34:aa:0b:89:53:
8f:a3:2c:71:c6:33:30:d9:dc:42:20:c9:ba:9f:b0:27:f2:5f:
a3:a2:f4:4d:f5:2e:6d:22:e0:70:3e:7d:10:b7:be:31:35:49:
dc:9e:98:b6:7e:ac:73:f7:93:9f:f6:b6:62:17:e4:de:ed:98:
74:0d:01:b6:7e:23:9a:59:0c:82:e5:52:b6:b9:71:17:f1:6f:
53:f7:74:55:08:26:8b:1c:2c:7b:42:62:29:f2:a4:4c:5a:e0:
26:a2:e4:3f:cc:c7:fd:dd:02:a5:51:0a:6d:64:4d:2a:0b:bd:
de:bf:ab:58:43:e3:b7:1b:d0:ba:5f:d7:5c:6a:87:22:e2:64:
97:41:88:a2:98:b4:42:00:0d:af:bb:9f:55:68:fc:d2:f4:06:
a2:57:82:da
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0M2RDkxMTAvBgNVBAUTKDY5NjlEMTUwQUQwMzQ4MjA4MUJCMUJEN0MxM0JFNUYw
MERDNTNBMzgwHhcNMjUxMDE4MjMxMDEyWhcNMjUxMDI1MjMxMDEyWjAYMRYwFAYD
VQQDEw02OGY0MWU1NC1kZGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1d68s2qyqv7SVKQKPeHg5kg10wb5dHXVZTBsvFgsFjx+e31OCB3/SmcQb5zP
ZJM8mk0FGNWHtuOkLmdHcQEqDN7HJlNcc1TpuDozprlA+pMChz5HY0WIQ0zFQG4Y
sKuJBmQgVnxSs5fSpn3IbZrPPOktNtE3kqgcuKNgcSZ6sdtNJpSDfzZUv/8eDX9x
Uj4W6dd4CcMRRmWJzaoyuygJSHETqMKExq4pDm3v/ZXvB9dWEQWYXf9wSKlDAFLK
t7ZgSxv1E8y8PfbLUj2g72iH0+lldvJW39sSaOwpfFBYRo4Q39OMONLj2MtyRI8/
sVhUho+g5BLiFegHFUQOWgh7nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWTBulq
17J7O8EjrKeJDRAS9ANLMB8GA1UdIwQYMBaAFGlp0VCtA0gggbsb18E75fANxTo4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzZEOS82QTVGMTMyNDRG
RDExMUVCQUZCMTY3NkJDNEY5QUUwMi9hV25SVUswRFNDQ0J1eHZYd1R2bDhBM0ZP
amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FXblJVSzBEU0NDQnV4dlh3VHZsOEEzRk9qZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzZEOS82QTVGMTMyNDRGRDExMUVCQUZCMTY3NkJDNEY5QUUwMi9hV25SVUswRFND
Q0J1eHZYd1R2bDhBM0ZPamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAcaEIPfVmPPfhGyNydJMoeVnJxVDNl+L4wvjTfpez/jmanzes3utoC
twVLiJI/xRIOW46HirQPBEY0QxoUIp/Dwl3ojWwc2i3x5lNSlvQLo+5mAnIiFOPZ
IQ3w7BqBR39/ilVvL36uNKoLiVOPoyxxxjMw2dxCIMm6n7An8l+jovRN9S5tIuBw
Pn0Qt74xNUncnpi2fqxz95Of9rZiF+Te7Zh0DQG2fiOaWQyC5VK2uXEX8W9T93RV
CCaLHCx7QmIp8qRMWuAmouQ/zMf93QKlUQptZE0qC73ev6tYQ+O3G9C6X9dcaoci
4mSXQYiimLRCAA2vu59VaPzS9AaiV4La
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:11:20 2025 by rpki-client