
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft
File: 6qKbMnjqfy5or_PZQPu17Kn41WA.mft (raw, json)
Hash identifier: 2k+FVlg5dEWLZRcabuRNrJaEzPPhfUCpVta/meCgWSI=
Subject key identifier: 52:29:ED:5A:8C:A2:5A:85:E8:CE:F8:6B:90:7E:DB:D5:03:55:4E:30
Authority key identifier: EA:A2:9B:32:78:EA:7F:2E:68:AF:F3:D9:40:FB:B5:EC:A9:F8:D5:60
Certificate issuer: /CN=A9185339/serialNumber=EAA29B3278EA7F2E68AFF3D940FBB5ECA9F8D560
Certificate serial: 0133
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft
Manifest number: 012F
Signing time: Sun 19 Oct 2025 07:22:30 +0000
Manifest this update: Sun 19 Oct 2025 07:22:29 +0000
Manifest next update: Sun 26 Oct 2025 07:22:29 +0000
Files and hashes: 1: 6qKbMnjqfy5or_PZQPu17Kn41WA.crl (hash: +r3GfEr641BO4mpb1Nb/2lvw2xBK1pISEHc3Nq05m6Q=)
2: 57410984DB6811EEA3A06625C4F9AE02.roa (hash: PjA6/y3/URFKtBBGqwXOyXSRNtGtQief3EK0IMYpEOs=)
3: 68005612A19211EF9444186DC4F9AE02.roa (hash: 57t9aslQBqVubnpXgZYR9ppPEM+QHeUVCTd2/IZVpT4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.crl
rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 07:22:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 307 (0x133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185339, serialNumber=EAA29B3278EA7F2E68AFF3D940FBB5ECA9F8D560
Validity
Not Before: Oct 19 07:22:29 2025 GMT
Not After : Oct 26 07:22:29 2025 GMT
Subject: CN=68f491b6-5732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fd:49:db:0f:c4:be:b9:98:a5:a8:f6:b3:6e:
4c:d5:0a:df:2b:3e:62:ed:db:9f:37:7e:b9:fc:a2:
f2:78:79:25:6d:32:c4:10:ca:71:7d:12:69:89:af:
4f:35:0a:51:2f:6e:dc:ae:e9:d7:5c:1b:9b:43:c3:
ff:22:41:f9:86:f0:68:fa:fc:05:83:df:1a:16:e2:
28:a1:38:cb:29:ff:af:1e:02:64:4b:3e:4c:88:0d:
b2:49:b0:8b:a3:ea:1e:59:58:a5:ce:5a:a1:77:18:
eb:00:30:21:2e:8b:86:cd:59:23:a0:72:ae:ad:33:
a3:48:41:b5:4c:03:79:02:1b:80:74:e3:f4:a4:8a:
77:87:00:35:57:77:42:6b:c8:97:c2:01:b5:2f:cd:
15:cd:e7:af:f7:ff:20:35:77:96:7e:7b:75:75:5f:
48:20:c6:50:e6:81:62:c2:1c:23:09:3e:00:10:7c:
6f:f2:c1:b1:e9:39:c8:a0:e0:0a:87:99:1f:40:42:
78:b1:03:6d:ca:0c:8f:bd:52:82:8b:f4:43:4d:80:
cb:09:d4:02:51:ed:38:23:33:21:5c:2e:26:c8:ad:
ae:57:73:93:b2:04:17:16:ce:30:94:1e:80:91:69:
34:03:03:83:fe:6f:d0:50:10:ae:02:a0:f6:76:03:
d7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:29:ED:5A:8C:A2:5A:85:E8:CE:F8:6B:90:7E:DB:D5:03:55:4E:30
X509v3 Authority Key Identifier:
keyid:EA:A2:9B:32:78:EA:7F:2E:68:AF:F3:D9:40:FB:B5:EC:A9:F8:D5:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:05:5b:b2:f5:96:68:0d:0f:0f:1b:89:d6:f6:1c:41:77:ed:
5f:ee:63:58:ed:40:80:1b:38:cb:ab:9e:e9:fc:10:c1:5f:52:
7f:66:aa:cf:44:c5:10:eb:1d:7c:89:e2:3f:24:45:f6:d9:ed:
7f:be:ce:da:30:d3:5c:ac:c0:12:2e:67:a5:7b:e5:59:23:b9:
0e:94:eb:d1:72:5c:ec:49:82:3d:51:32:58:2c:9d:cf:df:5f:
c8:44:28:35:e6:a4:ed:94:d3:cf:b0:76:d4:71:8a:62:a4:c9:
4e:e3:cd:f2:a1:46:a6:92:89:56:ed:96:de:99:7d:ba:72:ab:
00:b4:6a:91:9c:a2:70:9c:76:d8:f4:7d:d6:2e:26:5f:21:a4:
62:7b:78:82:47:8c:bb:f6:95:8e:ed:4a:f4:6f:1c:90:01:cd:
0f:14:4e:b8:3f:30:f7:12:59:48:51:07:05:a1:15:37:3c:38:
53:4f:dd:e2:ae:34:48:ee:86:8c:71:f6:61:27:0d:8e:b2:d8:
a7:00:ec:d6:9f:a9:c5:4a:44:c6:3a:33:cc:2d:cb:e6:bc:83:
6b:4a:5e:56:93:e5:b3:50:6a:e7:6e:0c:de:5e:62:d4:da:22:
f3:8a:41:31:76:0c:57:6c:bc:c4:4b:5d:8d:2f:1e:06:59:62:
d0:dd:31:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:25:28 2025 by rpki-client