
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.mft
File: j6qb2dr2dE3JnQBbAkor2_EAdkE.mft (raw, json)
Hash identifier: zF53eHkJNxpI4PcoPvcCdsNgLpeDiak7FyxUUAcz7lk=
Subject key identifier: D3:44:25:62:98:1B:8A:0E:35:98:6F:48:0E:DD:24:26:E2:2A:1C:A9
Authority key identifier: 8F:AA:9B:D9:DA:F6:74:4D:C9:9D:00:5B:02:4A:2B:DB:F1:00:76:41
Certificate issuer: /CN=A9113BB0/serialNumber=8FAA9BD9DAF6744DC99D005B024A2BDBF1007641
Certificate serial: 58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6qb2dr2dE3JnQBbAkor2_EAdkE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.mft
Manifest number: 58
Signing time: Wed 05 Nov 2025 07:21:41 +0000
Manifest this update: Wed 05 Nov 2025 07:21:40 +0000
Manifest next update: Wed 12 Nov 2025 07:21:40 +0000
Files and hashes: 1: j6qb2dr2dE3JnQBbAkor2_EAdkE.crl (hash: pUjmEsZVvzy0YtjT7NEi1+N/IpZdr3MHHVIHJpWthoA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.crl
rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6qb2dr2dE3JnQBbAkor2_EAdkE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 07:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113BB0, serialNumber=8FAA9BD9DAF6744DC99D005B024A2BDBF1007641
Validity
Not Before: Nov 5 07:21:40 2025 GMT
Not After : Nov 12 07:21:40 2025 GMT
Subject: CN=690afb04-e129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:61:5f:7e:44:62:64:4e:01:46:f6:01:7c:
1b:54:2d:85:8e:c9:78:c1:71:d5:8e:b2:62:4b:5a:
d1:b4:ea:b1:57:c5:0f:51:b0:9d:7e:fa:de:31:2c:
b7:e5:d1:ea:f7:79:ed:8b:a1:c1:a7:49:6a:f6:aa:
72:65:6b:93:15:3d:6f:26:c4:7b:a3:99:f7:3d:b6:
cd:06:fd:39:ce:02:79:4f:0d:a5:ea:5b:ee:c7:63:
2e:e1:33:91:5a:a4:5a:b5:01:90:74:7e:6c:6e:3d:
cf:0b:0a:c7:c3:e0:00:2c:1d:7e:73:e3:04:ff:3b:
91:b4:76:c6:58:cf:fa:c5:b8:db:3f:ce:52:f8:6b:
97:16:7e:6a:70:02:b4:fb:3f:c4:3e:46:d1:92:ec:
81:26:9c:c1:4a:05:1c:13:82:50:9d:74:50:b4:7d:
16:b6:49:f2:64:a0:57:9c:08:e8:29:60:51:33:51:
9f:6a:25:fc:b5:1a:bd:c6:42:96:08:41:71:88:5f:
25:e1:b5:73:3e:af:8f:7d:cb:6e:de:41:42:a3:b6:
74:ef:9d:80:5f:4c:32:31:ce:b6:7f:9c:ea:3d:1f:
72:4b:ac:58:5e:eb:13:db:5f:e2:62:af:75:3c:99:
23:d7:2b:68:8e:b9:0e:89:9b:07:e2:06:3a:61:1b:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:44:25:62:98:1B:8A:0E:35:98:6F:48:0E:DD:24:26:E2:2A:1C:A9
X509v3 Authority Key Identifier:
keyid:8F:AA:9B:D9:DA:F6:74:4D:C9:9D:00:5B:02:4A:2B:DB:F1:00:76:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6qb2dr2dE3JnQBbAkor2_EAdkE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BB0/A88615EE323A11F0BF9E1D36C4F9AE02/j6qb2dr2dE3JnQBbAkor2_EAdkE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:79:0d:cc:bb:a8:37:25:97:82:2c:e7:3e:ca:68:28:94:e9:
f6:34:7f:31:5a:62:c2:1d:44:0e:30:15:12:55:ce:3f:fd:48:
a7:e1:f8:c0:d6:98:ce:72:28:9b:fa:0e:9d:ab:3d:fb:4c:26:
16:bb:d4:cb:d9:8b:92:f7:f7:40:2b:8e:f1:b7:5b:90:be:d0:
e1:57:1c:b1:73:b2:1f:c6:5e:4c:f6:f7:d5:11:d6:b3:6b:63:
d6:41:97:e0:29:2c:eb:e1:8d:0b:8b:1e:4f:8d:1a:24:c6:99:
61:a5:9a:8f:1c:7e:c5:6e:2f:93:4b:94:10:0e:af:21:d3:95:
15:8e:98:37:d5:e8:9d:b9:34:63:64:5f:ae:f1:c2:05:9d:e7:
0b:2c:81:cb:12:ba:bf:68:89:5b:ee:03:6f:3c:02:2b:f6:80:
12:49:2e:b8:ef:bc:be:58:01:18:9e:52:b4:00:34:0e:d0:c8:
cc:c1:93:a1:48:81:d8:ad:61:f7:d6:8c:e7:16:9c:64:71:61:
6c:f7:6c:25:ee:fa:a6:36:d8:ff:32:c4:59:29:07:26:49:66:
b4:01:d7:b7:93:c5:e9:a5:e8:2d:05:6e:51:c7:15:08:06:75:
71:59:b5:4c:1d:6f:b1:fa:7e:59:ac:c2:02:69:b8:fb:ca:7e:
62:38:80:7f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
M0JCMDExMC8GA1UEBRMoOEZBQTlCRDlEQUY2NzQ0REM5OUQwMDVCMDI0QTJCREJG
MTAwNzY0MTAeFw0yNTExMDUwNzIxNDBaFw0yNTExMTIwNzIxNDBaMBgxFjAUBgNV
BAMTDTY5MGFmYjA0LWUxMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+QGFffkRiZE4BRvYBfBtULYWOyXjBcdWOsmJLWtG06rFXxQ9RsJ1++t4xLLfl
0er3ee2LocGnSWr2qnJla5MVPW8mxHujmfc9ts0G/TnOAnlPDaXqW+7HYy7hM5Fa
pFq1AZB0fmxuPc8LCsfD4AAsHX5z4wT/O5G0dsZYz/rFuNs/zlL4a5cWfmpwArT7
P8Q+RtGS7IEmnMFKBRwTglCddFC0fRa2SfJkoFecCOgpYFEzUZ9qJfy1Gr3GQpYI
QXGIXyXhtXM+r499y27eQUKjtnTvnYBfTDIxzrZ/nOo9H3JLrFhe6xPbX+Jir3U8
mSPXK2iOuQ6JmwfiBjphG3ZdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU00QlYpgb
ig41mG9IDt0kJuIqHKkwHwYDVR0jBBgwFoAUj6qb2dr2dE3JnQBbAkor2/EAdkEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQkIwL0E4ODYxNUVFMzIz
QTExRjBCRjlFMUQzNkM0RjlBRTAyL2o2cWIyZHIyZEUzSm5RQmJBa29yMl9FQWRr
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvajZxYjJkcjJkRTNKblFCYkFrb3IyX0VBZGtFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz
QkIwL0E4ODYxNUVFMzIzQTExRjBCRjlFMUQzNkM0RjlBRTAyL2o2cWIyZHIyZEUz
Sm5RQmJBa29yMl9FQWRrRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAMB5Dcy7qDcll4Is5z7KaCiU6fY0fzFaYsIdRA4wFRJVzj/9SKfh+MDW
mM5yKJv6Dp2rPftMJha71MvZi5L390ArjvG3W5C+0OFXHLFzsh/GXkz299UR1rNr
Y9ZBl+ApLOvhjQuLHk+NGiTGmWGlmo8cfsVuL5NLlBAOryHTlRWOmDfV6J25NGNk
X67xwgWd5wssgcsSur9oiVvuA288Aiv2gBJJLrjvvL5YARieUrQANA7QyMzBk6FI
gditYffWjOcWnGRxYWz3bCXu+qY22P8yxFkpByZJZrQB17eTxeml6C0FblHHFQgG
dXFZtUwdb7H6flmswgJpuPvKfmI4gH8=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:23:44 2025 by rpki-client